$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8561c813-926e-38a5-8409-f94b415f5b41.roa File: 8561c813-926e-38a5-8409-f94b415f5b41.roa (raw, json) Hash identifier: nRxJzG8vM5Tg2hxaqpH3V48z6GBDBV9tIqFlh0n4xf8= Subject key identifier: 1A:96:BF:CE:13:AB:EE:26:44:21:95:11:9A:5D:5C:B5:C5:C9:97:89 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EDF5C8F37321AE47CA0B8BA00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8561c813-926e-38a5-8409-f94b415f5b41.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 204170 IP address blocks: 38.253.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:8f:37:32:1a:e4:7c:a0:b8:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=2d8e7a27-1fe8-46a3-8a3b-da8fc6e48a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:6d:be:0e:1b:5b:73:08:a6:ec:5b:ef:dd: 91:21:eb:e2:98:9d:61:3e:43:52:56:b7:1e:29:7d: 00:3c:91:eb:79:9f:0c:fa:40:a5:6d:96:e8:13:b7: 06:67:34:0f:5e:3b:2b:64:3d:ad:a7:25:5f:c6:c2: 4e:f3:07:58:6d:5a:22:d8:2e:9d:2b:54:04:27:20: 74:b3:74:cd:b8:59:4d:50:c7:26:a4:23:cf:82:c1: 83:c7:47:cf:b2:72:a0:21:07:5f:6b:d9:e1:d6:e2: d6:62:fa:43:41:fa:45:82:6f:dd:73:32:f5:d3:c8: 95:68:a6:51:52:a3:cc:ef:ea:df:9b:fb:00:92:0d: ee:37:b8:ea:d2:5e:f1:32:cb:ce:a1:d4:f2:70:ab: 22:6b:1f:bc:92:d6:24:07:93:bc:a4:c8:e1:d3:4d: 20:9f:00:40:a4:b0:85:93:de:22:a5:15:fd:cb:76: d2:d3:e3:5b:24:29:a8:f1:fc:db:f3:d7:31:01:04: 8e:1c:46:d9:a6:ad:71:46:99:8d:2f:93:01:d7:4e: 74:8e:66:53:e7:84:52:9e:05:29:27:74:31:0a:92: 59:8b:a3:42:0a:67:98:2e:31:01:61:3f:c8:8c:bf: e3:c8:48:4a:0a:e8:71:4f:09:f0:4a:3b:51:1d:f3: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:BF:CE:13:AB:EE:26:44:21:95:11:9A:5D:5C:B5:C5:C9:97:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8561c813-926e-38a5-8409-f94b415f5b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5f:63:1a:88:38:e3:4f:4e:60:b8:59:2c:5d:09:81:57:7c: 6a:f6:42:f7:ff:e2:cd:d6:5f:67:8f:ea:6c:c9:b6:b1:99:f0: ba:c6:96:36:43:98:de:23:f7:59:42:8d:55:3e:71:fd:b2:89: b2:06:3d:f3:a5:06:ec:83:e0:f8:48:4e:28:8a:05:2c:35:b3: 27:24:35:19:57:8b:39:e8:3f:0a:cf:5f:0c:a2:a2:dd:91:86: a8:89:52:f8:91:b2:64:da:22:3b:bd:60:8a:11:23:15:75:89: e3:ab:17:9e:19:86:03:03:ad:a6:51:7a:85:c2:44:06:76:d2: 99:3b:7e:ca:35:1c:77:e8:b6:50:34:0e:1b:43:01:45:52:bf: a5:1c:d8:ce:8d:50:a2:89:f9:3a:1f:e2:a2:f1:6e:4d:70:69: 8e:3f:d1:f1:93:d2:c2:c9:27:a8:70:8f:29:6c:c7:40:d2:13: 48:df:fd:e0:0d:a2:f6:61:42:9f:82:24:ce:3e:e0:a1:b6:79: 9f:60:d6:1f:7d:2d:b5:6f:1f:45:3b:56:ce:34:e2:46:a3:6c: 2a:4d:82:9e:f3:a4:a5:25:46:a7:92:3f:12:ff:f4:66:73:72: e4:00:2e:4f:f7:48:72:9f:45:06:17:30:51:4c:3d:a0:6b:1a: 6a:91:cf:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7fXI83MhrkfKC4ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk MmQ4ZTdhMjctMWZlOC00NmEzLThhM2ItZGE4ZmM2ZTQ4YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI5tvg4bW3MIpuxb792RIevimJ1hPkNSVrce KX0APJHreZ8M+kClbZboE7cGZzQPXjsrZD2tpyVfxsJO8wdYbVoi2C6dK1QEJyB0 s3TNuFlNUMcmpCPPgsGDx0fPsnKgIQdfa9nh1uLWYvpDQfpFgm/dczL108iVaKZR UqPM7+rfm/sAkg3uN7jq0l7xMsvOodTycKsiax+8ktYkB5O8pMjh000gnwBApLCF k94ipRX9y3bS0+NbJCmo8fzb89cxAQSOHEbZpq1xRpmNL5MB1050jmZT54RSngUp J3QxCpJZi6NCCmeYLjEBYT/IjL/jyEhKCuhxTwnwSjtRHfMP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqWv84Tq+4mRCGVEZpdXLXFyZeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODU2MWM4MTMtOTI2ZS0z OGE1LTg0MDktZjk0YjQxNWY1YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJv3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFfYxqIOONPTmC4WSxdCYFXfGr2Qvf/4s3WX2eP6mzJtrGZ8LrGljZD mN4j91lCjVU+cf2yibIGPfOlBuyD4PhITiiKBSw1syckNRlXiznoPwrPXwyiot2R hqiJUviRsmTaIju9YIoRIxV1ieOrF54ZhgMDraZReoXCRAZ20pk7fso1HHfotlA0 DhtDAUVSv6Uc2M6NUKKJ+Tof4qLxbk1waY4/0fGT0sLJJ6hwjylsx0DSE0jf/eAN ovZhQp+CJM4+4KG2eZ9g1h99LbVvH0U7Vs404kajbCpNgp7zpKUlRqeSPxL/9GZz cuQALk/3SHKfRQYXMFFMPaBrGmqRz4k= -----END CERTIFICATE-----Generated at Fri Sep 11 13:57:04 2026 by rpki-client