$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa File: 39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa (raw, json) Hash identifier: ifPkzB6Q5yMSV9rjyCMoS0/UmHNoKRXKD7BiNLhflS4= Subject key identifier: B0:C7:67:16:9D:26:5C:58:33:43:A6:74:BA:E4:47:41:45:67:03:43 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB2B1A69F79CCE970F6F9F180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 33570 IP address blocks: 38.126.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a6:9f:79:cc:e9:70:f6:f9:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=104883a9-dee9-4390-b907-84d09790d3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:ea:ed:9b:9f:40:88:5d:df:5c:30:75:74: 55:86:59:3a:18:06:47:87:e8:9b:c9:f0:f5:98:4a: a5:de:c0:2c:0c:29:df:3a:d6:ad:7b:92:d4:85:55: 79:eb:4c:46:1c:f3:da:70:65:5b:56:55:9a:3b:f8: f8:96:16:cc:fb:12:4d:92:70:63:47:8e:67:59:ec: 19:7e:0d:9f:fa:bf:a7:de:46:35:71:0b:ef:7e:ce: f4:b2:e1:20:c9:77:4b:bb:ba:9f:13:75:b0:73:c1: 57:70:6c:33:f2:da:48:39:4a:d1:dc:4c:86:3c:7b: 92:25:fb:c5:a1:15:ea:6d:4a:c1:9f:2c:6e:0d:cf: 58:c5:49:53:63:61:13:f5:1c:ea:61:00:f6:4f:10: ac:f1:05:47:f5:60:e8:ef:6d:11:15:30:2f:8e:d3: 3b:cf:0e:68:a7:c7:08:fb:70:16:b7:ab:a6:29:dd: 42:84:e5:29:6c:8c:c1:bd:b9:99:f0:8b:82:c6:67: 3a:7d:31:db:89:07:42:dd:7a:e2:79:51:da:98:07: 41:ae:de:92:3f:e3:96:86:25:7a:51:41:dd:66:fe: 02:ac:c9:89:19:19:9a:03:f3:30:55:8a:2c:c6:2c: 24:77:45:57:b9:5a:f2:02:9a:44:c2:99:0f:83:6f: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C7:67:16:9D:26:5C:58:33:43:A6:74:BA:E4:47:41:45:67:03:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.126.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:01:d1:03:ad:24:41:18:26:3a:d5:80:05:c0:99:05:4a:2e: 37:8e:e7:b5:2d:62:4b:e6:f3:17:86:fd:dd:2b:38:05:16:54: f8:1f:a7:77:df:4d:34:77:6d:74:d4:ba:38:21:2b:69:a7:6c: c2:60:6a:66:66:a8:8f:72:90:30:69:da:69:14:91:44:15:18: 92:e8:3b:b2:79:b8:15:9c:f1:d0:4e:19:6d:5a:86:04:25:48: f7:1a:53:60:3f:06:d9:9f:ba:88:d1:74:03:f1:81:28:b4:bf: 70:01:07:46:05:0b:b7:fd:03:39:fb:e1:ef:ce:ae:92:24:e5: f2:a7:93:e9:3e:21:1b:cc:15:ad:0a:55:45:9c:f4:a4:c9:7a: 9d:3d:2a:e2:ce:d4:87:ef:37:c3:a7:ae:56:d1:11:e6:ff:ed: 1d:11:3d:4d:0a:bd:57:d3:68:4b:a4:f3:b7:a4:26:11:07:f1: 8c:b6:90:9c:fa:19:33:fe:d0:18:9a:04:6d:4b:86:f7:f3:c2: 7a:56:a0:c2:c2:4f:d8:2c:89:92:10:cd:b7:18:a5:6e:b6:5d: fa:d8:11:93:0e:0b:0c:34:db:d5:c0:3c:06:66:5f:e5:95:8a: 08:2e:db:ba:35:b0:ef:a8:22:8b:37:68:18:97:b6:6a:be:a7: 32:48:bc:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaafeczpcPb58YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MTA0ODgzYTktZGVlOS00MzkwLWI5MDctODRkMDk3OTBkM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Hq7ZufQIhd31wwdXRVhlk6GAZHh+ibyfD1 mEql3sAsDCnfOtate5LUhVV560xGHPPacGVbVlWaO/j4lhbM+xJNknBjR45nWewZ fg2f+r+n3kY1cQvvfs70suEgyXdLu7qfE3Wwc8FXcGwz8tpIOUrR3EyGPHuSJfvF oRXqbUrBnyxuDc9YxUlTY2ET9RzqYQD2TxCs8QVH9WDo720RFTAvjtM7zw5op8cI +3AWt6umKd1ChOUpbIzBvbmZ8IuCxmc6fTHbiQdC3XrieVHamAdBrt6SP+OWhiV6 UUHdZv4CrMmJGRmaA/MwVYosxiwkd0VXuVryAppEwpkPg2+bUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDHZxadJlxYM0OmdLrkR0FFZwNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzlhMzJlMGEtNWZlYy0z Y2M4LWE2MzEtZmUzN2Y4ZDdkYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJn5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYB0QOtJEEYJjrVgAXAmQVKLjeO57UtYkvm8xeG/d0rOAUWVPgfp3ff TTR3bXTUujghK2mnbMJgamZmqI9ykDBp2mkUkUQVGJLoO7J5uBWc8dBOGW1ahgQl SPcaU2A/BtmfuojRdAPxgSi0v3ABB0YFC7f9Azn74e/OrpIk5fKnk+k+IRvMFa0K VUWc9KTJep09KuLO1IfvN8OnrlbREeb/7R0RPU0KvVfTaEuk87ekJhEH8Yy2kJz6 GTP+0BiaBG1LhvfzwnpWoMLCT9gsiZIQzbcYpW62XfrYEZMOCww029XAPAZmX+WV iggu27o1sO+oIos3aBiXtmq+pzJIvBk= -----END CERTIFICATE-----Generated at Fri Sep 11 13:54:54 2026 by rpki-client