$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e80d1f7-8351-319b-bfd4-76361b9b0449.roa File: 3e80d1f7-8351-319b-bfd4-76361b9b0449.roa (raw, json) Hash identifier: wCv0QoZdOCSrFJVW7u4aCF2DDV7oYF9MF/aSK+aBR7A= Subject key identifier: 5D:0D:D7:15:88:67:15:3B:E9:3E:BA:88:86:6D:AB:AC:77:95:C8:A3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F214552AC5302E4C18B6F4880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e80d1f7-8351-319b-bfd4-76361b9b0449.roa Signing time: Thu 10 Sep 2026 15:36:48 +0000 ROA not before: Thu 10 Sep 2026 15:36:48 +0000 ROA not after: Wed 09 Dec 2026 16:36:48 +0000 asID: 36776 IP address blocks: 38.99.71.0/24 maxlen: 24 38.107.71.0/24 maxlen: 24 209.14.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:45:52:ac:53:02:e4:c1:8b:6f:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 10 15:36:48 2026 GMT Not After : Dec 9 16:36:48 2026 GMT Subject: CN=60f6903f-3b38-4ea2-a968-2e775763e7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:7d:7a:7b:25:a0:a1:1e:80:ee:04:23:07: 52:5f:f2:c8:9c:47:eb:29:5b:86:1e:4c:2d:9f:54: 35:d6:50:f8:a2:a1:f7:a9:6e:86:62:72:5b:e8:8d: d6:68:55:30:97:79:21:dc:30:3b:fc:15:9f:3e:1d: df:2e:be:29:88:61:62:9f:b6:84:ac:e6:cd:1e:fa: 4c:5f:bd:c6:38:0a:2d:c2:3b:1f:9c:d2:bd:b1:23: 5f:3f:26:ce:2c:94:09:5a:40:97:8d:a8:66:09:59: 6f:f2:d3:f8:64:e6:98:37:30:c1:01:3c:d9:ca:5f: 0c:c1:6d:b0:b9:14:f9:51:39:07:47:45:14:89:cd: 55:27:30:ae:c9:f7:bd:22:e7:88:a1:56:30:fc:d6: c3:5e:91:58:32:be:e5:e7:c7:b7:cd:bf:50:2d:aa: 4f:3a:d0:a3:b8:c7:80:98:1f:e6:73:37:70:23:7a: 4a:34:60:c5:77:41:09:dd:28:73:9e:42:5a:5f:46: 0f:82:6c:3f:47:f9:bb:0f:93:29:f2:85:9f:a0:21: 24:cd:48:ac:5b:8c:32:75:0d:62:a2:8a:2e:42:dd: 38:31:c7:3a:55:41:6b:f6:96:a7:80:08:2d:1b:f8: c8:5b:de:b3:95:15:18:5d:ab:05:bd:c4:2e:58:1f: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:D7:15:88:67:15:3B:E9:3E:BA:88:86:6D:AB:AC:77:95:C8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e80d1f7-8351-319b-bfd4-76361b9b0449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.99.71.0/24 38.107.71.0/24 209.14.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:61:fe:3e:f6:c1:ab:1c:d1:eb:74:32:2e:56:0a:28:71:bc: 97:10:d7:09:27:dd:4a:ee:ce:73:42:80:34:df:d3:19:5e:c5: 39:e9:62:e8:34:ce:fc:e9:d6:f2:70:b0:00:d8:cd:12:70:68: df:81:2b:0b:fe:df:32:78:43:1d:0f:9e:8a:3d:de:e9:5d:ec: 84:75:ff:7c:e4:5d:39:b7:ca:55:9d:8b:ce:cf:89:15:dd:19: 16:c6:53:70:ac:d8:fa:28:99:92:5e:e0:3b:24:ba:d2:5e:45: 11:5f:8d:53:12:49:97:63:01:de:9d:2c:ab:db:cb:5a:85:48: 05:d1:19:07:b0:ed:df:d9:ed:bd:d2:4b:ac:a3:4a:dd:09:a2: 2f:19:23:e3:c5:44:ca:89:24:49:06:76:87:ae:ee:63:a9:72: ba:3c:f7:4c:0e:af:44:0e:53:70:b1:66:d2:b4:ab:22:34:33: 9e:fa:70:0a:d4:51:90:04:c1:c2:ea:d9:96:85:d0:05:78:f2: f9:2d:48:27:28:68:bf:90:85:80:37:11:cb:3a:0b:82:2a:61: ce:09:c2:4a:ba:0c:42:6c:f5:5b:c4:03:e8:f6:fd:37:f1:6b: 73:ab:5e:2b:73:91:a6:b6:e7:9f:e8:bb:e9:61:c9:71:ed:83: 63:01:8a:61 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8hRVKsUwLkwYtvSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMDE1MzY0OFoXDTI2MTIwOTE2MzY0OFowLzEtMCsGA1UEAxMk NjBmNjkwM2YtM2IzOC00ZWEyLWE5NjgtMmU3NzU3NjNlN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxex9ensloKEegO4EIwdSX/LInEfrKVuGHkwt n1Q11lD4oqH3qW6GYnJb6I3WaFUwl3kh3DA7/BWfPh3fLr4piGFin7aErObNHvpM X73GOAotwjsfnNK9sSNfPybOLJQJWkCXjahmCVlv8tP4ZOaYNzDBATzZyl8MwW2w uRT5UTkHR0UUic1VJzCuyfe9IueIoVYw/NbDXpFYMr7l58e3zb9QLapPOtCjuMeA mB/mczdwI3pKNGDFd0EJ3ShznkJaX0YPgmw/R/m7D5Mp8oWfoCEkzUisW4wydQ1i ooouQt04Mcc6VUFr9pangAgtG/jIW96zlRUYXasFvcQuWB/7XQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF0N1xWIZxU76T66iIZtq6x3lcijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2U4MGQxZjctODM1MS0z MTliLWJmZDQtNzYzNjFiOWIwNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJmNHAwQA JmtHAwQA0Q6BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAM1h/j72wasc0et0Mi5WCihxvJcQ1wkn3UruznNC gDTf0xlexTnpYug0zvzp1vJwsADYzRJwaN+BKwv+3zJ4Qx0Pnoo93uld7IR1/3zk XTm3ylWdi87PiRXdGRbGU3Cs2PoomZJe4DskutJeRRFfjVMSSZdjAd6dLKvby1qF SAXRGQew7d/Z7b3SS6yjSt0Joi8ZI+PFRMqJJEkGdoeu7mOpcro890wOr0QOU3Cx ZtK0qyI0M576cArUUZAEwcLq2ZaF0AV48vktSCcoaL+QhYA3Ecs6C4IqYc4Jwkq6 DEJs9VvEA+j2/Tfxa3OrXitzkaa255/ou+lhyXHtg2MBimE= -----END CERTIFICATE-----Generated at Fri Sep 11 13:47:01 2026 by rpki-client