$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/72842f9f-4982-39c1-a409-2936e925342a.roa File: 72842f9f-4982-39c1-a409-2936e925342a.roa (raw, json) Hash identifier: 6zqpXbkDusoee+A7n1CdBPzikhxF2fFs8TPVasu2GGM= Subject key identifier: D2:6D:63:64:53:6D:B2:34:05:1E:80:0F:76:B8:85:01:72:5D:E2:B5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F07E9246DEFF566CCE2E8B8C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/72842f9f-4982-39c1-a409-2936e925342a.roa Signing time: Tue 01 Sep 2026 13:35:52 +0000 ROA not before: Tue 01 Sep 2026 13:35:52 +0000 ROA not after: Mon 30 Nov 2026 14:35:52 +0000 asID: 269506 IP address blocks: 38.210.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:e9:24:6d:ef:f5:66:cc:e2:e8:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 1 13:35:52 2026 GMT Not After : Nov 30 14:35:52 2026 GMT Subject: CN=c71bbd17-ff0a-4581-9539-41f5fe93a263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:c3:b8:e8:00:09:b7:ec:a1:65:57:bd:c6: ef:53:74:10:f6:ae:71:d4:00:bf:47:38:1a:c4:f2: a8:7f:a4:06:80:aa:bb:68:e4:63:52:bf:d0:6e:48: 26:87:5c:f4:32:27:11:14:ff:a9:b7:98:52:10:94: a9:c4:df:ef:04:f9:37:c8:92:23:f6:36:b5:71:04: d9:40:8a:1f:f3:a8:aa:37:a8:46:1c:02:3b:39:83: 3a:0b:1f:fc:b8:d7:38:4e:0a:0f:e2:74:11:0f:f6: d8:ee:b6:01:3e:bb:7c:1a:52:d7:ce:27:b2:8b:7d: 06:71:b8:36:c4:c4:12:1e:2b:9b:ed:57:4f:7c:f6: 9e:e8:0c:10:a6:2a:27:4e:c1:95:1e:e2:57:33:02: e1:de:f9:19:21:32:99:80:89:21:63:2d:6b:1a:e3: 82:70:be:bd:e8:74:61:5a:4f:d3:eb:7a:8a:9b:e3: 79:31:47:c3:52:60:55:79:b0:58:3c:ba:9c:ea:89: 55:8a:a2:db:99:1a:f0:c4:44:6b:05:33:71:65:e6: 89:66:79:d5:46:34:3d:35:65:dc:38:eb:ea:5d:5b: 03:7f:5a:b9:08:00:fe:dd:99:88:34:28:53:6a:64: 51:0a:7e:93:48:6b:d9:7d:fd:2a:56:d3:26:88:cc: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:63:64:53:6D:B2:34:05:1E:80:0F:76:B8:85:01:72:5D:E2:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/72842f9f-4982-39c1-a409-2936e925342a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d8:cf:5b:ea:9f:09:89:08:37:fa:16:f5:0d:fc:9c:4c:a8: e4:6b:11:c8:e1:b4:26:2a:14:4a:4d:26:63:eb:f9:72:ca:53: da:b9:74:3f:9c:14:6e:91:2a:ce:6a:00:7e:af:e8:c5:4d:ba: 68:b0:81:3a:8e:ab:e1:97:d5:2a:c2:62:6f:4e:ed:31:96:99: 26:1b:5c:6d:28:07:ce:de:35:72:6d:ea:d6:8e:fd:0f:0d:99: 78:cd:3d:3d:bd:92:d5:13:5d:0c:ea:ad:cd:1f:f5:ba:66:ed: a6:30:fc:9a:d8:a0:93:56:0a:3d:4a:a8:c5:32:d1:c6:ca:70: a5:eb:88:dc:15:58:6c:cd:4a:f1:19:6f:ca:a3:16:ab:6a:83: bb:02:14:46:7f:5a:d4:a0:6e:f9:44:29:c0:a2:47:cd:08:3e: fc:3a:a2:7c:92:80:f1:54:02:eb:1c:28:bf:2e:4e:a6:4d:60: cb:7f:ab:43:9c:08:0c:f1:6b:a9:80:c0:f1:33:ea:53:21:ea: aa:cf:15:d2:3a:aa:16:95:44:60:ff:7c:3b:46:82:a1:c3:0b: 7b:aa:d7:4b:84:9b:7d:7c:5c:ae:4b:14:73:2f:1d:c7:b9:94: be:07:3e:f4:f7:73:5c:dd:81:6d:12:24:b8:48:bb:17:15:9f: ad:c0:43:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H6SRt7/VmzOLouMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMTEzMzU1MloXDTI2MTEzMDE0MzU1MlowLzEtMCsGA1UEAxMk YzcxYmJkMTctZmYwYS00NTgxLTk1MzktNDFmNWZlOTNhMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9TDuOgACbfsoWVXvcbvU3QQ9q5x1AC/Rzga xPKof6QGgKq7aORjUr/Qbkgmh1z0MicRFP+pt5hSEJSpxN/vBPk3yJIj9ja1cQTZ QIof86iqN6hGHAI7OYM6Cx/8uNc4TgoP4nQRD/bY7rYBPrt8GlLXzieyi30Gcbg2 xMQSHiub7VdPfPae6AwQpionTsGVHuJXMwLh3vkZITKZgIkhYy1rGuOCcL696HRh Wk/T63qKm+N5MUfDUmBVebBYPLqc6olViqLbmRrwxERrBTNxZeaJZnnVRjQ9NWXc OOvqXVsDf1q5CAD+3ZmINChTamRRCn6TSGvZff0qVtMmiMz8QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJtY2RTbbI0BR6AD3a4hQFyXeK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzI4NDJmOWYtNDk4Mi0z OWMxLWE0MDktMjkzNmU5MjUzNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJtLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDYz1vqnwmJCDf6FvUN/JxMqORrEcjhtCYqFEpNJmPr+XLKU9q5dD+c FG6RKs5qAH6v6MVNumiwgTqOq+GX1SrCYm9O7TGWmSYbXG0oB87eNXJt6taO/Q8N mXjNPT29ktUTXQzqrc0f9bpm7aYw/JrYoJNWCj1KqMUy0cbKcKXriNwVWGzNSvEZ b8qjFqtqg7sCFEZ/WtSgbvlEKcCiR80IPvw6onySgPFUAuscKL8uTqZNYMt/q0Oc CAzxa6mAwPEz6lMh6qrPFdI6qhaVRGD/fDtGgqHDC3uq10uEm318XK5LFHMvHce5 lL4HPvT3c1zdgW0SJLhIuxcVn63AQzU= -----END CERTIFICATE-----Generated at Fri Sep 11 13:05:02 2026 by rpki-client