$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c684a5a-2c34-386d-944d-10414185d76c.roa File: 8c684a5a-2c34-386d-944d-10414185d76c.roa (raw, json) Hash identifier: FxpJ3ugx2I7RAk2NNf9cXCNqa6Zj246qaD6RedC8uNM= Subject key identifier: 1C:3F:A5:EB:D0:DB:05:60:40:4F:70:66:5C:55:F8:8C:F9:AF:A8:1F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F2C83E1A08BA9FAFBFCB5BC00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c684a5a-2c34-386d-944d-10414185d76c.roa Signing time: Mon 14 Sep 2026 16:16:45 +0000 ROA not before: Mon 14 Sep 2026 16:16:45 +0000 ROA not after: Sun 13 Dec 2026 17:16:45 +0000 asID: 154067 IP address blocks: 38.123.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:83:e1:a0:8b:a9:fa:fb:fc:b5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 14 16:16:45 2026 GMT Not After : Dec 13 17:16:45 2026 GMT Subject: CN=afb6f656-aa72-4997-8168-3a32bfed5aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:8d:91:7f:b5:47:5d:f5:ce:f4:f5:81:64: a9:59:14:71:e8:76:81:26:07:e8:9c:e6:85:aa:20: 0b:41:49:65:6d:09:5d:86:a4:30:a5:d9:26:e4:b1: fc:b3:a3:c0:67:9d:8f:56:45:aa:d1:b3:b1:f6:42: 9a:a6:4e:61:e4:3b:71:24:9c:c4:cc:91:aa:0e:ad: 1b:21:f7:8e:a9:b4:d1:6c:4a:a5:20:96:bc:c7:bc: 1d:e4:b3:4d:b2:d5:b5:b2:49:be:30:7b:c6:61:a6: 28:6c:b4:42:a6:24:41:ae:3b:0a:c2:99:e7:0b:63: ce:ef:95:83:84:8b:e3:c7:ed:6f:24:87:63:7d:da: 05:1a:12:c2:08:61:16:ca:c2:b7:78:af:05:3c:c4: 25:74:05:de:8b:3c:4f:3f:ca:75:c2:be:80:70:af: 88:77:2a:e8:55:74:0c:8c:8e:97:21:e3:f0:74:5b: ed:17:c6:a8:c0:7f:5f:b3:39:75:89:86:6f:c1:81: 20:c3:4a:6d:95:a7:1e:04:ca:ac:c9:7b:64:ea:4f: 00:e0:e3:35:a8:37:e5:00:f8:d1:09:cd:55:b8:ff: 2f:86:c2:89:97:66:86:e0:78:70:d0:32:92:9b:5e: 11:04:fd:a3:f3:0d:ea:89:1e:87:04:07:05:43:04: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3F:A5:EB:D0:DB:05:60:40:4F:70:66:5C:55:F8:8C:F9:AF:A8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c684a5a-2c34-386d-944d-10414185d76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.123.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:52:6e:b8:01:21:43:a9:d7:26:84:55:1d:d9:3a:e8:84:f8: 83:6d:e2:9c:41:6e:1e:bb:0c:58:e7:29:23:3e:a0:12:7a:9f: d6:c7:35:9c:85:5e:08:27:7a:2b:ac:41:0b:13:c0:3a:d4:eb: 2c:a5:bd:b9:fe:b0:30:70:3c:4f:6a:c0:c6:49:56:1c:81:c9: 9d:f2:d7:00:44:43:c1:45:54:3e:eb:69:75:26:75:40:80:94: e0:19:85:0e:24:d1:34:ff:06:24:7b:51:c8:b9:42:0f:4f:d5: 4d:ff:0b:35:11:e8:68:67:74:dd:99:50:3f:9c:27:80:6e:78: ba:89:65:fe:32:c2:b5:d3:32:6f:01:5d:43:b4:7b:d0:4d:af: 19:f7:37:76:0a:5f:13:32:0f:72:98:bb:40:fa:20:f4:a4:71: 3c:3f:68:b4:f2:95:be:f5:9f:41:79:86:f4:36:c5:31:9e:7b: de:26:a4:ea:34:f6:5a:8d:77:2e:92:77:08:65:7a:b5:8b:7d: 07:00:5a:3c:72:df:9d:56:c1:91:41:75:c5:54:b1:f8:e6:32: b1:e6:63:a4:de:11:80:2b:d5:f3:22:6e:86:5a:c4:04:a8:29: 20:a2:33:e3:60:5b:12:86:17:30:6b:10:62:46:c9:aa:dc:db: 45:5d:07:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sg+Ggi6n6+/y1vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNDE2MTY0NVoXDTI2MTIxMzE3MTY0NVowLzEtMCsGA1UEAxMk YWZiNmY2NTYtYWE3Mi00OTk3LTgxNjgtM2EzMmJmZWQ1YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PuNkX+1R131zvT1gWSpWRRx6HaBJgfonOaF qiALQUllbQldhqQwpdkm5LH8s6PAZ52PVkWq0bOx9kKapk5h5DtxJJzEzJGqDq0b IfeOqbTRbEqlIJa8x7wd5LNNstW1skm+MHvGYaYobLRCpiRBrjsKwpnnC2PO75WD hIvjx+1vJIdjfdoFGhLCCGEWysK3eK8FPMQldAXeizxPP8p1wr6AcK+IdyroVXQM jI6XIePwdFvtF8aowH9fszl1iYZvwYEgw0ptlaceBMqsyXtk6k8A4OM1qDflAPjR Cc1VuP8vhsKJl2aG4Hhw0DKSm14RBP2j8w3qiR6HBAcFQwTPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw/pevQ2wVgQE9wZlxV+Iz5r6gfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGM2ODRhNWEtMmMzNC0z ODZkLTk0NGQtMTA0MTQxODVkNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnuiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1SbrgBIUOp1yaEVR3ZOuiE+INt4pxBbh67DFjnKSM+oBJ6n9bHNZyF XggneiusQQsTwDrU6yylvbn+sDBwPE9qwMZJVhyByZ3y1wBEQ8FFVD7raXUmdUCA lOAZhQ4k0TT/BiR7Uci5Qg9P1U3/CzUR6GhndN2ZUD+cJ4BueLqJZf4ywrXTMm8B XUO0e9BNrxn3N3YKXxMyD3KYu0D6IPSkcTw/aLTylb71n0F5hvQ2xTGee94mpOo0 9lqNdy6SdwhlerWLfQcAWjxy351WwZFBdcVUsfjmMrHmY6TeEYAr1fMiboZaxASo KSCiM+NgWxKGFzBrEGJGyarc20VdB44= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:52 2026 by rpki-client