$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e21550e-5717-34ee-bba0-83685073f8fa.roa File: 8e21550e-5717-34ee-bba0-83685073f8fa.roa (raw, json) Hash identifier: M8bdyVFhCMrWgGT55FfKLXJVmZzsDdohzl7ycWJS94g= Subject key identifier: 30:70:52:61:35:EC:AB:35:CB:BE:C2:70:02:A5:A1:0C:77:0C:96:5C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F03A7757C29C22D33373B0A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e21550e-5717-34ee-bba0-83685073f8fa.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 21277 IP address blocks: 38.69.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:75:7c:29:c2:2d:33:37:3b:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=7f6e7dcc-73a9-4e1e-ab90-6d48463e0ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:37:9b:2d:49:90:fe:b3:c9:bc:e8:f1:d8: 80:5d:18:00:36:d3:a5:6e:ef:5a:5a:54:57:10:69: 00:e1:19:d8:2c:69:6a:d0:62:8d:42:f8:66:4e:bb: d3:24:63:c2:2a:b3:0c:a0:fd:15:0d:ae:13:8b:8c: fe:85:d3:d0:58:b1:8a:6d:7a:bc:9a:97:fe:8b:b1: 5c:c9:2f:3a:c4:f8:40:9c:e4:06:63:af:fa:62:83: d1:79:0e:3d:36:a2:d9:d4:39:79:68:3c:81:a9:8f: cb:47:db:61:42:12:1e:2a:94:f1:2c:52:c3:03:fe: 22:20:4b:7e:5d:ef:9b:fd:68:7d:3b:34:23:16:1b: cb:46:a5:2a:23:3d:75:c2:d8:ff:68:5c:ae:90:22: 49:7c:24:22:8c:f9:13:34:f7:9d:85:d2:96:0d:0e: 57:1c:42:ff:94:de:81:37:f3:cc:76:c9:53:15:b9: 35:89:c4:a8:cd:76:4c:64:89:28:e0:3a:f1:4e:67: 99:f5:2f:58:ac:71:ef:66:bd:b1:54:49:4f:29:41: 8c:82:c9:16:bd:b0:d9:08:81:96:b8:2a:a7:85:8f: c1:cf:89:dd:cc:28:ba:d6:f0:67:49:0d:59:e0:d0: af:cd:41:46:e3:c5:bc:7e:5b:0b:69:2f:c8:20:37: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:70:52:61:35:EC:AB:35:CB:BE:C2:70:02:A5:A1:0C:77:0C:96:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e21550e-5717-34ee-bba0-83685073f8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.69.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:07:47:58:ee:13:71:c5:dd:35:bd:0e:4f:d4:af:ae:d1:87: 6d:76:4c:e2:48:fa:03:29:15:19:d5:27:76:92:87:b9:0e:d0: 3d:1b:2c:da:17:90:a0:b8:06:d8:0c:36:88:fd:21:49:03:3e: 28:a7:db:7c:91:89:98:69:94:ea:89:fe:27:03:c4:bc:f9:31: 77:97:28:48:a7:da:eb:c1:95:9e:20:8c:20:57:e0:73:4c:7f: 65:a1:a0:95:ed:05:bb:21:fd:10:18:09:83:79:19:7b:94:ee: ba:61:a5:81:8d:b8:e7:a1:4e:42:af:7b:45:0c:c6:52:10:d7: a9:18:69:e5:f2:12:f3:5d:f5:55:07:55:ad:31:6b:f0:47:96: 64:e3:6f:7b:57:3d:e8:45:e5:b6:4a:3b:ad:ae:d9:17:ac:ba: 7d:00:e1:d1:d2:aa:77:7a:22:c3:6b:39:0e:8d:0e:70:63:c6: 8d:74:dc:53:8c:a9:95:b6:9a:c0:b0:ce:97:d4:86:84:e5:f8: 60:f1:be:c5:fc:b8:2c:00:76:4d:53:7b:b3:8d:76:6e:41:a7: 85:98:e7:63:84:49:93:f9:f1:32:40:fa:75:39:c5:3c:82:fd: b0:fd:8f:54:2c:e8:4c:b3:75:fc:db:3b:02:7d:4a:0d:71:eb: 5a:04:c6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3V8KcItMzc7CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk N2Y2ZTdkY2MtNzNhOS00ZTFlLWFiOTAtNmQ0ODQ2M2UwZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDU3my1JkP6zybzo8diAXRgANtOlbu9aWlRX EGkA4RnYLGlq0GKNQvhmTrvTJGPCKrMMoP0VDa4Ti4z+hdPQWLGKbXq8mpf+i7Fc yS86xPhAnOQGY6/6YoPReQ49NqLZ1Dl5aDyBqY/LR9thQhIeKpTxLFLDA/4iIEt+ Xe+b/Wh9OzQjFhvLRqUqIz11wtj/aFyukCJJfCQijPkTNPedhdKWDQ5XHEL/lN6B N/PMdslTFbk1icSozXZMZIko4DrxTmeZ9S9YrHHvZr2xVElPKUGMgskWvbDZCIGW uCqnhY/Bz4ndzCi61vBnSQ1Z4NCvzUFG48W8flsLaS/IIDeVfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBwUmE17Ks1y77CcAKloQx3DJZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGUyMTU1MGUtNTcxNy0z NGVlLWJiYTAtODM2ODUwNzNmOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYHR1juE3HF3TW9Dk/Ur67Rh212TOJI+gMpFRnVJ3aSh7kO0D0bLNoX kKC4BtgMNoj9IUkDPiin23yRiZhplOqJ/icDxLz5MXeXKEin2uvBlZ4gjCBX4HNM f2WhoJXtBbsh/RAYCYN5GXuU7rphpYGNuOehTkKve0UMxlIQ16kYaeXyEvNd9VUH Va0xa/BHlmTjb3tXPehF5bZKO62u2Resun0A4dHSqnd6IsNrOQ6NDnBjxo103FOM qZW2msCwzpfUhoTl+GDxvsX8uCwAdk1Te7ONdm5Bp4WY52OESZP58TJA+nU5xTyC /bD9j1Qs6EyzdfzbOwJ9Sg1x61oExo8= -----END CERTIFICATE-----Generated at Fri Sep 11 13:11:57 2026 by rpki-client