$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/360171db-8756-3fd9-993f-8eb63be0f769.roa File: 360171db-8756-3fd9-993f-8eb63be0f769.roa (raw, json) Hash identifier: UroOHf1eXv4tFcAo9MpFlOSwaHOJ7HtBRf99sDHfzW8= Subject key identifier: E6:A1:7F:86:87:04:AE:8A:B9:42:1D:24:CA:C0:9C:AC:07:E3:09:A1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF2E755233EB03EC5DF600A40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/360171db-8756-3fd9-993f-8eb63be0f769.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 0 IP address blocks: 38.88.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:55:23:3e:b0:3e:c5:df:60:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=34f5d0c3-6a70-4cf3-ab1c-6467924ce42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b4:4a:20:63:c5:af:ca:1d:6c:22:1d:6b:5a: 47:1c:6b:81:9a:3c:c8:ac:fc:27:91:32:4f:02:76: 49:3f:d6:2a:0c:34:d3:3d:16:18:25:51:0f:60:54: 7e:45:ad:60:cb:14:98:c3:f0:d8:32:d8:01:66:b4: c6:3e:7a:30:93:1a:b5:6e:0a:56:20:a6:22:8b:03: bf:e1:3e:80:d9:83:67:ee:09:ac:cb:e0:17:76:11: d7:3a:c3:f1:35:27:b2:84:c6:bb:7a:a0:8e:8d:ba: 77:fd:b9:e2:f2:8b:5b:be:91:c3:9c:f7:ce:a5:55: c5:a9:53:0e:0a:80:e7:44:f7:58:35:ca:e2:cd:cd: 87:d2:c2:b6:c4:28:bc:60:4d:56:5d:4f:04:97:3e: 37:3d:68:c5:5c:a4:3b:8a:03:e0:90:e0:a2:3d:a9: 76:b9:fd:23:8d:0d:50:34:06:42:35:fd:bd:e2:e7: 1b:09:e8:b6:4c:69:3d:43:26:20:4f:38:28:bd:83: 2a:77:ad:ef:f1:09:39:75:2a:a3:ec:b8:96:72:7c: 4c:69:59:4f:5a:10:6f:88:46:d9:59:4e:91:6f:9a: 4b:3b:2d:99:12:7f:e0:6f:54:13:19:64:9c:97:51: 78:ec:da:73:9e:b5:b5:aa:70:f4:24:83:98:cb:9b: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A1:7F:86:87:04:AE:8A:B9:42:1D:24:CA:C0:9C:AC:07:E3:09:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/360171db-8756-3fd9-993f-8eb63be0f769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.88.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:e1:d7:2e:bd:17:94:cd:47:ce:76:b5:91:19:a3:88:1a:78: e4:db:5a:d4:a2:55:a5:35:88:44:3b:3d:7b:83:fa:b5:3d:c3: 3d:e8:e4:6c:7c:8e:aa:be:b7:52:8e:cc:bd:4d:4c:31:20:5e: 09:0e:c9:bc:2a:25:94:ce:b7:57:76:f8:a4:de:5b:17:a3:01: 34:0c:86:34:db:28:e8:f9:54:05:66:c5:3a:48:1f:c9:7e:7f: 75:99:78:81:86:67:ff:d7:03:8f:d6:29:4a:37:a4:4b:5e:88: 05:7f:74:cd:51:45:67:be:fa:f8:3f:4d:99:9d:77:64:f0:06: fd:fa:ea:2c:0b:74:b8:ef:07:41:aa:c6:0c:17:95:e2:4b:e3: da:5b:20:0b:0a:65:1b:1d:79:49:1b:e3:ea:1f:3f:46:54:76: 35:dc:6c:5c:93:6d:06:34:5f:5c:d6:c5:da:ab:d5:06:ac:01: 46:92:a4:8b:72:62:ff:19:dc:4f:f4:cd:e3:6f:63:00:0c:b8: f1:59:8e:91:77:51:15:58:cf:84:50:bb:8c:f7:7d:2d:b0:94: 72:48:6b:e7:3d:76:17:69:10:35:ff:10:8e:28:c0:cb:4c:80: f2:60:5f:c4:2b:94:d0:cb:49:08:3d:8b:bf:c1:c2:7d:04:7e: 05:ca:4f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51UjPrA+xd9gCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzRmNWQwYzMtNmE3MC00Y2YzLWFiMWMtNjQ2NzkyNGNlNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7RKIGPFr8odbCIda1pHHGuBmjzIrPwnkTJP AnZJP9YqDDTTPRYYJVEPYFR+Ra1gyxSYw/DYMtgBZrTGPnowkxq1bgpWIKYiiwO/ 4T6A2YNn7gmsy+AXdhHXOsPxNSeyhMa7eqCOjbp3/bni8otbvpHDnPfOpVXFqVMO CoDnRPdYNcrizc2H0sK2xCi8YE1WXU8Elz43PWjFXKQ7igPgkOCiPal2uf0jjQ1Q NAZCNf294ucbCei2TGk9QyYgTzgovYMqd63v8Qk5dSqj7LiWcnxMaVlPWhBviEbZ WU6Rb5pLOy2ZEn/gb1QTGWScl1F47NpznrW1qnD0JIOYy5sp6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOahf4aHBK6KuUIdJMrAnKwH4wmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzYwMTcxZGItODc1Ni0z ZmQ5LTk5M2YtOGViNjNiZTBmNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlh/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7h1y69F5TNR852tZEZo4gaeOTbWtSiVaU1iEQ7PXuD+rU9wz3o5Gx8 jqq+t1KOzL1NTDEgXgkOybwqJZTOt1d2+KTeWxejATQMhjTbKOj5VAVmxTpIH8l+ f3WZeIGGZ//XA4/WKUo3pEteiAV/dM1RRWe++vg/TZmdd2TwBv366iwLdLjvB0Gq xgwXleJL49pbIAsKZRsdeUkb4+ofP0ZUdjXcbFyTbQY0X1zWxdqr1QasAUaSpIty Yv8Z3E/0zeNvYwAMuPFZjpF3URVYz4RQu4z3fS2wlHJIa+c9dhdpEDX/EI4owMtM gPJgX8QrlNDLSQg9i7/Bwn0EfgXKTzI= -----END CERTIFICATE-----Generated at Fri Sep 11 13:55:56 2026 by rpki-client