$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa File: 3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa (raw, json) Hash identifier: RNX1t9xjKb5/uuIObILvQ2R0wJfneQ9otxyiWSrRqqc= Subject key identifier: C2:49:E4:D0:BC:90:6D:D3:BC:F1:87:5E:04:F4:89:18:6A:14:59:5B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F17324172405BF4CCEE2D6200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 267205 IP address blocks: 38.199.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:41:72:40:5b:f4:cc:ee:2d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=2ddfaca9-10a3-4762-9815-4fc91ba28522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:8f:c4:a0:95:36:af:71:47:f2:33:4f:9b: 52:5d:f4:fb:87:c1:79:3e:86:24:8a:52:41:b3:49: 57:4c:61:f1:ed:c2:a1:a4:f6:fd:f1:1b:c1:3a:a4: 5d:e5:69:91:18:45:37:8e:ab:5f:f4:ac:57:ca:a5: 8c:28:e7:99:bc:55:c3:04:ab:f6:0f:c7:f7:b8:f5: 30:6f:41:d6:9a:1d:07:da:9f:f8:d8:d3:57:2b:11: 68:ff:b9:7d:b1:f4:3f:98:a1:1e:1d:9c:9b:c4:fe: 13:87:9a:45:a3:2a:ab:36:7d:71:ae:43:3f:48:ae: 46:52:8d:1c:47:6a:e3:cf:b9:5b:c7:82:5a:c1:10: 7d:e5:10:97:1d:f0:ab:6b:fa:e0:90:44:e8:ea:e9: 25:53:f0:34:a9:84:1a:69:d4:72:0e:48:2c:54:95: 8e:86:69:48:33:8c:d4:ab:5b:fe:3b:a9:a3:a8:24: 96:f9:21:f4:ca:9a:16:aa:fc:1b:67:c9:bc:f3:7a: 1f:e8:87:59:86:01:d4:54:79:d1:57:06:e4:87:83: 89:ad:50:83:fe:9e:22:61:50:2e:b6:d0:59:8d:6a: a3:24:62:33:d2:10:9d:0b:40:e4:95:c7:73:1e:98: f6:1a:0c:3d:75:2c:b5:31:c9:d3:97:8b:7b:4f:5f: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:49:E4:D0:BC:90:6D:D3:BC:F1:87:5E:04:F4:89:18:6A:14:59:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:51:c9:72:c4:e4:4e:a5:9c:eb:42:e7:f4:64:38:46:1d:8f: 5c:90:25:a0:f1:be:34:0f:e7:08:05:48:80:76:71:4f:b6:12: c5:dc:9c:8c:c7:20:f1:30:73:15:07:c6:eb:fc:81:8d:07:9d: 38:87:10:b6:91:3e:97:1f:82:85:0b:ca:29:9d:f1:a2:8b:c2: a2:1f:7c:fa:99:6b:41:53:99:a6:43:5d:93:42:06:86:7d:5b: bd:34:c5:1f:1f:e0:4c:24:af:c8:f6:58:e1:f1:c7:44:3e:5e: 78:b0:0b:60:ef:23:58:a2:08:2c:03:f4:f4:11:75:39:14:ad: 25:5d:6e:da:6f:7f:df:81:15:96:7e:e0:ce:b8:c5:20:59:36: bb:cd:2e:fe:02:c2:e3:b7:18:fe:d2:7e:03:6e:6c:a0:93:40: 70:d7:cf:8c:dc:1d:2c:0e:54:94:ab:7d:a4:aa:a5:35:ff:b0: fa:ee:bb:04:9d:85:d7:99:b6:19:93:b0:f2:16:6d:b9:b1:1d: 51:00:b8:be:e9:2a:9a:90:bf:55:7e:a4:50:59:eb:7e:80:bb: e8:e5:bf:26:16:f3:0e:33:c3:b8:8b:e7:ba:0e:80:e5:ba:4c: eb:a3:90:d9:d9:f9:b3:53:76:c2:7d:30:8b:60:2b:3d:a6:ad: bc:13:8a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkFyQFv0zO4tYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MmRkZmFjYTktMTBhMy00NzYyLTk4MTUtNGZjOTFiYTI4NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NaPxKCVNq9xR/IzT5tSXfT7h8F5PoYkilJB s0lXTGHx7cKhpPb98RvBOqRd5WmRGEU3jqtf9KxXyqWMKOeZvFXDBKv2D8f3uPUw b0HWmh0H2p/42NNXKxFo/7l9sfQ/mKEeHZybxP4Th5pFoyqrNn1xrkM/SK5GUo0c R2rjz7lbx4JawRB95RCXHfCra/rgkETo6uklU/A0qYQaadRyDkgsVJWOhmlIM4zU q1v+O6mjqCSW+SH0ypoWqvwbZ8m883of6IdZhgHUVHnRVwbkh4OJrVCD/p4iYVAu ttBZjWqjJGIz0hCdC0DklcdzHpj2Ggw9dSy1McnTl4t7T1+9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJJ5NC8kG3TvPGHXgT0iRhqFFlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2JiY2JhZTgtMzBkMi0z NWFhLTgwNzEtOTczYTQxYWI3OGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJsf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9RyXLE5E6lnOtC5/RkOEYdj1yQJaDxvjQP5wgFSIB2cU+2EsXcnIzH IPEwcxUHxuv8gY0HnTiHELaRPpcfgoULyimd8aKLwqIffPqZa0FTmaZDXZNCBoZ9 W700xR8f4Ewkr8j2WOHxx0Q+XniwC2DvI1iiCCwD9PQRdTkUrSVdbtpvf9+BFZZ+ 4M64xSBZNrvNLv4CwuO3GP7SfgNubKCTQHDXz4zcHSwOVJSrfaSqpTX/sPruuwSd hdeZthmTsPIWbbmxHVEAuL7pKpqQv1V+pFBZ636Au+jlvyYW8w4zw7iL57oOgOW6 TOujkNnZ+bNTdsJ9MItgKz2mrbwTiiE= -----END CERTIFICATE-----Generated at Fri Sep 11 14:27:26 2026 by rpki-client