$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d9789c5-c290-317d-82a2-6eeec74a74e9.roa File: 3d9789c5-c290-317d-82a2-6eeec74a74e9.roa (raw, json) Hash identifier: 0NVu7ziXDve9eBBVfMAbgeZWgs2NMPokEMeQzBrHAvE= Subject key identifier: 68:51:28:29:03:AE:3A:1F:AC:F5:2B:5A:2E:DB:7A:09:1B:15:8F:A5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE4F1E7729E2879B1217FDA00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d9789c5-c290-317d-82a2-6eeec74a74e9.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 265679 IP address blocks: 38.236.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:e7:72:9e:28:79:b1:21:7f:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=9fab953f-7783-4765-b15c-fc457fdbd3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:a6:e6:92:7e:9e:49:4a:a3:38:ec:ca:cf: ae:4c:a0:40:2c:21:31:1c:03:10:21:9f:14:5c:53: ca:ce:87:a9:b3:d8:92:50:5e:e4:6c:e5:dd:c6:fb: 3a:d3:08:5c:35:2f:20:87:71:3e:b5:b5:c7:28:e2: 65:11:88:ec:93:91:0d:4a:09:ea:60:00:eb:ed:7a: 00:cf:b8:15:0e:2e:0a:a3:16:b2:91:0d:e2:9f:f0: 98:55:e8:82:dd:94:1a:18:57:ca:02:cb:ba:a7:5a: cc:ef:56:4b:e9:3a:fa:bf:12:28:9b:c7:fd:45:aa: 56:aa:9a:31:2d:ba:8d:95:2d:c6:46:eb:81:6f:77: 05:96:19:aa:5c:0f:3f:85:b3:24:5a:f0:af:39:81: 67:e6:d8:59:5d:ab:95:17:09:22:22:c9:87:20:9b: c3:d5:d6:02:24:3d:03:f6:bf:1f:04:0f:b4:2e:f1: 93:51:f1:02:2b:a0:42:99:0b:d9:44:2d:33:21:4d: 44:9f:85:bf:1a:46:c5:73:e7:18:35:fa:29:63:1e: 05:52:69:32:8c:1f:45:6d:78:86:20:cb:60:af:82: b5:72:f4:7b:19:47:a7:b0:e7:33:b2:d0:fd:ac:47: 9f:39:16:ae:22:83:7d:d6:d4:1a:68:8c:6e:04:f4: cb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:28:29:03:AE:3A:1F:AC:F5:2B:5A:2E:DB:7A:09:1B:15:8F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d9789c5-c290-317d-82a2-6eeec74a74e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2c:64:04:ff:5c:10:35:43:12:86:91:38:87:4f:f5:e5:29: b9:cf:d6:47:41:dd:72:78:bf:29:e2:37:7d:0d:b5:d2:f5:af: 9a:f0:23:cd:14:af:a8:5f:81:74:6f:ff:7b:b6:2b:40:ff:a2: d8:70:c0:cc:0b:de:7d:bf:e5:de:7b:c9:7d:b0:75:cb:25:60: 7a:bf:64:11:d9:13:61:24:0d:73:02:d5:8c:7a:b7:c3:0a:90: e1:9b:d0:ff:3e:31:1a:8a:e9:a6:97:36:36:97:e1:70:d8:14: 46:af:2c:e1:77:9f:6c:5e:a5:e9:8e:32:1e:37:1e:c3:3c:c2: ca:d5:00:c6:e6:3b:bb:04:64:a5:df:ea:29:46:90:65:6f:4b: af:64:47:93:a3:17:1b:28:f3:19:e8:dc:96:63:af:36:8e:a9: f7:99:6d:ac:e6:82:ba:57:09:ac:f5:93:ae:9b:82:de:70:b6: d7:87:2d:3e:2c:4b:d7:5e:34:4d:53:79:75:ce:80:8f:01:1f: 2e:a0:fe:da:30:80:82:14:eb:5f:b1:f6:e5:e2:c7:cb:9d:2b: 4c:f2:1c:ce:d3:25:c3:05:9b:0c:59:59:60:8a:f7:50:ed:d7: 21:48:bc:98:93:5c:20:5a:70:53:8e:8e:61:d3:be:e1:eb:cc: ab:b1:e1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8edynih5sSF/2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk OWZhYjk1M2YtNzc4My00NzY1LWIxNWMtZmM0NTdmZGJkM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Sm5pJ+nklKozjsys+uTKBALCExHAMQIZ8U XFPKzoeps9iSUF7kbOXdxvs60whcNS8gh3E+tbXHKOJlEYjsk5ENSgnqYADr7XoA z7gVDi4KoxaykQ3in/CYVeiC3ZQaGFfKAsu6p1rM71ZL6Tr6vxIom8f9RapWqpox LbqNlS3GRuuBb3cFlhmqXA8/hbMkWvCvOYFn5thZXauVFwkiIsmHIJvD1dYCJD0D 9r8fBA+0LvGTUfECK6BCmQvZRC0zIU1En4W/GkbFc+cYNfopYx4FUmkyjB9FbXiG IMtgr4K1cvR7GUensOczstD9rEefORauIoN91tQaaIxuBPTLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhRKCkDrjofrPUrWi7begkbFY+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2Q5Nzg5YzUtYzI5MC0z MTdkLTgyYTItNmVlZWM3NGE3NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYsZAT/XBA1QxKGkTiHT/XlKbnP1kdB3XJ4vyniN30NtdL1r5rwI80U r6hfgXRv/3u2K0D/othwwMwL3n2/5d57yX2wdcslYHq/ZBHZE2EkDXMC1Yx6t8MK kOGb0P8+MRqK6aaXNjaX4XDYFEavLOF3n2xepemOMh43HsM8wsrVAMbmO7sEZKXf 6ilGkGVvS69kR5OjFxso8xno3JZjrzaOqfeZbazmgrpXCaz1k66bgt5wtteHLT4s S9deNE1TeXXOgI8BHy6g/towgIIU61+x9uXix8udK0zyHM7TJcMFmwxZWWCK91Dt 1yFIvJiTXCBacFOOjmHTvuHrzKux4Ws= -----END CERTIFICATE-----Generated at Fri Sep 11 13:51:10 2026 by rpki-client