$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa File: 683becb0-477a-3173-b330-2b640f5dd3b4.roa (raw, json) Hash identifier: NKkEr2d8e3tbKrN40hfn8HC36TvjYJX/RvZD3s7dfAQ= Subject key identifier: 8B:CD:A5:86:6C:A1:FF:56:F5:82:39:51:74:2F:54:25:5E:47:44:FE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F15CD04CF08A2A72FDDB26A30 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 274202 IP address blocks: 38.127.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:04:cf:08:a2:a7:2f:dd:b2:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=c9e66b50-a97a-4e23-8cee-3841c52d97f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:9d:4f:d8:84:e8:29:0f:89:00:53:2a:17: fc:9d:64:ea:0b:a1:e1:87:8a:7b:c8:cf:29:87:34: 39:9c:8c:9b:c7:98:3b:8e:4f:60:31:32:57:00:1c: f4:35:4d:4a:ff:99:7b:c6:57:06:2b:8b:2e:81:ca: 54:95:7b:44:37:d7:92:45:4b:15:f2:1a:97:d4:ee: ca:a0:55:81:d8:ec:3e:47:0f:52:ec:5f:4e:52:7d: 24:a1:94:6a:31:fe:a6:46:f8:4e:c4:7b:49:e5:44: 9f:23:e3:9b:52:c7:61:62:09:aa:7a:e4:ec:ac:ba: 61:71:db:bf:4b:b3:9f:50:da:54:52:ba:a0:42:7f: ab:22:00:c2:a0:d4:54:de:af:08:57:b3:20:1c:1c: f5:fd:d2:b8:8b:b8:e6:39:ea:f0:51:7f:d2:4b:38: be:ad:fc:ad:41:e3:2c:f9:14:b6:4b:1f:3a:41:f5: 28:fd:87:22:73:53:40:11:ba:11:6b:5d:3b:3c:89: bc:d5:24:01:30:21:f2:ea:c6:97:52:e8:61:90:27: 7c:14:a4:03:df:04:63:7e:2d:5e:00:fc:86:f3:23: 50:c2:14:a9:d2:6f:2e:9c:14:75:5f:b5:2c:61:3d: db:93:b8:b4:67:aa:a9:6d:f6:2a:16:23:4a:e5:1b: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CD:A5:86:6C:A1:FF:56:F5:82:39:51:74:2F:54:25:5E:47:44:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.127.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ba:b4:49:17:54:f8:97:22:b9:05:bb:98:91:34:d2:36:35: 2a:69:c9:0b:0e:a3:33:67:9c:33:2f:0a:17:b3:11:e2:55:05: 42:cb:52:6f:55:0b:78:c6:31:11:df:43:0e:be:de:8f:55:e0: 95:58:2b:ce:df:aa:23:56:3f:14:44:b3:bb:56:0c:67:f7:3f: 1c:ac:f2:bb:75:82:92:28:3e:ec:f6:30:ba:cb:84:14:fd:88: 93:06:50:e0:ac:7c:ca:f6:41:bb:31:d7:e4:97:77:6a:45:d0: 33:87:66:94:07:22:fc:32:63:5b:0b:18:8b:88:5f:91:ad:d5: 9e:00:ec:73:b1:4d:fe:9d:ed:3b:5c:cd:68:e2:bf:52:f9:b9: eb:1f:b3:d0:d2:e3:7d:18:9f:0f:5c:00:44:10:dc:32:4c:91: d5:53:09:9d:bf:e5:52:92:69:a7:13:69:d7:39:76:c5:24:14: ba:e2:df:2a:4f:f9:b5:bd:50:d2:ed:23:6c:fa:02:05:f7:d1: e0:82:64:fe:6a:ec:cc:c8:99:9c:a7:48:fa:b9:e8:11:63:ba: d6:7c:16:27:2d:e3:da:18:c8:59:28:d0:d7:38:7b:4c:12:f5: 09:53:61:74:d8:f2:79:f5:89:62:ed:dd:ac:56:f1:18:84:18: 83:fa:c3:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQTPCKKnL92yajAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YzllNjZiNTAtYTk3YS00ZTIzLThjZWUtMzg0MWM1MmQ5N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxudT9iE6CkPiQBTKhf8nWTqC6Hhh4p7yM8p hzQ5nIybx5g7jk9gMTJXABz0NU1K/5l7xlcGK4sugcpUlXtEN9eSRUsV8hqX1O7K oFWB2Ow+Rw9S7F9OUn0koZRqMf6mRvhOxHtJ5USfI+ObUsdhYgmqeuTsrLphcdu/ S7OfUNpUUrqgQn+rIgDCoNRU3q8IV7MgHBz1/dK4i7jmOerwUX/SSzi+rfytQeMs +RS2Sx86QfUo/Ycic1NAEboRa107PIm81SQBMCHy6saXUuhhkCd8FKQD3wRjfi1e APyG8yNQwhSp0m8unBR1X7UsYT3bk7i0Z6qpbfYqFiNK5RvYVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvNpYZsof9W9YI5UXQvVCVeR0T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjgzYmVjYjAtNDc3YS0z MTczLWIzMzAtMmI2NDBmNWRkM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJn/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq6tEkXVPiXIrkFu5iRNNI2NSppyQsOozNnnDMvChezEeJVBULLUm9V C3jGMRHfQw6+3o9V4JVYK87fqiNWPxREs7tWDGf3Pxys8rt1gpIoPuz2MLrLhBT9 iJMGUOCsfMr2Qbsx1+SXd2pF0DOHZpQHIvwyY1sLGIuIX5Gt1Z4A7HOxTf6d7Ttc zWjiv1L5uesfs9DS430Ynw9cAEQQ3DJMkdVTCZ2/5VKSaacTadc5dsUkFLri3ypP +bW9UNLtI2z6AgX30eCCZP5q7MzImZynSPq56BFjutZ8Fict49oYyFko0Nc4e0wS 9QlTYXTY8nn1iWLt3axW8RiEGIP6wxc= -----END CERTIFICATE-----Generated at Fri Sep 11 13:12:33 2026 by rpki-client