$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c88a499-a162-3ae1-9878-382d0d171392.roa File: 4c88a499-a162-3ae1-9878-382d0d171392.roa (raw, json) Hash identifier: r15isgF09TCki1UAoX1epuLCdjjxVhg71EPhs+YRNzs= Subject key identifier: 0A:5A:42:49:CA:58:C4:B4:53:F7:3E:87:1C:58:4F:C8:45:80:BC:4D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EFCB997A35A08E04136A95F60 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c88a499-a162-3ae1-9878-382d0d171392.roa Signing time: Fri 28 Aug 2026 13:26:10 +0000 ROA not before: Fri 28 Aug 2026 13:26:10 +0000 ROA not after: Thu 26 Nov 2026 14:26:10 +0000 asID: 137458 IP address blocks: 38.94.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:b9:97:a3:5a:08:e0:41:36:a9:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 28 13:26:10 2026 GMT Not After : Nov 26 14:26:10 2026 GMT Subject: CN=49475a75-b6f0-4548-8781-9b04c8ad1cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:1e:5e:2f:24:1e:ef:27:90:b7:56:8c:c4: a1:11:d3:62:cc:3f:1e:24:c9:45:70:38:cf:79:92: e8:2e:67:86:7a:fc:4d:74:8d:f4:e8:ef:41:9e:5c: 57:27:45:0b:d4:4b:3f:73:10:07:8c:d8:47:76:7c: 4c:f3:1f:e5:5e:f8:37:85:f4:6e:38:98:3f:68:56: 4d:b7:c4:00:bc:3e:f1:ef:72:ec:ee:01:88:20:79: a3:4c:62:02:b3:f2:46:bf:2d:e9:95:0f:8a:db:b5: 26:41:50:ef:e7:6f:90:f1:1b:2b:7f:d3:f7:72:77: b8:73:f0:b3:86:92:de:69:f1:59:c9:53:ba:8d:3b: 8c:55:da:60:e7:f5:ea:0b:aa:03:51:3b:3b:b7:e9: 59:6f:93:ff:bf:e5:17:57:ce:c6:7c:b3:49:ef:67: d0:62:6f:11:eb:3c:6c:d4:3b:84:42:75:f2:c5:a9: 43:45:45:a0:da:0a:86:b4:0b:d7:d0:37:98:a0:0e: ea:6a:32:f3:5b:e0:e8:af:78:31:2a:5b:db:94:5f: 24:ca:eb:6b:c6:10:9c:aa:39:85:42:3f:63:b5:1e: ae:7b:7b:b0:45:8b:43:5e:a1:85:93:ed:fb:9a:8d: 25:35:29:a9:98:ee:bb:fd:d5:1a:22:fc:97:f7:50: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:42:49:CA:58:C4:B4:53:F7:3E:87:1C:58:4F:C8:45:80:BC:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c88a499-a162-3ae1-9878-382d0d171392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f8:8f:45:07:04:5d:08:8d:84:82:fc:cc:7e:2c:0f:92:dc: 69:95:14:96:59:9c:23:e5:36:53:64:9b:f2:9f:b1:9c:f7:18: 8e:c5:31:9b:d7:8b:11:b6:65:18:36:90:89:d6:3a:dd:d8:ca: 58:e3:de:27:63:cd:a3:cf:00:cd:28:6e:8a:d3:1f:25:e7:fb: 59:eb:ec:77:b0:ce:4e:31:c8:20:61:95:28:35:f5:e2:b3:d7: 08:d3:12:b0:66:24:99:35:f4:12:01:ef:d7:af:7a:2e:89:78: c5:fa:c5:d7:9c:38:b9:40:07:f4:c0:0c:1e:34:27:b2:e7:1d: 5c:f4:18:47:fe:e5:19:28:a6:0d:db:d3:a1:2d:07:11:e6:2c: 0e:95:bc:46:4b:1c:dc:28:7e:2b:0a:3f:56:79:da:68:de:d5: b4:c3:1b:88:d6:c0:67:ea:db:c0:97:34:dd:5c:34:63:70:be: 20:37:02:bb:3c:9b:95:8c:d3:b9:2e:9c:81:a2:7e:b8:90:b7: 0f:c3:5c:6b:94:9d:9f:26:ad:05:03:d1:81:04:c1:e1:87:93: a1:05:35:f6:de:ab:9b:93:44:83:d6:08:16:c6:11:f3:3f:c6: 14:8e:e2:b8:f1:c2:c9:b0:80:56:56:44:a9:94:8c:d4:6a:2a: 21:93:ee:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78uZejWgjgQTapX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyODEzMjYxMFoXDTI2MTEyNjE0MjYxMFowLzEtMCsGA1UEAxMk NDk0NzVhNzUtYjZmMC00NTQ4LTg3ODEtOWIwNGM4YWQxY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ4eXi8kHu8nkLdWjMShEdNizD8eJMlFcDjP eZLoLmeGevxNdI306O9BnlxXJ0UL1Es/cxAHjNhHdnxM8x/lXvg3hfRuOJg/aFZN t8QAvD7x73Ls7gGIIHmjTGICs/JGvy3plQ+K27UmQVDv52+Q8Rsrf9P3cne4c/Cz hpLeafFZyVO6jTuMVdpg5/XqC6oDUTs7t+lZb5P/v+UXV87GfLNJ72fQYm8R6zxs 1DuEQnXyxalDRUWg2gqGtAvX0DeYoA7qajLzW+Dor3gxKlvblF8kyutrxhCcqjmF Qj9jtR6ue3uwRYtDXqGFk+37mo0lNSmpmO67/dUaIvyX91BNCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApaQknKWMS0U/c+hxxYT8hFgLxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGM4OGE0OTktYTE2Mi0z YWUxLTk4NzgtMzgyZDBkMTcxMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJl7EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr4j0UHBF0IjYSC/Mx+LA+S3GmVFJZZnCPlNlNkm/KfsZz3GI7FMZvX ixG2ZRg2kInWOt3Yyljj3idjzaPPAM0oborTHyXn+1nr7Hewzk4xyCBhlSg19eKz 1wjTErBmJJk19BIB79evei6JeMX6xdecOLlAB/TADB40J7LnHVz0GEf+5Rkopg3b 06EtBxHmLA6VvEZLHNwofisKP1Z52mje1bTDG4jWwGfq28CXNN1cNGNwviA3Ars8 m5WM07kunIGifriQtw/DXGuUnZ8mrQUD0YEEweGHk6EFNfbeq5uTRIPWCBbGEfM/ xhSO4rjxwsmwgFZWRKmUjNRqKiGT7v0= -----END CERTIFICATE-----Generated at Fri Sep 11 13:05:13 2026 by rpki-client