$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cc2456a-2f18-3dfd-aa6b-4b9c944a06e3.roa File: 3cc2456a-2f18-3dfd-aa6b-4b9c944a06e3.roa (raw, json) Hash identifier: 1+omTSNcOH/IWntN8zv5t3GEO1DMQuumU9neujbresU= Subject key identifier: 69:49:09:F4:4E:2B:45:57:52:DF:A1:F6:E4:F9:AC:FB:07:53:B4:EA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB9C0A4EF9B2F50B9FAEEAEC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cc2456a-2f18-3dfd-aa6b-4b9c944a06e3.roa Signing time: Tue 04 Aug 2026 13:41:13 +0000 ROA not before: Tue 04 Aug 2026 13:41:13 +0000 ROA not after: Mon 02 Nov 2026 14:41:13 +0000 asID: 274060 IP address blocks: 38.68.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:c0:a4:ef:9b:2f:50:b9:fa:ee:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 4 13:41:13 2026 GMT Not After : Nov 2 14:41:13 2026 GMT Subject: CN=fb035ffa-29a4-4748-8d9b-b33652e6f0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:2f:d7:59:ea:e4:83:79:98:f7:9d:c6:cc: 50:9a:40:a5:e9:b8:99:a7:39:0d:e0:69:48:5f:23: 5f:8c:75:47:39:fc:b8:e8:f9:7f:8e:14:a1:ea:d5: 6c:d1:bc:d8:a0:1e:2d:0b:ef:57:39:a1:45:ff:c4: da:08:17:fb:a1:6b:96:53:61:f9:a6:c3:c2:f1:0b: 63:7f:d9:34:38:07:6c:5b:73:cf:f3:23:b4:7b:e0: 0d:0c:4c:3b:ba:93:26:b3:a6:69:36:ea:5b:04:47: 82:ab:f1:e8:b8:3b:0b:ae:2f:72:cb:49:86:9d:fe: 3d:2e:0d:8f:2f:20:e7:f5:6c:44:1f:bc:78:c2:68: aa:c9:2e:9c:ed:59:af:0b:91:b3:cf:21:d5:cc:8d: 7e:a7:a2:23:f3:27:d4:65:4e:b3:5e:4b:4e:8a:78: 87:aa:a1:6f:61:88:80:76:21:d5:29:6d:65:9d:33: de:68:65:fd:a9:46:4d:27:30:7c:6e:5d:00:86:cb: 01:6b:9f:8b:be:cb:e5:b4:fb:d1:2c:64:f0:6e:8a: b9:d1:ea:8d:0e:23:db:01:ca:cb:25:65:6f:f9:bc: 86:31:72:a0:f6:c2:c9:53:88:7b:20:75:99:93:18: 66:dc:87:bc:c7:c3:67:ba:db:09:4e:47:ef:2d:ea: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:49:09:F4:4E:2B:45:57:52:DF:A1:F6:E4:F9:AC:FB:07:53:B4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cc2456a-2f18-3dfd-aa6b-4b9c944a06e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.68.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e5:27:60:ce:88:8b:24:74:65:ef:a7:bf:cd:83:c4:7f:81: b9:50:e6:64:a4:a6:e6:94:6e:24:a9:53:29:62:9e:6e:70:7a: c9:cd:04:8c:03:cd:07:7e:b1:bb:ea:5c:99:5f:91:0c:1f:9b: d3:8e:87:92:c2:9f:34:59:aa:55:29:26:82:85:2a:93:0d:b1: da:65:95:71:60:79:43:4b:e0:36:a4:28:9e:05:09:42:47:f8: f6:e3:53:58:b9:fa:f4:18:dc:3e:83:9a:1f:dc:f5:14:b0:9d: d8:37:3b:ee:5a:8c:94:8c:6a:06:f3:5a:92:54:12:46:a3:1b: b9:14:eb:ec:e1:61:a0:95:58:00:3f:7f:df:cf:f3:5c:ed:5c: d7:7f:ea:59:cf:c5:23:8b:2c:4b:4a:93:f5:cf:f4:7a:0d:c3: fa:05:22:bc:bf:0d:d7:1f:e4:af:3e:f3:60:2b:3c:b1:b9:5e: 61:a6:63:b9:20:89:9c:60:12:96:dc:9f:b2:78:ba:99:57:fd: 30:ed:b2:2e:ba:75:82:35:a2:44:4f:a7:ae:72:c4:df:22:66: 4a:f6:99:ba:56:ed:ab:38:f9:9a:53:2f:db:aa:40:38:fa:91: 05:45:68:d4:75:05:81:a2:02:f9:09:67:10:13:e6:21:38:63: 20:ab:03:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65wKTvmy9QufrursAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwNDEzNDExM1oXDTI2MTEwMjE0NDExM1owLzEtMCsGA1UEAxMk ZmIwMzVmZmEtMjlhNC00NzQ4LThkOWItYjMzNjUyZTZmMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAEv11nq5IN5mPedxsxQmkCl6biZpzkN4GlI XyNfjHVHOfy46Pl/jhSh6tVs0bzYoB4tC+9XOaFF/8TaCBf7oWuWU2H5psPC8Qtj f9k0OAdsW3PP8yO0e+ANDEw7upMms6ZpNupbBEeCq/HouDsLri9yy0mGnf49Lg2P LyDn9WxEH7x4wmiqyS6c7VmvC5GzzyHVzI1+p6Ij8yfUZU6zXktOiniHqqFvYYiA diHVKW1lnTPeaGX9qUZNJzB8bl0AhssBa5+LvsvltPvRLGTwboq50eqNDiPbAcrL JWVv+byGMXKg9sLJU4h7IHWZkxhm3Ie8x8NnutsJTkfvLeqapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlJCfROK0VXUt+h9uT5rPsHU7TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2NjMjQ1NmEtMmYxOC0z ZGZkLWFhNmItNGI5Yzk0NGEwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkSPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPlJ2DOiIskdGXvp7/Ng8R/gblQ5mSkpuaUbiSpUylinm5wesnNBIwD zQd+sbvqXJlfkQwfm9OOh5LCnzRZqlUpJoKFKpMNsdpllXFgeUNL4DakKJ4FCUJH +PbjU1i5+vQY3D6Dmh/c9RSwndg3O+5ajJSMagbzWpJUEkajG7kU6+zhYaCVWAA/ f9/P81ztXNd/6lnPxSOLLEtKk/XP9HoNw/oFIry/Ddcf5K8+82ArPLG5XmGmY7kg iZxgEpbcn7J4uplX/TDtsi66dYI1okRPp65yxN8iZkr2mbpW7as4+ZpTL9uqQDj6 kQVFaNR1BYGiAvkJZxAT5iE4YyCrA4Q= -----END CERTIFICATE-----Generated at Fri Sep 11 13:07:58 2026 by rpki-client