$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68b9529d-8dd9-3226-b990-07464a281dba.roa File: 68b9529d-8dd9-3226-b990-07464a281dba.roa (raw, json) Hash identifier: MINpidUYrzcPDzvf/SmdgDVbfjJhLLbzNQXA4Xo+IrY= Subject key identifier: 33:55:6E:3D:1F:FF:DE:88:FC:6E:81:2B:02:2D:26:92:93:09:4E:BD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0E2740D04F98DE460FC3FF00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68b9529d-8dd9-3226-b990-07464a281dba.roa Signing time: Thu 03 Sep 2026 19:15:51 +0000 ROA not before: Thu 03 Sep 2026 19:15:51 +0000 ROA not after: Wed 02 Dec 2026 20:15:51 +0000 asID: 329215 IP address blocks: 38.148.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:27:40:d0:4f:98:de:46:0f:c3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 19:15:51 2026 GMT Not After : Dec 2 20:15:51 2026 GMT Subject: CN=901f2dd3-82ef-430a-8a50-6d3d3e050c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:1d:b2:09:47:d3:78:d9:c9:42:fc:c3:7a: 55:ab:e7:3d:42:32:74:4c:b3:61:5d:6b:ca:d6:92: 6c:bd:d3:7f:ac:a9:36:a4:f1:12:bf:e9:81:a6:0b: ef:59:4d:8e:9d:f4:fa:6d:9d:86:93:38:e8:2a:47: 31:08:b5:2d:2e:13:7e:29:dd:04:4f:b9:e1:88:1d: df:c3:2e:94:c1:58:2d:ec:0a:a0:e3:a4:e4:de:61: 62:f9:a2:58:2c:28:d2:4d:f9:8e:30:2c:1d:cc:da: 53:39:4d:d8:4a:a4:c6:3c:79:bb:f7:79:97:53:3a: d7:3a:ad:a3:a7:cf:cf:ba:d2:74:db:ad:ee:98:a3: bd:fd:69:69:c8:86:41:07:ae:ba:a5:3c:57:d3:f7: 17:7f:77:ab:57:5f:bf:6f:96:77:da:1a:90:94:29: 8b:e2:e8:68:3e:53:29:47:1e:3b:39:91:56:25:cf: a9:ca:e5:03:3a:37:78:e9:f9:c9:19:54:ab:18:ce: de:d2:18:be:4f:49:2c:98:af:61:8b:15:cd:9d:d6: eb:bf:64:df:99:67:19:a7:7c:50:80:c0:63:c3:da: ec:40:a8:04:18:73:94:a9:52:f7:32:d9:00:fe:d2: 3a:69:62:53:a2:79:88:7a:cf:9d:1a:fb:99:f5:18: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:6E:3D:1F:FF:DE:88:FC:6E:81:2B:02:2D:26:92:93:09:4E:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68b9529d-8dd9-3226-b990-07464a281dba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.148.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9a:65:f7:89:1c:9f:3a:22:be:03:00:16:9f:cb:06:f9:9e: 89:a3:cb:21:bf:5a:29:76:ff:29:29:ba:79:f9:7f:e6:f5:05: eb:b9:07:fa:96:8d:08:2b:3d:29:33:2c:70:20:6e:40:c0:45: f1:28:cd:0d:93:5e:c3:ed:30:5d:9e:1a:ae:64:19:16:76:fd: dd:51:c4:c8:38:5e:84:e3:97:6a:37:7f:96:1d:2e:dd:e5:e2: 24:e9:53:39:a9:5a:19:e5:9d:55:ac:5a:ee:1f:05:29:30:3c: dc:67:ed:5c:a6:56:5f:e6:9d:8d:51:e6:d9:54:b4:da:13:0b: 93:57:af:7d:aa:78:19:0b:3d:e2:11:53:06:6c:e4:c9:c9:6d: ac:11:77:46:fd:48:78:6c:08:8a:19:da:4b:69:91:6c:dd:99: c8:4e:4f:a8:2e:20:c5:f0:38:7d:53:08:10:17:29:8b:77:63: 3a:cc:cb:41:bd:f4:6f:81:4e:20:92:19:13:2a:b6:dc:80:96: fc:81:79:c0:93:0d:f6:a1:e2:0c:8e:44:8c:27:ef:1b:8d:93: ac:33:a3:c0:7b:fa:4a:58:70:6b:a8:ed:c3:2e:d4:fe:43:77: 2e:9a:29:a9:16:bc:62:a0:ef:b9:13:15:ea:7a:06:d1:82:0e: 8c:d7:9d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8OJ0DQT5jeRg/D/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzE5MTU1MVoXDTI2MTIwMjIwMTU1MVowLzEtMCsGA1UEAxMk OTAxZjJkZDMtODJlZi00MzBhLThhNTAtNmQzZDNlMDUwYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEwdsglH03jZyUL8w3pVq+c9QjJ0TLNhXWvK 1pJsvdN/rKk2pPESv+mBpgvvWU2OnfT6bZ2GkzjoKkcxCLUtLhN+Kd0ET7nhiB3f wy6UwVgt7Aqg46Tk3mFi+aJYLCjSTfmOMCwdzNpTOU3YSqTGPHm793mXUzrXOq2j p8/PutJ0263umKO9/WlpyIZBB666pTxX0/cXf3erV1+/b5Z32hqQlCmL4uhoPlMp Rx47OZFWJc+pyuUDOjd46fnJGVSrGM7e0hi+T0ksmK9hixXNndbrv2TfmWcZp3xQ gMBjw9rsQKgEGHOUqVL3MtkA/tI6aWJTonmIes+dGvuZ9RismwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNVbj0f/96I/G6BKwItJpKTCU69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjhiOTUyOWQtOGRkOS0z MjI2LWI5OTAtMDc0NjRhMjgxZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWaZfeJHJ86Ir4DABafywb5nomjyyG/Wil2/ykpunn5f+b1Beu5B/qW jQgrPSkzLHAgbkDARfEozQ2TXsPtMF2eGq5kGRZ2/d1RxMg4XoTjl2o3f5YdLt3l 4iTpUzmpWhnlnVWsWu4fBSkwPNxn7VymVl/mnY1R5tlUtNoTC5NXr32qeBkLPeIR UwZs5MnJbawRd0b9SHhsCIoZ2ktpkWzdmchOT6guIMXwOH1TCBAXKYt3YzrMy0G9 9G+BTiCSGRMqttyAlvyBecCTDfah4gyORIwn7xuNk6wzo8B7+kpYcGuo7cMu1P5D dy6aKakWvGKg77kTFep6BtGCDozXnTg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:04:39 2026 by rpki-client