$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fd71001-d806-33d7-a77b-938d17ff6d6a.roa File: 3fd71001-d806-33d7-a77b-938d17ff6d6a.roa (raw, json) Hash identifier: Eoes7AEN1Ji6fg29txuX49RKROthfqMMWYz8zliLXDg= Subject key identifier: F7:CE:E6:37:98:1F:85:62:41:5D:B3:16:27:0F:BE:BB:D2:3C:6C:2A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0C077D9F1176F7AED21C4380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fd71001-d806-33d7-a77b-938d17ff6d6a.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 399122 IP address blocks: 38.3.80.0/20 maxlen: 24 154.27.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:7d:9f:11:76:f7:ae:d2:1c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=086b6bb5-4a1c-4a53-a53c-e69abb643ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:5a:62:94:d4:f1:1a:2b:e2:9c:33:7e:62: f8:ca:4a:1a:ba:00:21:44:d7:73:7d:3f:09:30:29: 38:72:7a:cc:7b:de:cf:d5:77:53:d5:f3:89:d5:11: 52:2a:26:14:8f:9e:d1:42:aa:66:85:c7:05:65:02: d1:3b:4d:87:70:8e:0a:65:3c:fe:75:ef:32:8c:4f: 57:2c:62:48:b9:69:de:08:aa:df:aa:c3:53:20:6e: 49:3a:36:e7:51:33:73:3f:e3:fe:bc:34:2b:86:48: e7:4b:29:e1:6b:1c:43:5a:75:d1:7c:ad:05:13:b3: 64:28:15:3b:13:39:f4:43:ff:5a:a0:1f:59:4c:74: df:09:5c:f5:dc:b5:79:07:66:63:11:08:20:4b:2d: f4:bd:eb:a2:b5:cf:27:16:8e:24:88:c7:b2:bb:56: c9:6b:79:a4:a6:55:88:cd:5e:c2:1b:4a:f0:05:d0: 91:d8:72:dd:0a:2a:6e:51:bb:7a:a0:0e:8d:58:1f: ec:c1:d6:70:b7:a4:92:71:e3:89:97:a9:1d:21:2d: 65:94:65:d0:85:28:1c:da:49:8f:f9:75:bb:7d:d5: 87:86:b0:d5:4b:9a:0d:e9:92:bf:2b:c8:db:11:66: 75:05:99:f4:40:4d:39:af:1b:2a:61:30:11:95:2a: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CE:E6:37:98:1F:85:62:41:5D:B3:16:27:0F:BE:BB:D2:3C:6C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fd71001-d806-33d7-a77b-938d17ff6d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.80.0/20 154.27.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:77:de:12:1a:55:72:71:63:7a:a1:54:8b:66:f3:58:90:28: 86:29:44:3d:c2:02:ad:4e:22:5f:80:50:22:d5:06:e0:55:6d: ac:d3:6e:40:cd:ad:74:de:d0:78:f3:a9:c5:8b:83:f7:e3:3f: 2e:40:f7:17:41:72:3b:d2:15:6b:bf:37:a9:08:bc:c4:22:ae: 5f:c6:2d:7a:b0:d3:26:ef:56:d1:61:aa:e2:9b:d7:5e:b1:4f: 6f:2a:7a:86:f3:18:2c:c4:0f:4d:52:8a:15:3c:95:ff:82:b2: 17:80:3c:c7:e2:50:06:cb:df:03:b0:df:56:ae:f6:46:52:1a: 6b:d9:06:71:f5:e4:ca:9c:f0:28:66:4b:82:8f:d9:8d:54:a7: 9d:a5:b5:1f:3f:b5:0b:48:24:24:3a:f6:9f:86:3b:e0:98:cd: eb:67:2d:73:d4:72:5a:45:f8:a3:dd:b4:dd:33:c7:2b:ea:4e: 56:4a:80:31:db:8c:ec:3f:89:7d:f5:13:53:5c:3a:64:1c:c3: f7:c5:29:3c:10:00:a7:71:9f:72:83:5c:39:a4:cd:de:37:09: 37:69:e7:fb:d6:3f:46:86:48:2b:48:43:d8:82:04:72:68:0a: 36:7f:3b:d9:4f:63:f6:70:0f:bf:b8:2e:63:d1:8a:c3:49:07: e0:56:db:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8MB32fEXb3rtIcQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MDg2YjZiYjUtNGExYy00YTUzLWE1M2MtZTY5YWJiNjQzZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZZaYpTU8Ror4pwzfmL4ykoaugAhRNdzfT8J MCk4cnrMe97P1XdT1fOJ1RFSKiYUj57RQqpmhccFZQLRO02HcI4KZTz+de8yjE9X LGJIuWneCKrfqsNTIG5JOjbnUTNzP+P+vDQrhkjnSynhaxxDWnXRfK0FE7NkKBU7 Ezn0Q/9aoB9ZTHTfCVz13LV5B2ZjEQggSy30veuitc8nFo4kiMeyu1bJa3mkplWI zV7CG0rwBdCR2HLdCipuUbt6oA6NWB/swdZwt6SSceOJl6kdIS1llGXQhSgc2kmP +XW7fdWHhrDVS5oN6ZK/K8jbEWZ1BZn0QE05rxsqYTARlSr32wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPfO5jeYH4ViQV2zFicPvrvSPGwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2ZkNzEwMDEtZDgwNi0z M2Q3LWE3N2ItOTM4ZDE3ZmY2ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJgNQAwQE mhsQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMF33hIaVXJxY3qhVItm81iQKIYpRD3CAq1OIl+AUCLVBuBV bazTbkDNrXTe0HjzqcWLg/fjPy5A9xdBcjvSFWu/N6kIvMQirl/GLXqw0ybvVtFh quKb116xT28qeobzGCzED01SihU8lf+CsheAPMfiUAbL3wOw31au9kZSGmvZBnH1 5Mqc8ChmS4KP2Y1Up52ltR8/tQtIJCQ69p+GO+CYzetnLXPUclpF+KPdtN0zxyvq TlZKgDHbjOw/iX31E1NcOmQcw/fFKTwQAKdxn3KDXDmkzd43CTdp5/vWP0aGSCtI Q9iCBHJoCjZ/O9lPY/ZwD7+4LmPRisNJB+BW25M= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:32 2026 by rpki-client