$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa File: 889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa (raw, json) Hash identifier: UbKvuV166+gQashjrEvbfOhUlJiXrdt8mMJDct1pr1U= Subject key identifier: E5:4E:47:B7:5F:85:1F:7F:53:B7:79:2B:66:53:FE:06:E8:59:8D:A1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECAD63AFAC0C86EE63D1BB5A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa Signing time: Mon 10 Aug 2026 16:33:27 +0000 ROA not before: Mon 10 Aug 2026 16:33:27 +0000 ROA not after: Sun 08 Nov 2026 17:33:27 +0000 asID: 271808 IP address blocks: 38.246.152.0/22 maxlen: 24 38.246.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:d6:3a:fa:c0:c8:6e:e6:3d:1b:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 10 16:33:27 2026 GMT Not After : Nov 8 17:33:27 2026 GMT Subject: CN=54923d5e-1566-4ef5-bc96-cee8fac72789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:21:05:b7:76:55:1b:91:e6:7c:16:f0:c1: 97:12:71:eb:67:83:f8:eb:66:ff:73:a2:64:07:49: 57:f3:6a:72:60:85:10:2a:94:b8:ff:34:d4:89:5d: 00:99:1e:2b:da:10:ed:6d:07:8f:71:c7:36:da:e6: a1:00:30:69:a2:31:f0:bf:78:db:49:a1:19:e1:3d: fa:03:65:66:a6:56:dd:d9:1b:a4:83:76:50:aa:cd: b7:d5:07:9e:1f:f0:a0:5e:f2:c4:df:f8:87:e2:bf: 21:d8:2e:8d:a5:f4:bf:69:71:e7:90:6e:2d:b6:a0: 86:8a:27:97:24:d4:63:e4:4c:84:a7:c4:6d:b0:71: 12:c3:9e:22:0d:c3:f6:c8:6e:a5:85:48:15:49:93: 29:60:d1:20:a1:0e:12:39:10:a4:03:ae:ed:73:8f: e7:ec:3c:bb:84:63:1e:72:74:cb:91:64:29:c0:37: 44:a1:73:fb:56:bd:d9:a0:15:8e:38:88:9a:41:ce: 46:78:b1:3f:fd:b6:7f:8b:59:3a:b0:90:9a:99:e4: 33:93:cb:1f:e5:33:e9:4f:c8:bf:12:57:03:99:6c: d8:12:1e:5b:1c:1a:39:9a:a8:da:22:7a:68:46:5c: 13:e4:55:cc:a4:90:2c:4b:64:d0:e1:a8:d8:c6:7b: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:47:B7:5F:85:1F:7F:53:B7:79:2B:66:53:FE:06:E8:59:8D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:58:dc:bd:47:8a:ff:88:3d:d0:b1:7a:77:5a:c4:8f:ee:ed: ee:f1:92:7d:4a:c0:00:78:aa:0e:35:14:9a:3e:a9:df:65:45: 90:a5:46:66:95:94:30:41:c6:ae:cc:1f:36:e8:00:f4:3e:5b: b5:7c:e8:5a:91:8c:be:6c:55:4a:85:04:1d:57:2f:21:a8:c6: 9a:2c:2e:93:34:a9:ce:42:ec:84:c2:f9:71:6b:b0:d1:5c:18: 6b:39:4c:c2:76:6b:6b:4c:69:2a:6b:cb:69:7d:e7:2f:45:db: 33:58:49:f5:a1:21:4e:26:10:8e:07:a0:ee:bf:5a:ab:ab:ca: 02:c7:c0:37:38:dc:70:f1:24:81:0d:03:ab:42:6c:fe:b1:97: f4:91:e5:3b:66:9f:ab:16:7c:5d:df:b3:3d:01:b3:53:74:1d: 32:22:f2:8a:c2:16:31:05:38:5c:cb:62:ea:ec:d3:f4:37:58: bc:94:a9:cc:10:b7:23:32:11:1e:b3:82:d8:f1:5c:eb:d0:bc: 42:5d:b3:f9:33:3a:eb:9c:f0:86:9a:c7:83:a7:63:ea:23:c7: 98:9a:9b:70:25:0b:af:b0:4a:32:0a:76:0e:06:30:42:07:c4: a0:61:bb:c5:41:fa:04:fe:99:69:eb:97:9c:56:50:48:7c:d8: d8:cb:33:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7K1jr6wMhu5j0btaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMDE2MzMyN1oXDTI2MTEwODE3MzMyN1owLzEtMCsGA1UEAxMk NTQ5MjNkNWUtMTU2Ni00ZWY1LWJjOTYtY2VlOGZhYzcyNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmghBbd2VRuR5nwW8MGXEnHrZ4P462b/c6Jk B0lX82pyYIUQKpS4/zTUiV0AmR4r2hDtbQePccc22uahADBpojHwv3jbSaEZ4T36 A2Vmplbd2Rukg3ZQqs231QeeH/CgXvLE3/iH4r8h2C6NpfS/aXHnkG4ttqCGiieX JNRj5EyEp8RtsHESw54iDcP2yG6lhUgVSZMpYNEgoQ4SORCkA67tc4/n7Dy7hGMe cnTLkWQpwDdEoXP7Vr3ZoBWOOIiaQc5GeLE//bZ/i1k6sJCameQzk8sf5TPpT8i/ ElcDmWzYEh5bHBo5mqjaInpoRlwT5FXMpJAsS2TQ4ajYxnuJPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVOR7dfhR9/U7d5K2ZT/gboWY2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODg5ZGRiMmUtOGVkYy0z ZjQ0LWE1MTQtNmUxMjJlN2JiMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJvaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtY3L1Hiv+IPdCxendaxI/u7e7xkn1KwAB4qg41FJo+qd9lRZClRmaV lDBBxq7MHzboAPQ+W7V86FqRjL5sVUqFBB1XLyGoxposLpM0qc5C7ITC+XFrsNFc GGs5TMJ2a2tMaSpry2l95y9F2zNYSfWhIU4mEI4HoO6/WqurygLHwDc43HDxJIEN A6tCbP6xl/SR5Ttmn6sWfF3fsz0Bs1N0HTIi8orCFjEFOFzLYurs0/Q3WLyUqcwQ tyMyER6zgtjxXOvQvEJds/kzOuuc8Iaax4OnY+ojx5iam3AlC6+wSjIKdg4GMEIH xKBhu8VB+gT+mWnrl5xWUEh82NjLMyw= -----END CERTIFICATE-----Generated at Fri Sep 11 13:08:18 2026 by rpki-client