$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3774880e-fc7e-3760-8ace-b15b4a60c7a8.roa File: 3774880e-fc7e-3760-8ace-b15b4a60c7a8.roa (raw, json) Hash identifier: 1RfLjwB9ik+FRXJLTKPqRPQnNFu+yIKNw6cqvB7DUyU= Subject key identifier: EA:9A:BF:D7:D3:87:AE:C8:E1:80:38:76:08:86:D5:2F:73:8F:4D:B6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352DFE69DD115A64E52D980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3774880e-fc7e-3760-8ace-b15b4a60c7a8.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 402062 IP address blocks: 38.81.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:df:e6:9d:d1:15:a6:4e:52:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=9c4ad502-62ee-40e9-abdf-8952944922fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f9:d6:88:81:cc:ca:b2:76:c0:98:1b:fc:91: 7a:e6:36:d5:0a:2b:d6:34:a9:23:c3:16:12:a6:eb: 9d:09:d0:52:4f:aa:f7:9b:2f:ef:cb:1f:f5:e0:f3: 35:8b:d7:45:9e:4e:9a:d7:55:e6:3a:30:9e:31:6d: 0d:5c:40:39:68:d5:64:70:6e:01:d3:70:99:c4:e3: ea:50:05:39:99:5d:a6:01:e7:30:f2:e1:62:f8:6f: 5a:70:01:81:29:1a:4a:15:86:3d:e1:de:ae:43:38: 5e:0d:31:4f:9b:6f:37:70:2d:04:49:59:be:b7:62: a4:98:82:a3:96:03:2c:ce:16:d2:49:9b:36:15:62: 52:98:fa:55:c0:f2:13:bc:73:2f:ea:4f:3d:0f:93: 7a:f4:5f:4f:ed:41:97:18:0a:2f:12:3b:ad:98:8a: 17:35:af:19:2e:b4:87:f0:34:34:95:10:ff:27:4c: 3c:28:be:e1:32:e5:a5:9d:28:cb:df:22:9f:de:59: b9:a6:8d:16:8f:da:47:ac:c6:70:5a:a2:54:7e:b0: 38:de:09:94:9f:6e:02:dd:1a:8c:fc:15:d3:5d:c7: f9:61:b8:8b:6c:03:ed:4f:6b:36:8c:02:13:4a:f9: eb:1e:af:74:cb:47:03:48:c7:01:7d:22:6e:32:9f: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:BF:D7:D3:87:AE:C8:E1:80:38:76:08:86:D5:2F:73:8F:4D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3774880e-fc7e-3760-8ace-b15b4a60c7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.81.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:24:6d:5f:89:50:ff:4e:94:a6:ad:9e:f3:60:69:e5:f0:f7: e0:c4:9e:62:a4:36:3a:f9:04:5e:31:1e:dc:dc:63:62:b9:33: a8:61:a3:b2:de:9c:d9:7b:2f:6f:5a:23:ec:98:5b:e9:7a:30: 25:cb:c0:b8:94:b5:bb:be:ed:bc:52:ff:34:d9:1b:c9:4e:ef: c4:fa:76:85:a1:da:10:bc:4b:c6:c8:f0:80:ea:4d:3f:c7:b1: 42:08:dc:24:ef:5e:c3:1a:52:26:4e:2a:a7:3e:77:3d:b0:b8: 57:d6:66:1d:39:36:3e:7e:d6:12:39:d0:12:aa:f1:62:d7:63: d3:ee:d2:bb:f8:e8:a8:52:e9:a6:bc:5a:02:e8:96:64:a1:9b: 0c:3e:e4:bc:e4:9d:ad:79:5a:b5:ab:9c:be:bd:34:97:99:20: 10:3f:3f:6f:83:f3:fe:aa:39:9c:20:1b:6f:3d:d7:8c:73:b6: 5f:9d:e9:a5:77:b0:38:35:18:cf:10:07:f7:25:15:9d:fe:db: 26:46:b7:7b:3e:49:a9:4b:f9:3f:0e:fe:e6:af:40:45:a4:91: 12:e6:9e:e1:0c:59:a0:d9:3a:84:57:83:60:3c:35:3b:33:64: 31:61:dd:1f:bc:67:cb:33:19:20:fe:57:d2:97:16:31:80:7c: 6f:fb:e5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUt/mndEVpk5S2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk OWM0YWQ1MDItNjJlZS00MGU5LWFiZGYtODk1Mjk0NDkyMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPnWiIHMyrJ2wJgb/JF65jbVCivWNKkjwxYS puudCdBST6r3my/vyx/14PM1i9dFnk6a11XmOjCeMW0NXEA5aNVkcG4B03CZxOPq UAU5mV2mAecw8uFi+G9acAGBKRpKFYY94d6uQzheDTFPm283cC0ESVm+t2KkmIKj lgMszhbSSZs2FWJSmPpVwPITvHMv6k89D5N69F9P7UGXGAovEjutmIoXNa8ZLrSH 8DQ0lRD/J0w8KL7hMuWlnSjL3yKf3lm5po0Wj9pHrMZwWqJUfrA43gmUn24C3RqM /BXTXcf5YbiLbAPtT2s2jAITSvnrHq90y0cDSMcBfSJuMp83SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqav9fTh67I4YA4dgiG1S9zj022MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzc3NDg4MGUtZmM3ZS0z NzYwLThhY2UtYjE1YjRhNjBjN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJlH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMkbV+JUP9OlKatnvNgaeXw9+DEnmKkNjr5BF4xHtzcY2K5M6hho7Le nNl7L29aI+yYW+l6MCXLwLiUtbu+7bxS/zTZG8lO78T6doWh2hC8S8bI8IDqTT/H sUII3CTvXsMaUiZOKqc+dz2wuFfWZh05Nj5+1hI50BKq8WLXY9Pu0rv46KhS6aa8 WgLolmShmww+5Lzkna15WrWrnL69NJeZIBA/P2+D8/6qOZwgG28914xztl+d6aV3 sDg1GM8QB/clFZ3+2yZGt3s+SalL+T8O/uavQEWkkRLmnuEMWaDZOoRXg2A8NTsz ZDFh3R+8Z8szGSD+V9KXFjGAfG/75f0= -----END CERTIFICATE-----Generated at Sun Oct 11 09:18:40 2026 by rpki-client