$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39fb6c32-2015-31e3-872d-5ead450b9958.roa File: 39fb6c32-2015-31e3-872d-5ead450b9958.roa (raw, json) Hash identifier: LlZ/11gKAom8fvJQ+Az5Ljwl7J4fmkXxQVN0bRsuek8= Subject key identifier: 0C:4C:C4:5C:54:A5:CE:E4:35:5C:F4:D6:5E:35:73:98:68:37:C9:DD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE684393A9383D126F5228A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39fb6c32-2015-31e3-872d-5ead450b9958.roa Signing time: Thu 20 Aug 2026 14:30:51 +0000 ROA not before: Thu 20 Aug 2026 14:30:51 +0000 ROA not after: Wed 18 Nov 2026 15:30:51 +0000 asID: 274070 IP address blocks: 38.58.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:84:39:3a:93:83:d1:26:f5:22:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 20 14:30:51 2026 GMT Not After : Nov 18 15:30:51 2026 GMT Subject: CN=8dd009c1-5b61-4151-b636-89f49bac3ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:ed:df:0e:a7:9e:80:3c:b1:0b:2f:43:0b: 47:1b:9d:61:41:fc:fb:bb:3b:0e:6b:fa:6d:32:4d: f9:69:a4:df:7c:47:0c:64:c0:f4:5e:e6:93:94:e2: 57:45:30:b0:c5:1b:22:e3:bb:62:e5:0c:c0:80:e6: a2:bb:6c:3b:48:fe:08:f2:08:0a:24:5a:cc:ac:5d: c8:eb:14:20:4e:dd:77:f7:c2:20:ab:da:ff:37:91: 0b:4d:4f:4d:32:57:ac:86:35:a6:68:82:b6:5d:d1: 37:eb:0a:03:63:a2:ca:dd:ff:5d:07:90:a2:35:30: 1e:db:df:58:49:1f:42:7c:b7:ca:21:8c:1e:52:6b: 3c:f9:3d:ce:d3:b5:d1:18:49:38:44:05:79:c3:34: 7f:43:9e:9c:23:ad:3c:38:34:42:fd:3e:5c:bd:23: 3f:12:37:fe:a6:3a:58:fc:23:2c:5a:bb:11:33:45: 6a:78:b9:2f:af:e5:0c:08:96:15:4a:84:a4:ae:13: f8:1a:69:c2:65:8b:ce:1e:b0:28:43:19:7c:a6:22: 5c:fe:1c:28:8a:1e:47:00:7a:f5:30:e1:f4:98:30: 94:51:77:58:f4:a5:4b:75:3a:3e:97:21:0a:30:1d: de:69:5a:5f:04:10:34:eb:a9:98:99:4e:0c:93:3a: a8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4C:C4:5C:54:A5:CE:E4:35:5C:F4:D6:5E:35:73:98:68:37:C9:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39fb6c32-2015-31e3-872d-5ead450b9958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bf:3f:bb:00:b7:1c:24:0b:89:39:ec:b7:2e:74:82:fd:60: c9:f3:ec:5d:83:06:9a:fb:88:dc:64:9e:fd:2e:3d:09:91:ff: e6:8d:8f:ca:3e:e9:47:20:1f:f7:a2:d4:62:4f:4a:bb:66:b4: 9b:03:5b:ac:f7:09:0a:1a:ee:97:e6:80:06:c4:8f:75:00:97: ab:18:10:de:58:ac:80:34:ce:0e:82:b7:ad:b5:74:80:ca:a0: b0:88:bb:8f:51:bd:ef:bc:9f:c5:2a:40:00:ba:9f:af:a5:e3: 49:08:ec:97:2b:29:26:9e:f0:1f:e1:ec:54:1f:1d:38:be:f2: a2:a9:e4:ba:5b:09:31:36:a0:82:93:ab:ca:c0:ee:33:75:de: e5:11:c0:2c:72:e7:33:94:31:04:14:9e:56:17:c7:9f:32:e1: 21:b2:13:1c:ee:6f:95:48:3c:a0:65:63:e8:69:84:89:16:80: 87:d2:c6:6d:4a:33:3e:ec:50:9b:33:65:1a:23:66:e6:12:72: 80:dc:b7:30:35:e2:42:35:c2:43:d0:5a:69:a7:90:b3:43:dc: bd:91:5e:05:80:2f:35:b5:b0:ad:b5:e1:17:7e:92:ba:84:ba: 76:6c:bf:42:79:78:84:e8:e8:1d:26:0a:81:ea:8b:b4:c0:81: f5:09:7d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mhDk6k4PRJvUiioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMDE0MzA1MVoXDTI2MTExODE1MzA1MVowLzEtMCsGA1UEAxMk OGRkMDA5YzEtNWI2MS00MTUxLWI2MzYtODlmNDliYWMzZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwurt3w6nnoA8sQsvQwtHG51hQfz7uzsOa/pt Mk35aaTffEcMZMD0XuaTlOJXRTCwxRsi47ti5QzAgOaiu2w7SP4I8ggKJFrMrF3I 6xQgTt1398Igq9r/N5ELTU9NMleshjWmaIK2XdE36woDY6LK3f9dB5CiNTAe299Y SR9CfLfKIYweUms8+T3O07XRGEk4RAV5wzR/Q56cI608ODRC/T5cvSM/Ejf+pjpY /CMsWrsRM0VqeLkvr+UMCJYVSoSkrhP4GmnCZYvOHrAoQxl8piJc/hwoih5HAHr1 MOH0mDCUUXdY9KVLdTo+lyEKMB3eaVpfBBA066mYmU4MkzqocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxMxFxUpc7kNVz01l41c5hoN8ndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzlmYjZjMzItMjAxNS0z MWUzLTg3MmQtNWVhZDQ1MGI5OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu/P7sAtxwkC4k57LcudIL9YMnz7F2DBpr7iNxknv0uPQmR/+aNj8o+ 6UcgH/ei1GJPSrtmtJsDW6z3CQoa7pfmgAbEj3UAl6sYEN5YrIA0zg6Ct621dIDK oLCIu49Rve+8n8UqQAC6n6+l40kI7JcrKSae8B/h7FQfHTi+8qKp5LpbCTE2oIKT q8rA7jN13uURwCxy5zOUMQQUnlYXx58y4SGyExzub5VIPKBlY+hphIkWgIfSxm1K Mz7sUJszZRojZuYScoDctzA14kI1wkPQWmmnkLND3L2RXgWALzW1sK214Rd+krqE unZsv0J5eITo6B0mCoHqi7TAgfUJfTs= -----END CERTIFICATE-----Generated at Fri Sep 11 13:05:05 2026 by rpki-client