$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fc72275-c26a-3955-822d-b24c1675ebc2.roa File: 4fc72275-c26a-3955-822d-b24c1675ebc2.roa (raw, json) Hash identifier: Mjsi6pcv8ReyejqU4PjqAwB1JNbcosZ+afNBXfAUALg= Subject key identifier: 23:71:23:25:35:38:40:A3:F2:1C:7E:10:3A:65:20:69:CE:51:84:92 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA7915F9542CB519AA70574C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fc72275-c26a-3955-822d-b24c1675ebc2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13767 IP address blocks: 38.46.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:5f:95:42:cb:51:9a:a7:05:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a50dc193-bec1-488d-b072-03dc2853fa3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:05:4c:f6:13:e5:4a:85:fe:f2:f0:41:b0: 94:4e:16:ee:37:35:f1:c4:b0:7c:8a:60:88:9a:5f: 05:3a:c5:bc:97:97:a5:3e:73:6d:8f:9d:33:cd:42: f7:ea:2f:17:34:80:28:89:4d:06:fe:7e:10:a9:43: 5a:d9:90:8a:6f:70:81:be:13:cd:35:bc:0f:cc:33: e2:93:56:a0:0f:d6:8d:59:c2:c6:3c:17:53:5c:6b: bf:66:00:ff:da:f6:6f:e5:4f:8d:97:66:b3:23:35: a2:b6:73:9d:81:df:e2:4a:34:48:2a:f0:0b:02:f4: 10:58:61:03:33:7f:ec:c6:1f:ec:04:2d:30:59:0c: 49:6f:ca:c4:99:34:80:4d:3d:51:13:d7:06:a5:33: 5d:2d:ff:c2:08:92:73:dc:3c:ff:8c:d6:c4:65:7d: 9e:68:3e:58:a8:c9:f3:5b:f3:60:67:7a:3a:28:9b: 23:c1:03:09:75:9f:e6:50:c8:dc:15:e1:23:f7:a2: 41:77:ab:97:74:79:17:ca:35:b7:33:ba:37:36:2f: 46:88:5f:72:4d:06:46:35:54:bc:2f:4f:91:97:03: 81:83:12:51:b8:3a:fc:d1:50:53:5a:90:85:78:0a: 09:94:c4:f0:f4:e9:de:cf:42:70:07:00:d5:3a:49: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:71:23:25:35:38:40:A3:F2:1C:7E:10:3A:65:20:69:CE:51:84:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fc72275-c26a-3955-822d-b24c1675ebc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.46.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:45:42:46:a2:4d:f4:81:78:31:e8:bc:3a:27:a4:fe:00:54: 99:6b:66:33:61:31:46:61:3e:89:bc:3e:88:c9:1b:19:94:f0: 3a:fe:20:a4:e9:c1:a9:19:e4:4a:ce:a1:04:0c:e9:c9:a4:bb: 34:18:5a:b6:dd:c9:ac:e4:7b:46:7a:c7:62:fd:d2:80:87:5f: e5:af:81:20:32:ef:04:14:01:17:04:57:57:20:db:64:41:cb: aa:7f:3f:ff:1c:40:12:d6:c1:36:7a:d3:d5:01:90:ab:e0:f2: d7:ef:b3:ec:aa:47:a4:d6:e6:74:12:ed:a5:4f:f4:30:b4:e0: 6d:ad:5b:e9:db:55:48:4f:81:b9:07:43:2c:5f:13:35:f8:8c: 4f:e0:82:78:db:eb:58:83:ab:74:d2:84:9f:50:e7:98:50:3d: d5:ff:99:98:51:8c:5d:36:a6:f1:91:0b:ea:0a:92:42:08:91: 18:61:e8:1b:83:95:d8:d5:17:6b:15:2e:12:5f:b1:d7:13:7c: bd:5c:e6:50:99:40:fd:51:28:b2:0b:c5:8b:1f:37:bc:e0:8b: 6b:0f:6a:d9:38:79:2a:28:e0:9f:fb:cd:bf:ad:f0:f4:a4:ed: fb:15:02:d4:99:57:03:27:30:ea:2d:0d:76:dd:62:11:4b:15: 87:80:2f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkV+VQstRmqcFdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTUwZGMxOTMtYmVjMS00ODhkLWIwNzItMDNkYzI4NTNmYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTsFTPYT5UqF/vLwQbCUThbuNzXxxLB8imCI ml8FOsW8l5elPnNtj50zzUL36i8XNIAoiU0G/n4QqUNa2ZCKb3CBvhPNNbwPzDPi k1agD9aNWcLGPBdTXGu/ZgD/2vZv5U+Nl2azIzWitnOdgd/iSjRIKvALAvQQWGED M3/sxh/sBC0wWQxJb8rEmTSATT1RE9cGpTNdLf/CCJJz3Dz/jNbEZX2eaD5YqMnz W/NgZ3o6KJsjwQMJdZ/mUMjcFeEj96JBd6uXdHkXyjW3M7o3Ni9GiF9yTQZGNVS8 L0+RlwOBgxJRuDr80VBTWpCFeAoJlMTw9Onez0JwBwDVOkmxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNxIyU1OECj8hx+EDplIGnOUYSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGZjNzIyNzUtYzI2YS0z OTU1LTgyMmQtYjI0YzE2NzVlYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJi6aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZFQkaiTfSBeDHovDonpP4AVJlrZjNhMUZhPom8PojJGxmU8Dr+IKTp wakZ5ErOoQQM6cmkuzQYWrbdyazke0Z6x2L90oCHX+WvgSAy7wQUARcEV1cg22RB y6p/P/8cQBLWwTZ609UBkKvg8tfvs+yqR6TW5nQS7aVP9DC04G2tW+nbVUhPgbkH QyxfEzX4jE/ggnjb61iDq3TShJ9Q55hQPdX/mZhRjF02pvGRC+oKkkIIkRhh6BuD ldjVF2sVLhJfsdcTfL1c5lCZQP1RKLILxYsfN7zgi2sPatk4eSoo4J/7zb+t8PSk 7fsVAtSZVwMnMOotDXbdYhFLFYeAL28= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:33 2026 by rpki-client