$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ddca278-2c24-3270-93b7-b07b87a39e71.roa File: 3ddca278-2c24-3270-93b7-b07b87a39e71.roa (raw, json) Hash identifier: NebN2Bbnx8kce+fT/sEFBrirl7/VInNFZ7QlkdfaPEc= Subject key identifier: FB:56:18:31:99:5E:3C:C5:45:2A:1D:C0:9C:05:7F:05:B1:68:55:BA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB9AC51FBB14B1F8FABF5E780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ddca278-2c24-3270-93b7-b07b87a39e71.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 150447 IP address blocks: 38.77.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:51:fb:b1:4b:1f:8f:ab:f5:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=8c8eae58-5900-4aab-8bbc-45d72b3b4cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:ff:fb:a6:b6:29:e0:74:03:ea:1a:88:33: 2e:54:cc:ac:6d:11:45:45:4c:b7:54:39:8e:dc:58: 17:e0:ae:3e:34:62:11:d5:77:da:49:5d:fd:8d:66: 87:bc:bd:1f:bf:d0:8f:eb:7d:e7:7a:3c:ff:7a:3c: 63:51:0e:9f:18:88:0f:41:6e:4c:dc:41:e7:c3:c4: ec:90:27:01:28:7e:2b:88:e6:51:46:68:2b:95:6c: fd:dd:fa:2d:09:12:35:1d:91:3e:28:46:c8:87:6e: 8d:d6:38:46:a8:d3:12:39:4d:f7:20:66:73:e7:6b: 43:07:a5:2d:2e:83:9a:8b:fa:e7:74:79:eb:24:61: fc:2b:5a:e3:48:15:e9:9d:87:ec:38:28:3a:6a:98: c9:55:69:a6:b6:6e:1a:e2:65:56:43:26:57:6d:36: 75:d2:3b:ae:47:b1:2a:58:da:86:5b:f3:58:6f:4b: b5:4f:cb:07:92:8f:72:07:52:ce:2e:49:ed:f7:d3: 34:22:69:05:b6:c7:81:53:0c:e0:cd:ab:c6:95:35: 82:fd:a1:f8:3f:98:b4:25:ac:c1:5a:41:49:0e:3b: 7d:b4:34:42:5c:e2:ff:dc:92:ee:e3:11:cf:66:a2: ee:0d:e8:22:77:e1:f7:43:d2:d6:20:a8:54:96:de: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:18:31:99:5E:3C:C5:45:2A:1D:C0:9C:05:7F:05:B1:68:55:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ddca278-2c24-3270-93b7-b07b87a39e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.77.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5a:f4:be:4c:8a:e5:22:b4:83:5a:8c:b7:aa:9d:4a:0a:99: a3:23:12:4d:2c:ce:dd:43:e8:7b:da:d5:f5:d6:df:11:9d:b9: 91:98:76:a5:16:46:3c:ec:b4:15:c9:38:49:7a:1b:f5:70:93: a2:14:0e:ca:b3:37:b9:c9:e1:5c:96:1e:d6:05:fd:4c:73:e7: 07:63:ec:14:36:fd:78:c1:69:b5:58:48:38:d9:f8:06:6c:4e: ca:dc:4e:3e:d7:92:d2:6f:98:44:66:60:c6:ca:34:0d:4d:b1: 30:d3:1d:43:50:bb:ca:6d:64:d2:a1:32:07:ae:17:8a:94:24: 92:77:93:af:19:4a:f3:41:ed:98:42:10:c3:ce:53:84:42:dd: 81:d5:da:c7:72:74:b2:60:85:a5:d4:67:c3:e9:71:9b:eb:96: 15:e0:2d:0c:d2:7f:4c:59:08:4a:6d:be:de:1f:a9:31:35:7a: b5:26:37:9c:8b:ea:b0:9f:5a:cf:e2:54:e7:13:17:4c:dd:62: 72:f8:9e:d6:26:b2:e3:d4:27:9b:98:d4:17:24:7c:53:d1:63: ac:51:28:34:7a:34:1c:7a:9a:3e:ae:bf:c8:a8:b3:ba:b3:d8: 4e:29:c8:89:e8:66:9c:31:b5:a4:c2:bf:c4:84:b4:72:d5:11: be:0c:e2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rFH7sUsfj6v154AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk OGM4ZWFlNTgtNTkwMC00YWFiLThiYmMtNDVkNzJiM2I0Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwr/+6a2KeB0A+oaiDMuVMysbRFFRUy3VDmO 3FgX4K4+NGIR1XfaSV39jWaHvL0fv9CP633nejz/ejxjUQ6fGIgPQW5M3EHnw8Ts kCcBKH4riOZRRmgrlWz93fotCRI1HZE+KEbIh26N1jhGqNMSOU33IGZz52tDB6Ut LoOai/rndHnrJGH8K1rjSBXpnYfsOCg6apjJVWmmtm4a4mVWQyZXbTZ10juuR7Eq WNqGW/NYb0u1T8sHko9yB1LOLknt99M0ImkFtseBUwzgzavGlTWC/aH4P5i0JazB WkFJDjt9tDRCXOL/3JLu4xHPZqLuDegid+H3Q9LWIKhUlt5ziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtWGDGZXjzFRSodwJwFfwWxaFW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2RkY2EyNzgtMmMyNC0z MjcwLTkzYjctYjA3Yjg3YTM5ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJk2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5a9L5MiuUitINajLeqnUoKmaMjEk0szt1D6Hva1fXW3xGduZGYdqUW RjzstBXJOEl6G/Vwk6IUDsqzN7nJ4VyWHtYF/Uxz5wdj7BQ2/XjBabVYSDjZ+AZs TsrcTj7XktJvmERmYMbKNA1NsTDTHUNQu8ptZNKhMgeuF4qUJJJ3k68ZSvNB7ZhC EMPOU4RC3YHV2sdydLJghaXUZ8PpcZvrlhXgLQzSf0xZCEptvt4fqTE1erUmN5yL 6rCfWs/iVOcTF0zdYnL4ntYmsuPUJ5uY1BckfFPRY6xRKDR6NBx6mj6uv8ios7qz 2E4pyInoZpwxtaTCv8SEtHLVEb4M4sA= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:34 2026 by rpki-client