$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/677b2612-5fdd-3615-a023-680f424e5d4d.roa File: 677b2612-5fdd-3615-a023-680f424e5d4d.roa (raw, json) Hash identifier: xn12hUuGH6LAFq5qxnQn0WvJ+2bpt/vAVHcDxlH6lTk= Subject key identifier: E5:A5:EF:D5:01:F3:3B:CA:7F:D8:7E:17:D7:3D:4D:9F:6F:9E:58:BC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1064E0125E68ED5EC2E9CC00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/677b2612-5fdd-3615-a023-680f424e5d4d.roa Signing time: Fri 04 Sep 2026 14:31:38 +0000 ROA not before: Fri 04 Sep 2026 14:31:38 +0000 ROA not after: Thu 03 Dec 2026 15:31:38 +0000 asID: 205544 IP address blocks: 38.253.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:64:e0:12:5e:68:ed:5e:c2:e9:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 4 14:31:38 2026 GMT Not After : Dec 3 15:31:38 2026 GMT Subject: CN=e036c82c-c1c6-4b9e-b92a-06195e1abb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:b6:3a:58:01:c2:8c:0c:5f:59:9e:07:57: 28:3c:1b:28:d9:cb:7d:33:98:c2:c5:75:79:d6:84: bd:fd:5a:ba:78:b0:9c:93:96:fa:69:c8:0a:c2:94: 30:c1:d5:7e:0c:71:cf:15:38:30:6e:d2:48:ad:0e: 54:f4:a3:42:7d:2b:50:98:b7:b6:3e:bf:1b:db:ff: 0d:30:c9:dc:8c:18:cb:19:6a:63:e0:a8:18:70:77: dd:d1:aa:9c:ee:8a:dc:6e:10:9a:8f:dd:c7:70:2d: 13:ab:21:88:a7:ce:d4:8c:a2:ca:88:c9:c2:7f:6c: 46:43:ec:d2:ac:4f:ad:ce:9d:51:88:16:75:68:cc: bf:4c:45:d5:ac:ef:5a:81:a0:08:71:77:2e:8c:ff: 90:4f:e5:da:81:e1:5d:30:00:28:8a:4f:d2:dd:d0: 51:f6:ce:5b:06:f6:61:de:85:58:e4:0a:ab:b3:fe: be:c4:85:51:28:ca:9a:28:38:ca:01:67:e1:62:a6: 8f:83:16:99:74:80:f8:f9:17:8f:60:67:b6:06:a6: da:6f:2a:ed:4d:2d:73:c7:f0:a4:f6:5c:64:38:b5: 32:87:7b:f9:b3:80:ae:a5:3f:7f:f5:fd:3a:46:c2: 51:65:98:de:6f:b2:f3:bf:47:22:46:dc:62:b6:a0: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A5:EF:D5:01:F3:3B:CA:7F:D8:7E:17:D7:3D:4D:9F:6F:9E:58:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/677b2612-5fdd-3615-a023-680f424e5d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2c:e5:4c:e5:81:2f:18:c5:31:f9:c9:67:bf:1e:1a:ae:2f: 19:77:37:c2:23:24:a7:68:ee:6e:b7:6b:c4:8a:91:cb:a2:99: b3:d9:f2:d5:fb:6c:5a:d7:cb:d5:97:be:b3:85:f1:e0:ba:31: 9d:84:4e:ed:4b:84:fa:cd:77:61:1c:08:45:87:24:1f:12:54: 77:d6:bf:a0:50:f0:4e:cf:dc:f8:9e:65:b6:56:af:3e:a5:93: 7b:7a:2d:b8:1b:2b:e6:18:33:f7:95:9f:dd:3b:2a:13:86:d5: 28:5c:ce:52:af:25:af:05:2e:76:fc:56:b3:71:4b:25:e9:b9: e1:2d:89:5d:85:51:6d:17:69:ec:84:54:cb:f0:71:52:d4:b3: 98:80:79:62:1d:08:79:11:ca:77:a0:e3:c0:d6:0b:19:8a:1d: dd:78:5e:6b:76:80:83:42:14:6f:24:5a:26:48:6f:0e:73:7c: 76:ed:34:32:d6:21:d0:1a:7a:72:5f:76:ea:b3:19:a7:24:f8: 19:8c:d8:2a:75:54:18:24:05:c9:51:68:0f:45:8c:01:5e:f3: 5a:6a:1c:11:93:46:97:5b:42:d6:a8:9e:10:24:73:d2:0b:07: 7f:a6:a2:a2:47:39:7a:20:01:94:7a:94:41:11:e7:30:1c:78: 1d:0a:0f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QZOASXmjtXsLpzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNDE0MzEzOFoXDTI2MTIwMzE1MzEzOFowLzEtMCsGA1UEAxMk ZTAzNmM4MmMtYzFjNi00YjllLWI5MmEtMDYxOTVlMWFiYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVC2OlgBwowMX1meB1coPBso2ct9M5jCxXV5 1oS9/Vq6eLCck5b6acgKwpQwwdV+DHHPFTgwbtJIrQ5U9KNCfStQmLe2Pr8b2/8N MMncjBjLGWpj4KgYcHfd0aqc7orcbhCaj93HcC0TqyGIp87UjKLKiMnCf2xGQ+zS rE+tzp1RiBZ1aMy/TEXVrO9agaAIcXcujP+QT+XageFdMAAoik/S3dBR9s5bBvZh 3oVY5Aqrs/6+xIVRKMqaKDjKAWfhYqaPgxaZdID4+RePYGe2BqbabyrtTS1zx/Ck 9lxkOLUyh3v5s4CupT9/9f06RsJRZZjeb7Lzv0ciRtxitqDcMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWl79UB8zvKf9h+F9c9TZ9vnli8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjc3YjI2MTItNWZkZC0z NjE1LWEwMjMtNjgwZjQyNGU1ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJv18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgs5UzlgS8YxTH5yWe/HhquLxl3N8IjJKdo7m63a8SKkcuimbPZ8tX7 bFrXy9WXvrOF8eC6MZ2ETu1LhPrNd2EcCEWHJB8SVHfWv6BQ8E7P3PieZbZWrz6l k3t6LbgbK+YYM/eVn907KhOG1ShczlKvJa8FLnb8VrNxSyXpueEtiV2FUW0XaeyE VMvwcVLUs5iAeWIdCHkRyneg48DWCxmKHd14Xmt2gINCFG8kWiZIbw5zfHbtNDLW IdAaenJfduqzGack+BmM2Cp1VBgkBclRaA9FjAFe81pqHBGTRpdbQtaonhAkc9IL B3+moqJHOXogAZR6lEER5zAceB0KD2g= -----END CERTIFICATE-----Generated at Thu Sep 10 17:28:13 2026 by rpki-client