$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/905a573f-6c30-372d-81cb-a3a3ee46cb41.roa File: 905a573f-6c30-372d-81cb-a3a3ee46cb41.roa (raw, json) Hash identifier: h4fhUKaoYtrq6tIMf5O+vVc2hRqJfbrBVeMVnbJFBLI= Subject key identifier: 38:5B:CD:59:1F:6C:C7:21:0A:97:B0:1D:8B:9E:0D:CB:CE:D1:1D:E7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB2B1AEC08F5891DA102FA8A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/905a573f-6c30-372d-81cb-a3a3ee46cb41.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 270158 IP address blocks: 38.65.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ae:c0:8f:58:91:da:10:2f:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=680af1a2-6a65-4bb1-91ec-a2664ba0e5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:ad:91:f1:94:6b:21:55:05:1e:cf:d7:9a: e0:30:b0:22:bf:2e:f6:9e:d8:75:97:01:1b:d8:1c: 3b:c7:38:88:42:ea:d2:a8:69:36:83:63:e1:f0:7f: c9:42:8d:04:59:ba:c2:74:9f:3f:b6:4a:5a:20:97: 31:df:18:6c:af:32:df:b0:b6:70:3e:78:82:4e:ad: 63:46:96:31:30:5a:0c:10:e3:f0:78:f6:02:84:4e: bc:b8:8d:a1:a6:de:2f:72:96:15:3c:a7:74:26:e0: 45:eb:79:c8:c4:4e:59:7e:a4:57:25:4f:39:f5:e8: d7:73:0a:2f:59:23:b5:08:3b:fd:6c:c4:d6:6b:cd: 89:38:34:0b:69:a4:ef:69:83:f6:c6:77:cf:72:74: 97:58:87:41:02:22:4f:18:2b:df:c6:e6:36:d0:bd: 69:31:6d:51:c8:7a:de:85:ea:5d:29:d4:20:7e:00: 07:5b:91:a8:01:66:53:60:86:c4:62:d9:f6:4c:60: 97:b1:b5:4f:9d:5c:19:47:b3:7d:57:0d:f4:84:35: 79:6e:5f:d5:b1:1a:d9:25:aa:cf:95:9c:8f:17:df: 78:8c:e1:1e:2c:13:ba:76:69:63:f9:3a:b8:06:76: 81:06:58:92:76:86:ee:f7:eb:be:5f:48:11:b5:c9: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5B:CD:59:1F:6C:C7:21:0A:97:B0:1D:8B:9E:0D:CB:CE:D1:1D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/905a573f-6c30-372d-81cb-a3a3ee46cb41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.65.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:60:e6:ee:94:ac:c8:8b:25:93:d3:8c:ea:bd:cb:4e:c3:f0: a5:e6:ce:c0:a9:0c:34:47:10:59:ef:48:3f:af:05:8f:99:ca: 79:94:a0:49:f2:a6:e5:38:bc:64:06:71:cb:19:b9:34:87:d0: 55:3b:be:b1:6c:75:7a:bc:1a:23:88:a2:42:74:0c:6d:d7:2f: 4c:1e:b2:ee:91:91:af:2e:bb:24:4e:45:88:9a:40:7b:61:9d: f0:fc:a2:5b:24:52:ec:42:8d:66:8d:d3:bc:b9:d7:46:15:50: 83:9c:ac:d6:05:c7:07:e1:e6:e9:82:25:70:15:9a:fb:6d:14: 1f:bc:eb:e1:98:4e:dd:3b:df:16:32:28:95:e9:78:b1:e6:ff: 18:5c:77:e1:2d:47:45:f6:76:33:81:0b:ba:b1:01:c2:b1:78: 1d:5e:38:99:2a:3a:5e:c0:16:1d:eb:e1:7e:b5:2f:37:ab:70: 01:e6:86:61:2e:0d:72:8a:0f:44:01:a1:e9:57:e5:d3:85:7e: 2c:96:ca:a6:4f:c7:e1:a7:6f:0c:d9:f5:79:b7:f3:12:47:d9: e6:08:1f:cd:7d:bb:76:3c:57:31:6c:22:01:19:dc:6d:20:db: 64:1b:8c:1b:2f:98:f0:5a:21:e4:be:86:b2:47:c3:f6:84:c6: 26:a7:c7:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysa7Aj1iR2hAvqKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NjgwYWYxYTItNmE2NS00YmIxLTkxZWMtYTI2NjRiYTBlNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpGtkfGUayFVBR7P15rgMLAivy72nth1lwEb 2Bw7xziIQurSqGk2g2Ph8H/JQo0EWbrCdJ8/tkpaIJcx3xhsrzLfsLZwPniCTq1j RpYxMFoMEOPwePYChE68uI2hpt4vcpYVPKd0JuBF63nIxE5ZfqRXJU859ejXcwov WSO1CDv9bMTWa82JODQLaaTvaYP2xnfPcnSXWIdBAiJPGCvfxuY20L1pMW1RyHre hepdKdQgfgAHW5GoAWZTYIbEYtn2TGCXsbVPnVwZR7N9Vw30hDV5bl/VsRrZJarP lZyPF994jOEeLBO6dmlj+Tq4BnaBBliSdobu9+u+X0gRtclqJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhbzVkfbMchCpewHYueDcvO0R3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTA1YTU3M2YtNmMzMC0z NzJkLTgxY2ItYTNhM2VlNDZjYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENg5u6UrMiLJZPTjOq9y07D8KXmzsCpDDRHEFnvSD+vBY+ZynmUoEny puU4vGQGccsZuTSH0FU7vrFsdXq8GiOIokJ0DG3XL0wesu6Rka8uuyRORYiaQHth nfD8olskUuxCjWaN07y510YVUIOcrNYFxwfh5umCJXAVmvttFB+86+GYTt073xYy KJXpeLHm/xhcd+EtR0X2djOBC7qxAcKxeB1eOJkqOl7AFh3r4X61LzercAHmhmEu DXKKD0QBoelX5dOFfiyWyqZPx+GnbwzZ9Xm38xJH2eYIH819u3Y8VzFsIgEZ3G0g 22QbjBsvmPBaIeS+hrJHw/aExianx24= -----END CERTIFICATE-----Generated at Fri Sep 11 13:52:21 2026 by rpki-client