$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa File: 96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa (raw, json) Hash identifier: /u5XoE/aUoy+uzsN8HmSOzH1GBDp6AX3wIH+Vl/d/pI= Subject key identifier: FA:75:5A:37:15:23:78:20:6E:E8:BF:D4:9E:7F:B2:05:D3:40:AA:FC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECD371755EAB613DC66F8DF80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 61622 IP address blocks: 38.52.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:17:55:ea:b6:13:dc:66:f8:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=da33c952-8647-4c0e-874d-d4ab16b1fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:61:a4:04:2a:9f:8d:24:07:02:e3:e6:82: 55:5f:a1:ac:c1:75:cd:e6:6a:a2:08:4a:ae:09:b7: 6c:95:cb:56:0b:77:a3:50:2d:cf:94:04:da:68:01: c8:2f:9b:66:93:58:4d:15:64:53:b3:65:cd:23:ae: 9d:ab:d4:97:ce:3d:41:a6:c9:96:a2:5f:e7:3e:88: 7f:3e:25:6e:8d:4e:30:d8:7d:b1:3f:b3:ef:92:6a: 14:de:c0:f8:34:73:61:51:d7:00:2a:5c:51:f0:3b: 08:2d:43:7b:e4:c7:8b:60:65:80:c8:6f:79:4c:e2: ac:d7:37:b8:b1:26:1a:8d:32:e3:5f:a8:56:81:ab: a2:d2:20:1f:87:7f:c2:1c:36:5c:6f:ce:8b:70:3d: 30:37:fe:63:a6:27:4f:87:57:f8:33:0f:49:2b:f2: a1:5c:22:65:6a:01:26:62:5b:38:24:9e:be:27:d6: c2:2e:ba:df:f2:bb:52:66:4a:08:c9:e1:75:2f:6c: 6a:ea:72:8e:d6:d2:cc:95:68:f4:85:0d:ed:e9:28: 35:dc:82:77:c2:fc:69:a6:fc:02:e8:f6:ba:bb:b5: 99:49:cc:8e:ab:3e:a6:6a:07:92:be:02:d7:fe:9d: e1:b9:5a:31:a0:93:6e:43:c3:e5:2b:b5:4d:66:ec: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:75:5A:37:15:23:78:20:6E:E8:BF:D4:9E:7F:B2:05:D3:40:AA:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.52.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8b:23:1a:c3:d0:fe:3c:66:1f:64:10:dc:5f:a8:be:a2:0d: 22:fe:66:93:fb:2e:82:9f:ad:3e:3a:30:ba:09:82:42:41:3a: ef:1f:d3:bf:86:21:51:60:ba:5f:9e:80:94:d5:5c:54:45:17: 3a:4f:3c:41:e5:e6:4a:e1:30:c0:8f:6a:2f:c3:6c:f5:3e:b7: cc:7e:11:e9:5c:18:22:1a:da:98:c4:81:0d:43:e0:e1:58:4e: b0:7d:a8:29:01:30:c4:2f:c1:6a:64:7b:d7:e3:1e:a9:c7:22: f4:bf:3e:cd:cb:f9:28:89:e8:92:1d:32:35:59:31:24:26:59: ff:dd:5a:92:7b:ab:a9:5f:9a:b9:68:ff:e3:fd:78:55:c8:33: 07:57:ae:54:1e:58:71:a8:5f:f0:a7:30:f1:d4:10:4d:c9:e0: 9a:17:48:4f:a8:1e:81:ad:5f:ae:6e:81:57:e7:14:4c:94:3d: 22:7a:4d:c3:ec:5f:64:e5:0e:e7:27:3e:49:39:1a:17:7a:d1: e2:53:3e:55:92:b8:a8:f2:d4:4a:09:96:26:e9:1b:4c:5a:34: 67:b9:9c:b9:d0:9a:af:79:f4:8f:90:cd:11:80:38:09:05:f4: 0c:29:95:e9:8e:68:f5:27:45:2e:7f:1f:f0:85:c2:fe:61:55: ec:55:17:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxdV6rYT3Gb434AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZGEzM2M5NTItODY0Ny00YzBlLTg3NGQtZDRhYjE2YjFmZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA5hpAQqn40kBwLj5oJVX6GswXXN5mqiCEqu CbdslctWC3ejUC3PlATaaAHIL5tmk1hNFWRTs2XNI66dq9SXzj1BpsmWol/nPoh/ PiVujU4w2H2xP7PvkmoU3sD4NHNhUdcAKlxR8DsILUN75MeLYGWAyG95TOKs1ze4 sSYajTLjX6hWgaui0iAfh3/CHDZcb86LcD0wN/5jpidPh1f4Mw9JK/KhXCJlagEm Yls4JJ6+J9bCLrrf8rtSZkoIyeF1L2xq6nKO1tLMlWj0hQ3t6Sg13IJ3wvxppvwC 6Pa6u7WZScyOqz6mageSvgLX/p3huVoxoJNuQ8PlK7VNZuyn2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp1WjcVI3ggbui/1J5/sgXTQKr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTZhMzRkZDktYjY1Yi0z ZDc2LWE5NjUtNDdmYTEzZTU1ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjSVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaLIxrD0P48Zh9kENxfqL6iDSL+ZpP7LoKfrT46MLoJgkJBOu8f07+G IVFgul+egJTVXFRFFzpPPEHl5krhMMCPai/DbPU+t8x+EelcGCIa2pjEgQ1D4OFY TrB9qCkBMMQvwWpke9fjHqnHIvS/Ps3L+SiJ6JIdMjVZMSQmWf/dWpJ7q6lfmrlo /+P9eFXIMwdXrlQeWHGoX/CnMPHUEE3J4JoXSE+oHoGtX65ugVfnFEyUPSJ6TcPs X2TlDucnPkk5Ghd60eJTPlWSuKjy1EoJlibpG0xaNGe5nLnQmq959I+QzRGAOAkF 9AwplemOaPUnRS5/H/CFwv5hVexVFwE= -----END CERTIFICATE-----Generated at Fri Sep 11 13:51:02 2026 by rpki-client