$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/99bad3dc-71af-3f23-aa42-463919b5b155.roa File: 99bad3dc-71af-3f23-aa42-463919b5b155.roa (raw, json) Hash identifier: 5sdlJsKDCkeMxXA7Eqamo60Sb7q9GUpIwoFP+zCVE5g= Subject key identifier: CF:2F:C8:AA:F4:73:D6:D4:0D:41:B4:28:A1:DD:56:E6:2B:52:88:B5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1057C813927132EF3F0050F8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/99bad3dc-71af-3f23-aa42-463919b5b155.roa Signing time: Fri 04 Sep 2026 14:05:15 +0000 ROA not before: Fri 04 Sep 2026 14:05:15 +0000 ROA not after: Thu 03 Dec 2026 15:05:15 +0000 asID: 136065 IP address blocks: 38.246.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:57:c8:13:92:71:32:ef:3f:00:50:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 4 14:05:15 2026 GMT Not After : Dec 3 15:05:15 2026 GMT Subject: CN=99869d58-5006-4de2-bfe3-2397e1a5ce25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:64:28:90:4f:99:e8:1c:05:c4:68:8d:12: d2:4c:67:95:1d:01:8c:c8:85:3a:99:51:88:9c:7e: e4:10:e1:52:75:32:fc:5d:72:2e:3e:08:5e:bd:83: 67:30:89:d9:f4:b6:5f:1b:9c:9e:c1:83:31:aa:7e: 24:b1:56:5d:b7:b7:9c:50:2e:e5:c2:74:88:78:9a: b3:3f:e3:06:89:d2:d8:38:30:31:25:53:c4:df:e1: 50:2f:4e:d3:99:89:16:4d:af:c2:34:ba:fa:b7:1b: 2e:48:94:2a:b4:48:89:d4:68:0d:64:7e:c0:ce:6c: b0:44:0d:b7:20:0e:c7:4b:0a:f7:db:e5:19:69:8c: 41:28:f8:fc:a4:cb:85:44:f1:e4:ca:aa:a3:88:5b: bb:48:e5:35:87:da:3e:f5:b0:a6:da:4b:a1:b9:b3: f7:51:dd:84:81:6c:6e:d8:d9:ff:e3:fe:f2:5a:a7: c8:29:54:87:69:19:d4:17:71:74:e7:3d:3b:52:66: 40:89:59:eb:8d:7d:4a:78:62:b1:4a:92:49:33:b8: 38:09:c2:28:db:3f:e2:24:ac:75:71:01:d3:e2:5f: 36:34:29:e1:f9:ac:c5:93:f4:df:e6:93:33:5b:5d: 29:bd:65:4a:67:b0:60:16:ea:6b:ea:07:c6:02:62: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2F:C8:AA:F4:73:D6:D4:0D:41:B4:28:A1:DD:56:E6:2B:52:88:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/99bad3dc-71af-3f23-aa42-463919b5b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8a:c9:7a:3f:38:93:06:f3:c7:fa:a1:50:21:7f:49:b1:32: 18:f7:1c:13:cd:97:ee:1d:94:dd:e3:5e:a0:9d:93:b1:ab:44: 32:07:0e:17:c4:a9:2c:e6:e3:01:1f:39:4b:07:1f:04:d6:b1: a6:f9:45:f1:a0:88:ce:66:ba:4c:3a:50:11:a2:5e:1d:96:f6: 4c:5b:b2:a7:d8:3c:4c:6c:9f:a2:39:c0:49:85:cb:ee:00:f9: ff:4a:53:ec:4b:d2:73:16:5b:2a:85:85:28:7e:53:e3:5f:81: 74:e6:6d:59:58:e5:7d:7f:39:5c:5b:d6:25:d7:59:49:9f:73: 03:0e:bd:94:05:d0:2d:3c:20:a5:ea:35:ac:c2:b0:1a:d0:5d: 4c:43:f1:a8:e3:00:6e:4c:1e:07:54:95:c1:3c:30:f4:6a:79: 87:d3:24:3d:e3:aa:e3:72:0f:04:98:20:e2:65:84:ae:45:d6: a2:c8:cb:75:75:c8:e9:ad:73:8c:85:d7:e1:93:a9:ce:e3:ca: 7b:0d:66:6d:ba:15:b8:31:29:43:bb:02:cc:7e:1e:4d:af:2a: 75:69:11:cd:af:f3:2d:00:74:65:e1:67:15:39:a8:bb:08:ee: 51:05:b6:1f:3c:6e:63:da:11:c4:e4:2f:c6:44:57:76:4a:9b: e9:1f:b0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QV8gTknEy7z8AUPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNDE0MDUxNVoXDTI2MTIwMzE1MDUxNVowLzEtMCsGA1UEAxMk OTk4NjlkNTgtNTAwNi00ZGUyLWJmZTMtMjM5N2UxYTVjZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj75kKJBPmegcBcRojRLSTGeVHQGMyIU6mVGI nH7kEOFSdTL8XXIuPghevYNnMInZ9LZfG5yewYMxqn4ksVZdt7ecUC7lwnSIeJqz P+MGidLYODAxJVPE3+FQL07TmYkWTa/CNLr6txsuSJQqtEiJ1GgNZH7AzmywRA23 IA7HSwr32+UZaYxBKPj8pMuFRPHkyqqjiFu7SOU1h9o+9bCm2kuhubP3Ud2EgWxu 2Nn/4/7yWqfIKVSHaRnUF3F05z07UmZAiVnrjX1KeGKxSpJJM7g4CcIo2z/iJKx1 cQHT4l82NCnh+azFk/Tf5pMzW10pvWVKZ7BgFupr6gfGAmKFnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8vyKr0c9bUDUG0KKHdVuYrUoi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTliYWQzZGMtNzFhZi0z ZjIzLWFhNDItNDYzOTE5YjViMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJvbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+KyXo/OJMG88f6oVAhf0mxMhj3HBPNl+4dlN3jXqCdk7GrRDIHDhfE qSzm4wEfOUsHHwTWsab5RfGgiM5mukw6UBGiXh2W9kxbsqfYPExsn6I5wEmFy+4A +f9KU+xL0nMWWyqFhSh+U+NfgXTmbVlY5X1/OVxb1iXXWUmfcwMOvZQF0C08IKXq NazCsBrQXUxD8ajjAG5MHgdUlcE8MPRqeYfTJD3jquNyDwSYIOJlhK5F1qLIy3V1 yOmtc4yF1+GTqc7jynsNZm26FbgxKUO7Asx+Hk2vKnVpEc2v8y0AdGXhZxU5qLsI 7lEFth88bmPaEcTkL8ZEV3ZKm+kfsGc= -----END CERTIFICATE-----Generated at Fri Sep 11 13:04:40 2026 by rpki-client