$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/71b5894f-23b1-3b73-a25a-9add95eade65.roa File: 71b5894f-23b1-3b73-a25a-9add95eade65.roa (raw, json) Hash identifier: S4dEQKx7Ghn4+euJm2FPz9hfF5n4v38SjN2Ks6IwbOE= Subject key identifier: 77:82:33:45:4B:01:A1:F2:EE:9C:E1:DB:B0:51:40:8F:0A:09:9F:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE4F1E6B22D37E01479FDCE00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/71b5894f-23b1-3b73-a25a-9add95eade65.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 146908 IP address blocks: 38.58.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:e6:b2:2d:37:e0:14:79:fd:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=85309856-ac21-4fe9-8948-4e3ed8c1510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:dc:a2:c4:2c:a0:89:3c:e7:32:d0:6d:8f: 16:b7:5b:cd:3a:dc:67:d1:ab:dd:ae:4f:cc:b8:d0: f1:0e:cc:2f:4e:02:40:cb:39:50:bd:d1:f5:c3:ad: c2:d2:4a:04:45:6c:34:de:32:fb:e9:41:b9:8c:82: 46:52:36:78:59:18:16:17:19:7a:80:bd:cf:05:1c: 64:6e:9a:f8:ac:fc:63:c9:29:66:1b:d0:7a:74:90: a7:41:36:6f:cd:60:b6:23:2b:66:c9:6c:4c:fb:b9: ca:05:9e:18:f2:c7:72:27:55:6b:67:54:05:90:09: 6b:ca:66:c7:12:8f:8f:bb:be:5e:41:84:7b:f0:0e: 0e:c8:74:08:4f:7e:47:44:47:4b:c3:3b:bd:4d:e9: 14:d4:6d:9a:a3:b2:6c:3b:72:aa:68:b7:44:ec:1d: a4:dc:14:f2:91:57:4a:41:ad:0d:a5:2c:d9:fd:04: 90:60:e9:2d:5d:09:5c:a7:38:90:f2:23:42:d2:52: 92:60:df:0c:a5:e0:74:30:14:41:aa:c7:db:bf:17: 54:fb:8d:f0:57:9f:87:45:f7:ec:1f:23:b2:3c:64: be:7d:fc:57:5a:11:68:89:d4:db:c2:ae:02:8d:1d: b2:6d:66:46:c4:e9:9d:0c:39:93:a4:1b:c4:a0:ff: e0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:82:33:45:4B:01:A1:F2:EE:9C:E1:DB:B0:51:40:8F:0A:09:9F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/71b5894f-23b1-3b73-a25a-9add95eade65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a6:b8:da:89:05:df:0e:9c:74:73:b9:b3:94:af:29:9e:47: fc:26:35:cc:f9:ea:48:14:5f:a4:53:21:d1:e2:ff:79:1c:2f: 9a:a1:6d:0d:2f:5e:95:7e:e8:47:74:9e:1f:33:94:f6:64:26: 96:e7:7e:89:ea:c6:f5:d2:a2:8e:67:db:e6:8b:2e:fd:38:6d: 3f:b8:b5:5b:9a:76:9b:67:cc:af:7c:de:54:86:56:ca:c5:f6: 02:2a:ee:4e:9d:2b:d7:e1:7d:17:97:02:a1:01:e9:35:d3:d0: 17:68:30:72:3e:32:9a:72:2b:bb:72:b9:5b:4e:44:cb:4d:f6: 36:97:c5:5d:df:16:f5:94:2a:2c:a5:f4:34:89:5e:16:77:64: f7:96:32:5c:d6:b9:07:7b:c3:7c:1d:c6:52:11:45:f0:00:ac: ba:c1:70:4e:bc:de:21:ca:1a:80:49:99:bd:d4:ef:b6:22:f4: 2e:9d:a0:a5:bf:b0:77:ab:24:0e:63:ba:48:92:d8:27:90:f2: 16:2b:5d:51:f5:6c:c2:23:62:3d:56:ba:fe:c4:93:11:69:9e: ed:2b:50:6c:80:e0:c2:b2:d1:4e:d0:4b:65:68:0b:96:ba:a7: 8c:d9:06:2e:64:52:ad:50:4d:fc:71:95:86:df:28:e6:d7:11: 07:5e:8c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8eayLTfgFHn9zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ODUzMDk4NTYtYWMyMS00ZmU5LTg5NDgtNGUzZWQ4YzE1MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PLcosQsoIk85zLQbY8Wt1vNOtxn0avdrk/M uNDxDswvTgJAyzlQvdH1w63C0koERWw03jL76UG5jIJGUjZ4WRgWFxl6gL3PBRxk bpr4rPxjySlmG9B6dJCnQTZvzWC2IytmyWxM+7nKBZ4Y8sdyJ1VrZ1QFkAlrymbH Eo+Pu75eQYR78A4OyHQIT35HREdLwzu9TekU1G2ao7JsO3KqaLdE7B2k3BTykVdK Qa0NpSzZ/QSQYOktXQlcpziQ8iNC0lKSYN8MpeB0MBRBqsfbvxdU+43wV5+HRffs HyOyPGS+ffxXWhFoidTbwq4CjR2ybWZGxOmdDDmTpBvEoP/gAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeCM0VLAaHy7pzh27BRQI8KCZ/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzFiNTg5NGYtMjNiMS0z YjczLWEyNWEtOWFkZDk1ZWFkZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSmuNqJBd8OnHRzubOUrymeR/wmNcz56kgUX6RTIdHi/3kcL5qhbQ0v XpV+6Ed0nh8zlPZkJpbnfonqxvXSoo5n2+aLLv04bT+4tVuadptnzK983lSGVsrF 9gIq7k6dK9fhfReXAqEB6TXT0BdoMHI+MppyK7tyuVtORMtN9jaXxV3fFvWUKiyl 9DSJXhZ3ZPeWMlzWuQd7w3wdxlIRRfAArLrBcE683iHKGoBJmb3U77Yi9C6doKW/ sHerJA5jukiS2CeQ8hYrXVH1bMIjYj1Wuv7EkxFpnu0rUGyA4MKy0U7QS2VoC5a6 p4zZBi5kUq1QTfxxlYbfKObXEQdejMA= -----END CERTIFICATE-----Generated at Fri Sep 11 14:32:23 2026 by rpki-client