$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4b384582-d128-3acf-98de-2e9a41292d3e.roa File: 4b384582-d128-3acf-98de-2e9a41292d3e.roa (raw, json) Hash identifier: xNX1pjh3kgd3CsbGqZLuHRP4cG9kZBE6y7+1wyKgfhg= Subject key identifier: 5A:26:3B:E9:D3:22:56:A0:62:A9:45:C4:B5:CE:BC:FA:9F:B7:FE:63 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F00DCD4933DF9159E40607F80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4b384582-d128-3acf-98de-2e9a41292d3e.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 327752 IP address blocks: 38.22.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d4:93:3d:f9:15:9e:40:60:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=3bd85520-4eaf-4147-b970-7e06a87af07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:18:ae:91:86:ab:50:71:76:eb:b1:5e:2d: 15:16:18:22:8f:4e:2a:39:38:ad:27:5a:2b:a2:f1: be:41:e8:6d:a1:75:4c:2c:a1:73:10:b3:c5:97:1f: 7f:3c:f9:4d:e3:42:e8:0b:93:59:b9:91:ea:73:0a: 7f:72:54:62:17:9d:c3:f7:b0:6e:af:a3:39:ae:56: 3a:7a:2d:1f:c6:ba:c8:c7:81:98:1d:ef:1b:f8:eb: 2e:9a:67:94:7b:ef:a1:45:46:2e:4c:67:5c:0c:b7: 80:2d:22:57:48:c3:1f:20:46:64:c8:d4:55:fc:af: 49:4d:f8:69:c9:73:fb:02:45:cc:95:4a:ff:f8:f8: bf:b6:0c:5e:05:60:56:8f:1e:fb:4e:bc:28:c6:f9: 89:86:bf:65:b4:f4:61:e7:83:8d:77:2e:f5:dc:bf: 6f:40:3a:f8:c0:90:2c:bc:03:10:be:b9:de:19:b5: 60:9b:1a:76:88:03:81:94:d4:43:2e:79:3f:d9:c7: 1e:03:c1:0e:2a:96:b0:ed:54:63:ff:dd:58:1a:34: 8b:74:1c:82:96:58:f4:bb:df:25:cf:26:41:d9:8e: ba:61:b6:70:d2:20:57:5d:cc:c6:14:05:ba:e9:f4: d5:36:92:0f:9f:4e:13:a5:40:d2:81:97:73:f0:70: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:3B:E9:D3:22:56:A0:62:A9:45:C4:B5:CE:BC:FA:9F:B7:FE:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4b384582-d128-3acf-98de-2e9a41292d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.22.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:10:bc:f2:02:f8:85:02:1b:97:12:7d:87:af:64:4c:70:c3: a2:d2:da:1f:95:0b:94:d5:46:68:07:24:67:a6:96:01:87:63: 6f:6d:7f:49:bb:69:a6:31:c4:9e:1e:bb:1d:ef:e7:aa:95:40: d7:ad:6b:59:0c:1c:fe:78:75:aa:6a:2f:93:98:58:9d:6b:18: bf:73:cd:17:d9:54:1a:40:23:49:37:e5:7b:a9:da:60:26:37: fe:c3:fb:5d:87:0a:6f:66:9f:f9:80:99:5e:93:69:17:76:de: 33:e0:ee:e6:ef:c6:6e:5b:2a:e1:2e:1c:25:1a:fd:fe:b5:ec: 3e:c2:62:52:3d:15:b6:a5:2b:2b:f6:4e:aa:07:e6:89:cf:1c: aa:6f:9f:76:d2:9f:68:8b:3c:25:e2:4d:f9:64:f8:26:36:f9: c5:b4:c0:4f:51:b1:e8:43:dc:ce:7a:b9:02:3a:8b:97:83:eb: 26:c0:27:4b:db:d2:ae:b7:84:f1:99:15:9d:4f:35:20:ed:68: 01:32:44:2c:28:6f:34:0f:ca:02:39:bb:d2:48:8d:69:94:b3: 75:b6:c7:98:b1:04:dd:7e:7f:a3:4a:06:b5:80:a2:eb:d0:d7: 20:5f:cd:e3:d3:9b:16:1d:4e:e8:78:9e:c8:5a:73:19:bf:78: d6:8f:d0:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3NSTPfkVnkBgf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk M2JkODU1MjAtNGVhZi00MTQ3LWI5NzAtN2UwNmE4N2FmMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfYYrpGGq1BxduuxXi0VFhgij04qOTitJ1or ovG+QehtoXVMLKFzELPFlx9/PPlN40LoC5NZuZHqcwp/clRiF53D97Bur6M5rlY6 ei0fxrrIx4GYHe8b+OsummeUe++hRUYuTGdcDLeALSJXSMMfIEZkyNRV/K9JTfhp yXP7AkXMlUr/+Pi/tgxeBWBWjx77TrwoxvmJhr9ltPRh54ONdy713L9vQDr4wJAs vAMQvrneGbVgmxp2iAOBlNRDLnk/2cceA8EOKpaw7VRj/91YGjSLdByCllj0u98l zyZB2Y66YbZw0iBXXczGFAW66fTVNpIPn04TpUDSgZdz8HCwVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFomO+nTIlagYqlFxLXOvPqft/5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGIzODQ1ODItZDEyOC0z YWNmLTk4ZGUtMmU5YTQxMjkyZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUQvPIC+IUCG5cSfYevZExww6LS2h+VC5TVRmgHJGemlgGHY29tf0m7 aaYxxJ4eux3v56qVQNeta1kMHP54dapqL5OYWJ1rGL9zzRfZVBpAI0k35Xup2mAm N/7D+12HCm9mn/mAmV6TaRd23jPg7ubvxm5bKuEuHCUa/f617D7CYlI9FbalKyv2 TqoH5onPHKpvn3bSn2iLPCXiTflk+CY2+cW0wE9RsehD3M56uQI6i5eD6ybAJ0vb 0q63hPGZFZ1PNSDtaAEyRCwobzQPygI5u9JIjWmUs3W2x5ixBN1+f6NKBrWAouvQ 1yBfzePTmxYdTuh4nshacxm/eNaP0P4= -----END CERTIFICATE-----Generated at Fri Sep 11 13:55:38 2026 by rpki-client