$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9108ac97-0ccd-3a1a-8cf7-6a7d70f4ace5.roa File: 9108ac97-0ccd-3a1a-8cf7-6a7d70f4ace5.roa (raw, json) Hash identifier: 0oqTZWJiYofF5ejUoElPi2se+cPYmzcaT1p3t4yyERQ= Subject key identifier: 0A:00:57:1E:3E:77:BC:70:CA:86:7C:8E:5A:23:E1:23:92:A4:FB:A6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F20EC8C2BE4617A7E05FF9900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9108ac97-0ccd-3a1a-8cf7-6a7d70f4ace5.roa Signing time: Thu 10 Sep 2026 12:37:56 +0000 ROA not before: Thu 10 Sep 2026 12:37:56 +0000 ROA not after: Wed 09 Dec 2026 13:37:56 +0000 asID: 272361 IP address blocks: 38.58.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:ec:8c:2b:e4:61:7a:7e:05:ff:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 10 12:37:56 2026 GMT Not After : Dec 9 13:37:56 2026 GMT Subject: CN=4af7910f-097a-4a1d-9773-291bc2a97747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:30:21:a2:8f:7b:ea:85:b3:ae:10:95:d2:97: 42:a8:e2:82:52:c5:0d:93:87:55:83:62:50:28:3f: 71:6a:c7:e7:3b:47:83:37:12:16:40:44:5f:f9:fd: 21:2b:17:d4:b8:97:9f:70:35:01:6a:f5:9c:1c:08: 4b:c5:e3:4d:26:1e:f1:f0:ef:8a:b1:7f:76:bf:fd: e9:e9:52:c4:7c:0f:90:cb:88:78:9c:6c:2c:bb:87: a0:cc:72:26:2d:5c:3a:df:d5:85:a5:92:41:58:dd: 89:68:92:54:09:a1:13:ca:1d:39:35:fd:ee:c5:82: 60:36:d1:9a:69:55:94:bc:07:7c:9c:57:16:5f:09: 68:78:fb:7d:b2:ac:22:70:23:4b:cd:69:ea:a7:b6: c4:2b:18:7e:75:16:77:f1:6a:1e:00:3e:2b:d0:a7: e7:db:2e:d5:83:04:e4:43:96:58:de:25:96:0f:fd: 7c:39:aa:e2:da:25:8a:b7:ec:c3:5e:23:3e:f1:9f: f1:84:6d:10:aa:11:19:e5:04:e9:8d:56:80:fc:ea: 64:2e:85:4f:c1:82:5f:43:e4:91:cc:95:01:74:e6: 48:77:80:06:33:1b:e0:d4:82:9e:d6:af:03:a1:aa: a1:1e:29:09:ca:64:24:7d:a4:b1:44:18:e2:9c:08: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:00:57:1E:3E:77:BC:70:CA:86:7C:8E:5A:23:E1:23:92:A4:FB:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9108ac97-0ccd-3a1a-8cf7-6a7d70f4ace5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:9b:89:d6:f5:a1:c4:d2:9a:cd:02:9b:3d:3c:22:ef:2c:aa: d9:e9:cd:62:d3:51:ba:05:85:16:70:1a:ea:81:b0:11:3c:ca: c1:ef:80:29:18:26:04:fe:cc:c5:47:86:17:6a:c7:07:ab:ac: 04:8c:ad:d2:00:1b:f3:27:62:2c:74:04:ae:b9:c9:2b:91:d1: 1a:e2:0e:af:df:f8:90:7c:b0:38:2f:d5:6f:fb:a7:14:42:a6: 2a:9e:c2:b5:96:1e:cd:0b:be:1a:31:6d:62:8d:d2:0a:04:d2: 80:fb:09:99:04:21:8f:06:4a:8e:a3:8d:a4:6d:24:0f:88:df: f7:ff:ff:20:87:65:de:11:e8:0e:a3:b4:fd:13:0a:58:32:3c: 51:63:18:65:1c:0d:a6:05:cf:d9:9f:85:9c:7d:71:12:bc:ed: 66:02:7c:b2:31:e5:9b:28:83:f4:07:56:2c:20:13:29:b3:e4: bb:7d:e3:f2:3a:9f:d7:15:8d:da:3d:c5:3b:66:f5:88:07:f8: 1a:88:2a:a9:e9:60:13:78:0d:f1:f5:2c:c9:ef:f0:53:ce:ee: f9:17:c2:8c:eb:b5:ac:85:7f:28:8c:2b:8a:8a:5d:0c:6e:e9: 39:e8:af:42:8a:18:f1:02:5a:60:0f:27:6d:a2:37:f3:e9:6a: c2:1f:1b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g7Iwr5GF6fgX/mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMDEyMzc1NloXDTI2MTIwOTEzMzc1NlowLzEtMCsGA1UEAxMk NGFmNzkxMGYtMDk3YS00YTFkLTk3NzMtMjkxYmMyYTk3NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjAhoo976oWzrhCV0pdCqOKCUsUNk4dVg2JQ KD9xasfnO0eDNxIWQERf+f0hKxfUuJefcDUBavWcHAhLxeNNJh7x8O+KsX92v/3p 6VLEfA+Qy4h4nGwsu4egzHImLVw639WFpZJBWN2JaJJUCaETyh05Nf3uxYJgNtGa aVWUvAd8nFcWXwloePt9sqwicCNLzWnqp7bEKxh+dRZ38WoeAD4r0Kfn2y7VgwTk Q5ZY3iWWD/18Oari2iWKt+zDXiM+8Z/xhG0QqhEZ5QTpjVaA/OpkLoVPwYJfQ+SR zJUBdOZId4AGMxvg1IKe1q8DoaqhHikJymQkfaSxRBjinAjdrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoAVx4+d7xwyoZ8jloj4SOSpPumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTEwOGFjOTctMGNjZC0z YTFhLThjZjctNmE3ZDcwZjRhY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2bidb1ocTSms0Cmz08Iu8sqtnpzWLTUboFhRZwGuqBsBE8ysHvgCkY JgT+zMVHhhdqxwerrASMrdIAG/MnYix0BK65ySuR0RriDq/f+JB8sDgv1W/7pxRC piqewrWWHs0LvhoxbWKN0goE0oD7CZkEIY8GSo6jjaRtJA+I3/f//yCHZd4R6A6j tP0TClgyPFFjGGUcDaYFz9mfhZx9cRK87WYCfLIx5Zsog/QHViwgEymz5Lt94/I6 n9cVjdo9xTtm9YgH+BqIKqnpYBN4DfH1LMnv8FPO7vkXwozrtayFfyiMK4qKXQxu 6Tnor0KKGPECWmAPJ22iN/PpasIfG00= -----END CERTIFICATE-----Generated at Fri Sep 11 13:47:02 2026 by rpki-client