$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa File: 8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa (raw, json) Hash identifier: aqzpMt9GmXNe8FHFKQK1HXnmWJCFj4CsGG1HLtmn7co= Subject key identifier: D1:6A:20:9B:1F:DB:B9:8E:8D:13:59:42:B6:A0:70:3E:A0:28:3D:8C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF9E21F80F459D2D0D67BC400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 27884 IP address blocks: 38.172.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1f:80:f4:59:d2:d0:d6:7b:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=ab5fbb7d-d9fc-4c0e-a2d6-448880238322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:22:f5:d9:91:a2:18:cc:2b:2f:15:01:99: 09:20:ed:d4:7b:cd:c5:02:83:13:8c:2a:a5:35:f5: e0:f0:5e:98:2f:50:5d:32:50:c0:8f:e8:2f:b9:28: ac:c1:d1:9b:b9:ce:f0:8b:17:c1:8b:f9:b8:1a:e4: a9:e9:b2:ee:b9:b3:e2:24:36:8f:97:3b:02:63:16: 87:b5:c5:4d:62:bb:ac:99:a6:5b:5e:6a:e2:59:eb: 49:03:dd:97:fa:c7:c5:c9:f2:bf:e1:9d:07:2d:04: ce:44:98:37:22:eb:5d:27:81:f9:10:07:2c:04:01: 5b:72:1c:5a:db:32:3d:38:dc:d3:b3:f5:2b:1f:3d: da:8e:45:6c:9d:87:72:be:a4:df:c2:7e:20:7b:bb: 59:8c:04:0a:58:87:b9:ac:a7:88:84:49:55:cb:58: 22:b4:b3:09:92:d4:dc:26:ef:5d:f8:59:4e:95:69: a4:2e:00:f3:69:d4:0f:ac:b3:6d:32:0e:fb:7f:1e: 3e:86:b7:ce:81:d5:4b:33:9d:d5:78:ee:23:52:81: 43:06:5f:76:bf:e1:34:8e:e4:ab:39:11:62:ba:8e: 72:36:d9:f5:1e:81:12:a7:3b:a8:70:f8:b0:7f:fb: 6e:ba:d2:cd:94:8c:19:7b:f6:ee:9a:11:95:01:1a: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:20:9B:1F:DB:B9:8E:8D:13:59:42:B6:A0:70:3E:A0:28:3D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:54:7b:cc:40:8d:05:b7:77:6b:8b:82:80:c6:fd:17:d8:2b: c2:c8:35:51:de:52:c2:90:d4:ca:b4:91:99:bc:22:3a:eb:a9: 71:55:52:e6:a2:d0:4a:d9:3c:43:e1:5a:fd:dd:2b:44:1d:ac: bb:ab:ba:5a:23:f7:ad:29:bc:c9:34:f2:90:5e:2b:eb:b1:63: ea:cf:ac:58:07:19:1b:14:51:68:ad:c1:35:65:2f:5e:0c:c8: 7b:0f:c1:0d:0d:e0:50:93:79:0d:8c:1c:35:71:f2:a6:bb:a3: 38:95:2e:fd:56:e4:ec:64:3c:9b:7d:0f:49:e9:b6:34:6e:33: 65:8f:a0:9e:a1:09:6e:59:a2:2e:de:c9:d5:86:c8:fa:62:3d: 15:57:76:6d:5a:ce:1e:be:90:24:aa:db:2f:b1:cd:82:8b:99: f0:1b:67:32:78:da:35:16:1f:c8:ac:e0:2a:ac:00:4d:87:5f: 29:b0:68:de:8b:df:0c:13:37:b5:d3:cb:f7:e6:ce:96:61:96: 64:a6:4f:24:06:d7:41:80:d3:55:2f:25:af:14:c7:1f:25:89: 2b:e1:89:61:f2:4c:ba:87:f7:88:98:1e:7e:3d:43:8b:ed:8d: 3f:7c:94:aa:98:21:ea:2c:f6:4e:7e:15:23:8c:ca:c0:ba:32: 38:a6:57:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754h+A9FnS0NZ7xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk YWI1ZmJiN2QtZDlmYy00YzBlLWEyZDYtNDQ4ODgwMjM4MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziYi9dmRohjMKy8VAZkJIO3Ue83FAoMTjCql NfXg8F6YL1BdMlDAj+gvuSiswdGbuc7wixfBi/m4GuSp6bLuubPiJDaPlzsCYxaH tcVNYrusmaZbXmriWetJA92X+sfFyfK/4Z0HLQTORJg3IutdJ4H5EAcsBAFbchxa 2zI9ONzTs/UrHz3ajkVsnYdyvqTfwn4ge7tZjAQKWIe5rKeIhElVy1gitLMJktTc Ju9d+FlOlWmkLgDzadQPrLNtMg77fx4+hrfOgdVLM53VeO4jUoFDBl92v+E0juSr ORFiuo5yNtn1HoESpzuocPiwf/tuutLNlIwZe/bumhGVARrtyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFqIJsf27mOjRNZQragcD6gKD2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGZmYTM2Y2YtMjFhZC0z OWQ0LWI5MDEtNzBkOWJmZWZiZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5Ue8xAjQW3d2uLgoDG/RfYK8LINVHeUsKQ1Mq0kZm8IjrrqXFVUuai 0ErZPEPhWv3dK0QdrLuruloj960pvMk08pBeK+uxY+rPrFgHGRsUUWitwTVlL14M yHsPwQ0N4FCTeQ2MHDVx8qa7oziVLv1W5OxkPJt9D0nptjRuM2WPoJ6hCW5Zoi7e ydWGyPpiPRVXdm1azh6+kCSq2y+xzYKLmfAbZzJ42jUWH8is4CqsAE2HXymwaN6L 3wwTN7XTy/fmzpZhlmSmTyQG10GA01UvJa8Uxx8liSvhiWHyTLqH94iYHn49Q4vt jT98lKqYIeos9k5+FSOMysC6MjimV3o= -----END CERTIFICATE-----Generated at Fri Sep 11 13:10:17 2026 by rpki-client