$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e77f1eb-2365-36ff-846c-6a30978e9961.roa File: 3e77f1eb-2365-36ff-846c-6a30978e9961.roa (raw, json) Hash identifier: DVFUNW/ex5wKUp1aCnSywSQ3KC+A32St+Seu3Oers4Q= Subject key identifier: 33:EA:65:94:13:67:23:29:A6:0A:D2:74:D5:D8:FB:2C:54:84:CF:19 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF2E764732D93FEFFEBBAC480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e77f1eb-2365-36ff-846c-6a30978e9961.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 273595 IP address blocks: 38.56.200.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:64:73:2d:93:fe:ff:eb:ba:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=2f8ced7f-f0ab-467d-99fd-adb826971e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:4f:94:18:4b:13:f9:4e:bb:6f:9c:db:39: 0b:c5:c2:f0:07:a9:f6:14:99:a8:11:c9:4f:f0:45: 42:a1:bd:76:98:33:b5:aa:b8:7f:9d:a1:1f:23:ad: 2a:0f:2a:4a:0a:9d:d7:43:71:52:47:b5:b3:3b:82: e7:08:4d:fa:80:43:7f:71:39:0b:73:0a:43:a0:19: 54:ab:0d:54:5b:92:4f:ef:50:6a:be:ae:b0:71:d7: 6c:a5:ea:c3:5b:c0:8d:28:f3:2d:b0:7b:12:e7:d3: 4c:24:86:2e:2b:ea:c0:4a:06:23:1d:51:7e:1d:58: 6c:b6:e8:9e:3a:9e:7c:e1:b2:60:77:1a:5d:eb:e4: 3e:b8:5f:cb:f4:8c:52:20:93:f3:4c:2f:d7:96:5c: ec:ae:7b:49:12:25:cd:93:1a:7a:82:45:98:e2:4d: 48:13:36:be:1a:d8:f6:03:b0:f6:71:7c:8b:63:08: 43:51:0e:ae:b1:c6:3b:42:5b:6e:d6:77:4c:f3:e3: 5b:ce:e4:1d:bd:67:20:71:9a:81:f6:4c:7e:c8:84: fb:8e:d5:9f:9d:51:3f:a1:c9:da:64:b6:3e:88:1d: 4f:81:b1:62:b5:c3:1f:eb:e3:71:97:f8:62:54:21: 40:a8:e7:29:82:1c:57:9e:d7:48:07:88:8f:b2:6d: 2f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:65:94:13:67:23:29:A6:0A:D2:74:D5:D8:FB:2C:54:84:CF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e77f1eb-2365-36ff-846c-6a30978e9961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:02:c4:a7:a3:7a:fb:7f:f0:fc:49:ad:06:e4:e6:10:3e:6b: 33:66:f2:9e:68:1d:14:65:5d:1e:f4:c0:f1:e9:19:aa:0f:fc: 40:fd:87:5f:2f:ff:a2:f7:93:52:34:0a:a6:22:1f:21:ef:05: 00:62:42:2f:59:a1:ac:eb:c7:c7:a0:5d:fe:06:86:fd:ab:33: f6:44:73:b2:36:ba:a8:01:78:74:7b:08:7c:49:1f:1d:f0:a6: 5b:b0:6c:3d:ac:12:83:46:ce:d1:f0:90:44:35:d7:18:d5:5a: c1:1b:c5:5c:ae:ef:26:5f:c6:b7:40:dd:4c:32:7d:de:e8:44: e6:14:b4:6a:4e:cd:b5:68:78:c9:d7:e6:cd:2d:9d:c1:bc:ca: 05:4b:a6:ec:91:8a:ae:a7:f3:53:4d:3c:ad:6c:50:97:c5:d9: 64:89:d8:25:47:58:fc:af:78:e2:c3:96:ed:2c:bf:c9:1c:97: 14:03:ae:94:a2:6b:f4:b8:7e:d1:86:e8:77:a5:d9:60:fc:e5: ff:52:6b:9c:28:ec:89:b0:31:06:74:69:aa:90:06:c4:cd:49: 4b:45:04:95:6f:61:0d:23:2f:7c:07:87:a0:63:8e:4f:c4:e4: 4c:da:0c:dd:a4:f5:21:c6:6c:8b:a9:a3:76:3a:45:7b:a4:26: 73:40:25:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52RzLZP+/+u6xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MmY4Y2VkN2YtZjBhYi00NjdkLTk5ZmQtYWRiODI2OTcxZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzRPlBhLE/lOu2+c2zkLxcLwB6n2FJmoEclP 8EVCob12mDO1qrh/naEfI60qDypKCp3XQ3FSR7WzO4LnCE36gEN/cTkLcwpDoBlU qw1UW5JP71Bqvq6wcddsperDW8CNKPMtsHsS59NMJIYuK+rASgYjHVF+HVhstuie Op584bJgdxpd6+Q+uF/L9IxSIJPzTC/XllzsrntJEiXNkxp6gkWY4k1IEza+Gtj2 A7D2cXyLYwhDUQ6uscY7Qltu1ndM8+NbzuQdvWcgcZqB9kx+yIT7jtWfnVE/ocna ZLY+iB1PgbFitcMf6+Nxl/hiVCFAqOcpghxXntdIB4iPsm0voQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPqZZQTZyMppgrSdNXY+yxUhM8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2U3N2YxZWItMjM2NS0z NmZmLTg0NmMtNmEzMDk3OGU5OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwCxKejevt/8PxJrQbk5hA+azNm8p5oHRRlXR70wPHpGaoP/ED9h18v /6L3k1I0CqYiHyHvBQBiQi9Zoazrx8egXf4Ghv2rM/ZEc7I2uqgBeHR7CHxJHx3w pluwbD2sEoNGztHwkEQ11xjVWsEbxVyu7yZfxrdA3Uwyfd7oROYUtGpOzbVoeMnX 5s0tncG8ygVLpuyRiq6n81NNPK1sUJfF2WSJ2CVHWPyveOLDlu0sv8kclxQDrpSi a/S4ftGG6Hel2WD85f9Sa5wo7ImwMQZ0aaqQBsTNSUtFBJVvYQ0jL3wHh6Bjjk/E 5EzaDN2k9SHGbIupo3Y6RXukJnNAJVg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:11:37 2026 by rpki-client