$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa File: 5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa (raw, json) Hash identifier: HMFB2FzI6v9tPqDsStdGIOpgQiesX8lrULSLurbYE3U= Subject key identifier: 0B:62:99:0E:46:2D:6B:8E:D4:01:C7:E5:72:A1:71:65:79:13:46:86 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EEBEC9FEA77FBBE0DC6C21300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 273273 IP address blocks: 38.236.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:9f:ea:77:fb:be:0d:c6:c2:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=4da8193c-fcd7-4781-a07a-4a2ae69131ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:fd:cc:9b:f5:c8:3d:6c:61:7f:18:fa:7b: 98:b9:97:35:bf:81:c6:9e:b5:62:67:21:04:c1:f7: c6:21:65:6d:64:ee:ce:ab:e8:62:49:54:b8:ff:b3: bb:26:05:7f:61:41:11:bd:56:a0:68:f9:09:38:79: d7:63:ae:22:b6:68:84:fa:94:ac:7d:57:cf:d6:a1: 09:4e:e5:02:96:48:52:c9:15:16:b7:30:a6:ef:71: d7:ee:23:41:57:09:9d:c7:bd:41:9b:30:b1:18:b0: 91:df:1d:67:25:23:cf:ad:b0:9e:c4:e2:53:da:ea: 64:f2:0a:06:df:10:75:5f:72:9b:44:b8:c0:7f:94: 9f:07:80:c7:c2:4c:df:33:a5:e1:88:17:a8:e4:4b: fc:41:ad:8e:13:d3:92:16:61:0d:bc:54:fa:e3:5c: 57:d7:32:b9:b6:55:08:66:13:60:b2:43:59:47:fe: 8a:c1:8f:e1:4f:2a:dc:be:cd:82:dc:a5:87:65:fd: f7:c7:f8:f1:47:1e:9f:70:13:17:b5:29:72:85:80: fc:6a:64:ec:c1:50:56:a5:b5:1b:e8:89:4e:d5:2e: 56:46:03:3e:76:f4:d3:08:67:3f:0c:02:df:6e:aa: 96:af:e7:49:2e:30:ca:ad:ea:b9:76:be:21:02:7d: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:62:99:0E:46:2D:6B:8E:D4:01:C7:E5:72:A1:71:65:79:13:46:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:cb:54:e5:4e:16:92:55:6f:5b:57:9f:37:a9:9b:60:eb:2d: 64:1b:66:25:79:ed:79:d5:f1:df:b9:9f:43:a0:03:3c:6f:77: 17:b6:93:b7:a3:ba:d9:79:ae:98:49:dc:58:19:ab:84:d5:3e: 96:31:0f:27:92:50:48:20:ab:0c:64:74:76:86:96:a4:c1:d3: 39:a5:15:47:2f:c8:fa:d7:65:07:e4:9c:69:bf:a5:d4:d4:23: 7e:d3:c5:3b:b9:86:5c:70:7e:50:eb:e2:f9:23:b0:ef:34:c3: fd:4f:81:20:5f:f5:99:1d:6f:41:f3:b8:d7:31:a1:45:8c:3d: 94:7c:1f:32:3f:07:13:53:c8:7c:1f:b2:45:7d:57:57:2d:ee: 97:b5:39:5e:2b:05:ed:c6:39:5a:6c:e0:c7:63:30:ab:c0:1d: d1:38:99:c7:c2:92:74:81:2f:bd:0b:81:8d:45:4b:f5:1f:42: d8:88:38:5d:da:88:9a:16:4d:ce:d6:72:5f:58:b6:a3:7f:03: 38:d9:33:40:cf:9b:81:b1:fa:b5:c8:3c:68:d0:22:f7:47:f1: 8a:a9:d4:a8:18:e8:8c:07:0d:e9:75:4f:45:61:e4:74:e0:6f: 82:32:3e:f9:f9:10:32:a1:6c:15:90:cd:1f:35:3a:8a:4f:16: 5f:d9:9a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7r7J/qd/u+DcbCEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk NGRhODE5M2MtZmNkNy00NzgxLWEwN2EtNGEyYWU2OTEzMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wv9zJv1yD1sYX8Y+nuYuZc1v4HGnrViZyEE wffGIWVtZO7Oq+hiSVS4/7O7JgV/YUERvVagaPkJOHnXY64itmiE+pSsfVfP1qEJ TuUClkhSyRUWtzCm73HX7iNBVwmdx71BmzCxGLCR3x1nJSPPrbCexOJT2upk8goG 3xB1X3KbRLjAf5SfB4DHwkzfM6XhiBeo5Ev8Qa2OE9OSFmENvFT641xX1zK5tlUI ZhNgskNZR/6KwY/hTyrcvs2C3KWHZf33x/jxRx6fcBMXtSlyhYD8amTswVBWpbUb 6IlO1S5WRgM+dvTTCGc/DALfbqqWr+dJLjDKreq5dr4hAn30yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtimQ5GLWuO1AHH5XKhcWV5E0aGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWEzZmM0M2QtYjk1Zi0z NTkwLWEyZTItNTcxNWY5YjcxZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvLVOVOFpJVb1tXnzepm2DrLWQbZiV57XnV8d+5n0OgAzxvdxe2k7ej utl5rphJ3FgZq4TVPpYxDyeSUEggqwxkdHaGlqTB0zmlFUcvyPrXZQfknGm/pdTU I37TxTu5hlxwflDr4vkjsO80w/1PgSBf9Zkdb0HzuNcxoUWMPZR8HzI/BxNTyHwf skV9V1ct7pe1OV4rBe3GOVps4MdjMKvAHdE4mcfCknSBL70LgY1FS/UfQtiIOF3a iJoWTc7Wcl9YtqN/AzjZM0DPm4Gx+rXIPGjQIvdH8Yqp1KgY6IwHDel1T0Vh5HTg b4IyPvn5EDKhbBWQzR81OopPFl/ZmsI= -----END CERTIFICATE-----Generated at Fri Sep 11 13:51:09 2026 by rpki-client