$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/59f51938-3954-31fa-aa49-43be00d2434b.roa File: 59f51938-3954-31fa-aa49-43be00d2434b.roa (raw, json) Hash identifier: HygQw/xWl9JQX7HldX+CxYjDkU2eQL1BuGoV8HSU2Ek= Subject key identifier: 04:BA:3A:EC:F8:BC:5F:A3:17:A7:EE:20:3A:7A:D0:F2:87:7D:D2:BE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF01CE1C77D87D9723D8F4040 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/59f51938-3954-31fa-aa49-43be00d2434b.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 15626 IP address blocks: 38.244.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e1:c7:7d:87:d9:72:3d:8f:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=9ac0110d-28bd-4414-897f-4a0e097fc5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:7a:ef:85:78:ec:7b:78:7d:9c:1a:88:47: b7:bd:14:75:38:8b:45:58:52:79:21:4c:e2:d0:14: 5d:bf:bb:00:44:44:60:8a:03:d4:43:8f:f1:18:2d: 96:8e:25:43:89:7e:ee:03:c5:10:8c:dc:fb:b6:f1: c7:99:ca:24:23:12:c8:a4:38:dc:bf:e3:d9:5d:8f: b8:30:84:87:2d:9b:92:ef:8f:37:f2:97:d7:9e:d8: 6e:de:33:7c:bb:b2:74:a8:54:1a:f5:62:10:c4:1a: bc:c5:12:5a:d6:a3:68:e6:37:79:1d:3a:27:b8:60: 83:d5:cb:12:70:1f:e3:a1:00:b7:6b:e6:57:df:4c: 0b:00:a5:f8:65:ef:7e:f4:85:5b:ff:0c:4b:f4:be: 9d:65:64:ca:b7:ea:48:c3:0b:56:27:62:1a:f6:fc: 68:ba:5b:e7:7b:a5:c7:58:99:fd:42:43:1e:33:da: cc:b5:9a:36:17:19:6e:ff:b0:1e:a9:40:7f:a8:c4: 92:e6:2e:55:fa:40:fb:06:a4:d0:46:d7:7b:fe:5a: 17:bc:43:99:5e:e8:cc:d4:2e:ac:13:10:1f:8b:99: 9d:d1:b4:08:59:ca:82:4e:d8:16:70:c2:6d:41:4f: be:db:83:b5:27:46:09:ec:e3:dc:d8:de:0f:d9:0a: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BA:3A:EC:F8:BC:5F:A3:17:A7:EE:20:3A:7A:D0:F2:87:7D:D2:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/59f51938-3954-31fa-aa49-43be00d2434b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.244.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:06:ea:eb:94:b7:e1:21:83:27:53:39:a8:50:03:d5:b9:07: 4b:64:2e:62:cc:37:66:74:b1:96:b4:c6:c4:0d:03:68:af:03: fb:22:98:05:71:15:e4:89:96:76:44:5b:7c:36:1c:96:9a:44: 25:b7:23:ba:12:a2:17:ae:11:ac:74:ac:a5:44:bd:68:be:43: 33:36:ff:72:c5:ee:2e:94:31:4a:2b:21:52:7a:a2:1c:0b:9f: 46:ef:3e:aa:4c:df:23:7c:5f:37:b2:88:e9:0c:a2:b1:a8:e8: 5d:d6:48:11:67:37:95:2e:99:38:8f:a0:47:f9:56:85:92:28: ca:c3:3a:7f:6f:ee:97:ac:0d:e3:d7:9c:f8:02:17:32:ce:b2: e4:81:3f:60:19:66:3d:59:fa:6a:c7:f4:8d:00:50:f3:7d:e5: e1:88:eb:bd:f5:f6:be:f8:40:fe:11:3f:9e:66:26:f1:20:5f: 82:18:cb:d2:c6:95:83:e3:e1:c0:a4:d5:16:d8:3e:68:7f:de: a9:54:d6:96:f4:c3:46:50:1b:91:c2:fa:ea:c7:fe:de:59:dc: 3e:d1:93:ab:cb:fe:76:c6:ad:87:3a:4d:b3:f7:0a:c1:02:7d: 27:26:82:08:25:53:90:f4:ba:b0:84:bf:2c:d0:ce:dd:25:7f: 31:c9:57:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHOHHfYfZcj2PQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OWFjMDExMGQtMjhiZC00NDE0LTg5N2YtNGEwZTA5N2ZjNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk9674V47Ht4fZwaiEe3vRR1OItFWFJ5IUzi 0BRdv7sARERgigPUQ4/xGC2WjiVDiX7uA8UQjNz7tvHHmcokIxLIpDjcv+PZXY+4 MISHLZuS74838pfXnthu3jN8u7J0qFQa9WIQxBq8xRJa1qNo5jd5HTonuGCD1csS cB/joQC3a+ZX30wLAKX4Ze9+9IVb/wxL9L6dZWTKt+pIwwtWJ2Ia9vxoulvne6XH WJn9QkMeM9rMtZo2Fxlu/7AeqUB/qMSS5i5V+kD7BqTQRtd7/loXvEOZXujM1C6s ExAfi5md0bQIWcqCTtgWcMJtQU++24O1J0YJ7OPc2N4P2QpuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS6Ouz4vF+jF6fuIDp60PKHfdK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTlmNTE5MzgtMzk1NC0z MWZhLWFhNDktNDNiZTAwZDI0MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUG6uuUt+EhgydTOahQA9W5B0tkLmLMN2Z0sZa0xsQNA2ivA/simAVx FeSJlnZEW3w2HJaaRCW3I7oSoheuEax0rKVEvWi+QzM2/3LF7i6UMUorIVJ6ohwL n0bvPqpM3yN8XzeyiOkMorGo6F3WSBFnN5UumTiPoEf5VoWSKMrDOn9v7pesDePX nPgCFzLOsuSBP2AZZj1Z+mrH9I0AUPN95eGI67319r74QP4RP55mJvEgX4IYy9LG lYPj4cCk1RbYPmh/3qlU1pb0w0ZQG5HC+urH/t5Z3D7Rk6vL/nbGrYc6TbP3CsEC fScmggglU5D0urCEvyzQzt0lfzHJVzs= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:07 2026 by rpki-client