$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa File: 3689bc33-1247-3591-afb5-2336487c7f3b.roa (raw, json) Hash identifier: Dqg0ZPgQ007LINkdg2d49QcPwl4JiMJGWHFb9dKnMgs= Subject key identifier: F7:0F:5C:3D:E9:DC:CB:B6:31:A9:D1:90:8D:2F:4E:74:B0:ED:91:8C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0D6CD4D50E72C50F86689440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 136841 IP address blocks: 38.86.221.0/24 maxlen: 24 206.85.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d4:d5:0e:72:c5:0f:86:68:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=6ac6d6c1-87d2-4b10-86b6-b54a1965c4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:62:3c:37:d8:42:62:1d:0e:da:91:9c:c1: 22:78:4c:d7:00:92:a5:5e:6e:bc:b6:35:5a:f0:94: c2:c3:ab:3b:f4:45:0a:7b:8e:78:41:c7:e7:88:27: 94:f5:7b:b2:6c:a4:5a:86:25:3c:bf:22:6f:5f:52: 98:bc:72:9b:a1:32:9f:5d:bd:d4:a9:5d:92:fc:c4: ed:3c:57:05:5f:5c:f7:53:28:fd:4e:ac:b0:40:23: aa:3d:0f:6a:12:ee:d2:8e:ae:6b:81:2b:a5:d6:07: 21:44:e3:49:39:a3:df:61:a9:dc:ed:98:08:19:b5: 31:da:8c:9b:42:f0:42:e4:d6:f7:ab:9a:e7:76:56: 7d:f4:b1:13:43:91:51:b2:a6:d8:80:6d:53:50:a9: 50:46:85:e0:eb:52:f6:b5:1b:0f:ec:23:80:c8:98: 44:d7:24:72:db:fb:59:cb:f9:66:34:1a:99:ab:68: 32:1b:90:c9:9c:62:f4:a9:75:fc:1d:20:a3:6e:19: a6:6a:ca:75:46:63:20:6d:5a:46:4e:37:35:7b:c8: ec:ad:6e:1e:d2:67:fc:82:ff:94:3d:a0:a4:c6:a4: 13:49:61:65:d1:18:fe:5e:08:f8:96:f8:f1:a7:cc: cf:a5:72:8e:6e:15:43:a5:d8:ab:4e:38:ee:5d:dd: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0F:5C:3D:E9:DC:CB:B6:31:A9:D1:90:8D:2F:4E:74:B0:ED:91:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.221.0/24 206.85.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:67:5b:aa:73:cd:9a:e4:92:eb:85:0b:a5:54:ad:35:60:8a: c9:f1:09:cd:c0:7a:b1:35:72:0c:2c:37:73:08:b3:ec:32:c6: 1c:eb:3b:f7:1f:97:4e:86:bc:f3:7d:fd:73:2b:5f:79:f4:a9: 15:ec:fa:9b:d1:31:24:f6:f0:2c:d0:56:fb:5a:11:9c:8d:3b: 8f:6a:f1:d2:40:04:f8:c2:92:d2:b8:22:72:c7:23:d8:57:28: ac:b2:28:92:7c:67:ff:0d:f9:ef:c1:83:7b:ad:88:b8:ea:9a: bf:48:be:b1:22:14:04:d9:30:79:44:23:52:08:03:ab:5c:b1: 68:74:9a:f9:d1:c9:88:4f:20:00:de:9b:1e:1f:8d:27:31:a2: cb:48:73:6e:49:8c:87:1d:43:3d:91:6c:eb:ff:78:1d:48:8b: d1:df:6f:9c:dd:bf:73:b5:5e:45:df:06:e9:48:7d:5b:0b:58: e7:05:8a:84:c1:98:7c:a3:a8:2b:61:10:68:32:7f:fb:b7:18: 1b:2e:02:09:6b:0f:08:db:e5:65:c4:42:80:3a:53:2d:84:06: 3c:8e:b9:6d:b7:60:83:a6:40:74:b5:ab:b1:cd:5d:c5:cb:d4: cb:85:6f:b0:3c:ae:7d:63:c0:1d:f9:47:03:dc:db:cc:b3:b4: 3d:7a:d2:49 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8NbNTVDnLFD4ZolEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NmFjNmQ2YzEtODdkMi00YjEwLTg2YjYtYjU0YTE5NjVjNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP5iPDfYQmIdDtqRnMEieEzXAJKlXm68tjVa 8JTCw6s79EUKe454QcfniCeU9XuybKRahiU8vyJvX1KYvHKboTKfXb3UqV2S/MTt PFcFX1z3Uyj9TqywQCOqPQ9qEu7Sjq5rgSul1gchRONJOaPfYanc7ZgIGbUx2oyb QvBC5Nb3q5rndlZ99LETQ5FRsqbYgG1TUKlQRoXg61L2tRsP7COAyJhE1yRy2/tZ y/lmNBqZq2gyG5DJnGL0qXX8HSCjbhmmasp1RmMgbVpGTjc1e8jsrW4e0mf8gv+U PaCkxqQTSWFl0Rj+Xgj4lvjxp8zPpXKObhVDpdirTjjuXd1YhwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPcPXD3p3Mu2ManRkI0vTnSw7ZGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzY4OWJjMzMtMTI0Ny0z NTkxLWFmYjUtMjMzNjQ4N2M3ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJlbdAwQA zlUZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE9nW6pzzZrkkuuFC6VUrTVgisnxCc3AerE1cgwsN3MIs+wy xhzrO/cfl06GvPN9/XMrX3n0qRXs+pvRMST28CzQVvtaEZyNO49q8dJABPjCktK4 InLHI9hXKKyyKJJ8Z/8N+e/Bg3utiLjqmr9IvrEiFATZMHlEI1IIA6tcsWh0mvnR yYhPIADemx4fjScxostIc25JjIcdQz2RbOv/eB1Ii9Hfb5zdv3O1XkXfBulIfVsL WOcFioTBmHyjqCthEGgyf/u3GBsuAglrDwjb5WXEQoA6Uy2EBjyOuW23YIOmQHS1 q7HNXcXL1MuFb7A8rn1jwB35RwPc28yztD160kk= -----END CERTIFICATE-----Generated at Fri Sep 11 14:34:01 2026 by rpki-client