$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa File: 4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa (raw, json) Hash identifier: W8DJ4K7H4bFRf8mNAR1g1GsimBOS9eGSollHI0c/yuU= Subject key identifier: 93:DB:4A:4A:4D:AC:70:B4:A3:C0:47:23:88:89:54:1A:97:8A:A1:83 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F00DCC2218F9FD598B8A1A200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 215228 IP address blocks: 38.123.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c2:21:8f:9f:d5:98:b8:a1:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=4104d92f-6e55-4d29-a77a-f835f2cc8dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:c9:cb:80:91:22:e4:89:d1:e9:73:6f:eb: c2:6e:33:63:14:f0:ae:7d:28:76:5b:f3:d5:51:81: 01:49:f0:e0:61:5a:0a:5f:94:f3:ec:87:37:96:ea: 94:ce:5e:0d:c9:21:20:e3:74:13:11:8b:22:e1:8d: 96:01:3f:b5:02:df:27:ed:1e:98:15:03:bb:d2:32: b0:17:42:52:dd:92:01:d0:70:f6:8b:4e:95:f4:bb: 3a:57:98:a9:8f:9e:98:3b:4c:d1:d4:2c:5a:fb:ed: 65:88:ff:f4:bd:06:d7:11:06:44:c4:03:34:fb:90: 2f:db:cb:a1:d1:ab:7c:ec:93:f4:4d:6b:3d:a8:27: 7e:80:1e:e4:ba:e4:09:b8:60:e6:0c:ec:60:a7:f9: 03:5d:82:94:53:6b:e3:7d:8d:af:06:df:c8:ab:f6: 7c:3d:16:da:cb:12:7f:66:db:69:4b:39:ea:51:90: ea:fe:b4:26:a3:e5:16:ad:db:44:2e:38:8e:c5:c0: de:c4:8e:f7:56:65:5a:d6:22:d3:18:de:c5:e0:6b: d1:7c:a1:28:c1:70:80:11:ba:84:52:af:16:8e:9b: 15:f4:70:cc:bb:8c:59:8d:a2:ab:05:13:f8:7f:84: 5e:3f:e2:80:e4:d6:fd:33:17:e0:fa:a9:43:9e:d8: 2d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DB:4A:4A:4D:AC:70:B4:A3:C0:47:23:88:89:54:1A:97:8A:A1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.123.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:74:9b:15:3c:f2:ce:7b:8b:84:f3:85:1b:71:a0:97:34:7b: 94:bb:6c:5a:a6:66:13:3a:7e:a5:f5:58:25:35:9d:c0:5e:81: e4:ea:1a:0c:23:d6:2e:af:df:e8:19:aa:51:d9:4b:5e:7b:55: 53:cc:24:f1:0e:a3:45:d8:33:2d:07:ba:25:e2:77:4a:8e:4c: 0b:84:e2:86:1d:06:cd:a2:a2:ee:8d:f3:19:7e:9c:8a:d2:42: 15:b2:f2:84:aa:6f:fb:82:50:00:1d:43:c6:2a:cb:fc:a0:4e: e6:35:db:e1:27:58:4c:39:88:77:db:58:da:e5:f9:04:ee:4e: 14:2a:8e:16:05:52:49:9a:cf:29:4d:82:00:7f:ea:2a:ac:af: c9:e9:ea:48:69:57:a9:19:fa:e2:04:51:fc:c1:dc:ac:be:80: 39:b4:10:ca:9a:1f:8c:c0:5a:25:52:58:22:8b:82:af:95:c4: 26:c1:76:29:96:2b:53:31:67:b3:24:fb:c3:47:89:21:c8:59: 85:2f:ae:5f:d3:b1:34:de:07:a7:13:27:6e:65:98:04:87:89: f6:96:53:75:68:97:ce:af:83:33:c2:17:fc:67:60:cf:56:27: 61:e9:6d:11:49:5c:da:0a:d0:0b:1d:30:2a:b4:3e:3f:6f:49: 11:30:3c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MIhj5/VmLihogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk NDEwNGQ5MmYtNmU1NS00ZDI5LWE3N2EtZjgzNWYyY2M4ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfHJy4CRIuSJ0elzb+vCbjNjFPCufSh2W/PV UYEBSfDgYVoKX5Tz7Ic3luqUzl4NySEg43QTEYsi4Y2WAT+1At8n7R6YFQO70jKw F0JS3ZIB0HD2i06V9Ls6V5ipj56YO0zR1Cxa++1liP/0vQbXEQZExAM0+5Av28uh 0at87JP0TWs9qCd+gB7kuuQJuGDmDOxgp/kDXYKUU2vjfY2vBt/Iq/Z8PRbayxJ/ ZttpSznqUZDq/rQmo+UWrdtELjiOxcDexI73VmVa1iLTGN7F4GvRfKEowXCAEbqE Uq8WjpsV9HDMu4xZjaKrBRP4f4ReP+KA5Nb9Mxfg+qlDntgtVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPbSkpNrHC0o8BHI4iJVBqXiqGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGRiNTRkMGMtMWVlZC0z NjZlLWJlMGEtOGI3ZDRiNTQzYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJntoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh0mxU88s57i4TzhRtxoJc0e5S7bFqmZhM6fqX1WCU1ncBegeTqGgwj 1i6v3+gZqlHZS157VVPMJPEOo0XYMy0HuiXid0qOTAuE4oYdBs2iou6N8xl+nIrS QhWy8oSqb/uCUAAdQ8Yqy/ygTuY12+EnWEw5iHfbWNrl+QTuThQqjhYFUkmazylN ggB/6iqsr8np6khpV6kZ+uIEUfzB3Ky+gDm0EMqaH4zAWiVSWCKLgq+VxCbBdimW K1MxZ7Mk+8NHiSHIWYUvrl/TsTTeB6cTJ25lmASHifaWU3Vol86vgzPCF/xnYM9W J2HpbRFJXNoK0AsdMCq0Pj9vSREwPDA= -----END CERTIFICATE-----Generated at Fri Sep 11 13:50:53 2026 by rpki-client