$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33747099-db5f-32ff-8423-b291c8278e27.roa File: 33747099-db5f-32ff-8423-b291c8278e27.roa (raw, json) Hash identifier: 1xT2hkYmdopgdwdPntReTxZHUG6vLBpNHbgN7tvKLnQ= Subject key identifier: 73:D6:C2:35:69:11:14:96:32:B7:8B:FD:09:EA:08:7C:50:C0:A6:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F10BE88FAA48038DFA603F0C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33747099-db5f-32ff-8423-b291c8278e27.roa Signing time: Fri 04 Sep 2026 17:32:17 +0000 ROA not before: Fri 04 Sep 2026 17:32:17 +0000 ROA not after: Thu 03 Dec 2026 18:32:17 +0000 asID: 275752 IP address blocks: 38.211.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:be:88:fa:a4:80:38:df:a6:03:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 4 17:32:17 2026 GMT Not After : Dec 3 18:32:17 2026 GMT Subject: CN=3d635a0a-d567-4614-9d27-195facdb3881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:7d:88:e2:c6:8a:cf:1d:98:0e:74:8a:18: 71:e9:32:29:4d:00:5a:62:e4:72:14:7f:4b:1a:ca: 18:3d:9f:81:25:2f:91:83:b9:70:c2:5a:c9:5d:f5: 3a:7e:69:2e:28:f1:33:b1:00:09:69:03:b3:af:b1: ec:7c:95:9c:e0:2f:2b:e5:89:0a:e2:bb:1d:5c:be: a6:97:7b:ba:9b:8b:7b:d0:a7:42:9f:4c:0e:a9:88: 3b:a7:b6:6f:40:6b:57:67:0f:39:0d:c0:7e:a8:2a: 02:38:ed:98:29:29:67:27:bd:0a:91:53:0e:43:c8: 8f:49:d7:9b:44:fe:5e:5f:d0:d1:d3:13:f3:5c:70: 12:56:64:74:1b:1b:b1:95:6c:91:98:47:b3:4a:cb: 41:6c:86:8b:cc:22:86:a7:43:7d:36:d4:6c:12:cf: e8:0e:be:29:dc:fc:69:22:1a:3c:40:14:ad:fb:85: 0b:05:1e:c6:21:80:f1:5d:42:df:72:79:3f:83:3c: 76:8e:7c:3d:a3:5a:c7:9c:61:9a:f7:73:ba:5b:46: 4d:01:20:7d:34:b6:18:36:6f:a5:62:5b:96:68:c5: 32:12:0a:f1:5f:19:3a:20:aa:5d:df:ed:30:31:97: 69:ce:c8:ec:8c:7a:0f:ba:6e:a3:7b:26:27:43:2a: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D6:C2:35:69:11:14:96:32:B7:8B:FD:09:EA:08:7C:50:C0:A6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33747099-db5f-32ff-8423-b291c8278e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:24:7b:dc:50:17:39:0c:6f:05:ea:d8:ea:ef:47:dd:3f:03: 9f:1f:7d:35:8a:ac:e2:81:72:9d:aa:c1:91:66:85:de:fe:29: 4d:14:cf:2c:b3:c4:4d:c3:58:17:09:9d:e7:83:5e:d3:90:28: 1e:7a:b8:18:01:76:7f:07:e6:d4:87:fe:b9:96:11:6d:2c:2c: 5b:10:a3:0b:b4:08:85:69:c9:b5:e0:ba:ff:06:5f:6e:62:c5: 2a:b9:88:84:e5:83:9c:0e:f5:66:79:ab:12:9b:7e:c3:f5:c8: 00:cc:66:57:14:ef:e9:c8:d4:65:6d:12:cd:2f:96:39:b0:94: cd:4a:11:26:7e:22:2c:c8:b1:a5:e0:6a:91:46:50:1e:21:a4: 7e:c8:eb:f0:1d:31:ae:9c:2a:97:4b:a0:4b:a5:9a:04:13:fd: 59:83:4d:ba:72:ba:8a:25:c2:b1:ec:c3:b9:91:d9:7a:39:92: 37:e7:07:c9:45:fd:81:f3:fa:cb:49:79:3b:78:79:37:8f:af: 39:34:17:b8:7c:e9:63:5f:c6:96:11:5e:f3:7d:2c:81:34:df: 7f:59:8d:be:50:f9:06:1a:58:4d:59:ac:ba:1f:21:8e:a0:94: 3c:c2:d6:57:8d:02:16:b9:6f:86:9b:3b:b3:3a:b9:0b:cf:0f: 87:de:99:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Qvoj6pIA436YD8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNDE3MzIxN1oXDTI2MTIwMzE4MzIxN1owLzEtMCsGA1UEAxMk M2Q2MzVhMGEtZDU2Ny00NjE0LTlkMjctMTk1ZmFjZGIzODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgJ9iOLGis8dmA50ihhx6TIpTQBaYuRyFH9L GsoYPZ+BJS+Rg7lwwlrJXfU6fmkuKPEzsQAJaQOzr7HsfJWc4C8r5YkK4rsdXL6m l3u6m4t70KdCn0wOqYg7p7ZvQGtXZw85DcB+qCoCOO2YKSlnJ70KkVMOQ8iPSdeb RP5eX9DR0xPzXHASVmR0GxuxlWyRmEezSstBbIaLzCKGp0N9NtRsEs/oDr4p3Pxp Iho8QBSt+4ULBR7GIYDxXULfcnk/gzx2jnw9o1rHnGGa93O6W0ZNASB9NLYYNm+l YluWaMUyEgrxXxk6IKpd3+0wMZdpzsjsjHoPum6jeyYnQyq31wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPWwjVpERSWMreL/QnqCHxQwKaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzM3NDcwOTktZGI1Zi0z MmZmLTg0MjMtYjI5MWM4Mjc4ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJtPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMke9xQFzkMbwXq2OrvR90/A58ffTWKrOKBcp2qwZFmhd7+KU0Uzyyz xE3DWBcJneeDXtOQKB56uBgBdn8H5tSH/rmWEW0sLFsQowu0CIVpybXguv8GX25i xSq5iITlg5wO9WZ5qxKbfsP1yADMZlcU7+nI1GVtEs0vljmwlM1KESZ+IizIsaXg apFGUB4hpH7I6/AdMa6cKpdLoEulmgQT/VmDTbpyuoolwrHsw7mR2Xo5kjfnB8lF /YHz+stJeTt4eTePrzk0F7h86WNfxpYRXvN9LIE0339Zjb5Q+QYaWE1ZrLofIY6g lDzC1leNAha5b4abO7M6uQvPD4femVE= -----END CERTIFICATE-----Generated at Fri Sep 11 13:04:38 2026 by rpki-client