$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa File: aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa (raw, json) Hash identifier: v5Wk2RwjK48GvrZ6+IIMrRckV4OOq82yw54MA/wjlAI= Subject key identifier: 1F:D0:9A:B5:15:49:86:FE:A3:91:80:49:92:C7:BC:3A:7C:D1:C9:40 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA7975523ECD80851E5932100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 272823 IP address blocks: 38.10.102.0/24 maxlen: 24 38.77.199.0/24 maxlen: 24 38.191.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:55:23:ec:d8:08:51:e5:93:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3002da2c-7396-45aa-80e6-3f7f872ba211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:63:19:ce:ef:fc:af:84:78:9b:3a:5e:b5: 0c:77:83:aa:b5:e7:82:81:af:1a:83:6a:e3:79:ea: 77:b7:34:14:f8:47:19:5a:38:72:21:ad:dc:58:dc: f0:56:43:d9:9a:36:fc:4b:d0:35:b3:78:ce:ef:f5: 45:c7:25:32:4a:44:de:37:80:ba:da:ac:ea:fb:ea: a7:d0:78:bf:90:31:9b:2f:32:ce:bb:fd:08:fa:f3: c6:33:d2:93:ff:4d:5b:a8:46:83:96:48:9f:7f:43: e6:df:95:40:f3:34:2a:b2:63:84:34:ae:e4:70:33: 26:5f:cb:7e:a9:ef:78:37:2d:73:40:ab:1d:64:ee: 63:07:92:fe:2a:5f:81:df:cf:70:4a:33:ba:04:d8: c2:68:c0:25:12:ac:04:4e:94:69:50:c1:20:31:4d: ce:53:a4:41:0a:df:9a:7a:19:d5:eb:4e:62:a8:8c: 18:34:f4:2d:d1:db:04:0b:16:c8:cb:81:cf:f7:b4: cb:08:9e:4e:ba:f2:8b:ad:53:53:5f:95:ea:f0:2b: 85:36:e4:28:7d:ad:c9:be:86:cb:d9:88:fa:f8:ad: 1d:be:c3:00:8b:1d:24:9c:73:86:f5:42:1e:50:c0: 02:a9:57:58:29:18:c2:76:9d:ae:02:54:66:b0:0f: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:9A:B5:15:49:86:FE:A3:91:80:49:92:C7:BC:3A:7C:D1:C9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.10.102.0/24 38.77.199.0/24 38.191.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:51:1c:1b:a4:7a:4f:39:20:9c:38:5f:3f:4a:0e:25:1c:88: ff:4a:c8:24:d4:e4:f0:0a:8a:ac:38:90:c7:97:c2:66:c1:4a: 00:cb:8c:bf:49:73:5c:d6:5c:75:c4:8b:48:0a:b6:d6:7b:89: 90:89:b6:b8:cd:ce:ea:9b:d3:ff:ac:d4:3e:1a:a1:45:15:21: d1:22:2f:a8:aa:95:12:c8:6a:6d:89:99:a3:2b:c9:51:ac:06: 82:79:83:42:fa:a7:f8:f2:26:b1:2e:05:aa:e0:03:7b:65:86: 27:d0:3e:5a:68:f8:a8:93:d5:46:ea:15:80:75:eb:7d:a0:51: 92:1d:e3:46:d9:fb:73:d3:89:e3:cf:a9:c0:41:02:63:d0:49: db:ad:06:dd:44:b9:41:70:1e:10:2e:bc:48:ea:e5:c2:5d:6c: 30:2b:5e:96:45:e7:3a:96:e0:32:93:96:46:60:3f:f7:39:51: c1:d7:2d:28:7d:da:88:ee:00:49:af:03:55:ec:12:ce:8b:da: 2a:39:99:4c:4e:08:55:09:c9:9a:f7:d0:df:ac:00:be:8f:d0: b5:db:1a:bf:0a:57:59:99:27:fb:6c:6d:76:53:69:c2:e7:01: 76:5a:90:33:53:cd:ce:74:2b:6b:54:82:8e:ff:10:ef:40:a7: a0:8f:c5:47 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6nl1Uj7NgIUeWTIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzAwMmRhMmMtNzM5Ni00NWFhLTgwZTYtM2Y3Zjg3MmJhMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi29jGc7v/K+EeJs6XrUMd4OqteeCga8ag2rj eep3tzQU+EcZWjhyIa3cWNzwVkPZmjb8S9A1s3jO7/VFxyUySkTeN4C62qzq++qn 0Hi/kDGbLzLOu/0I+vPGM9KT/01bqEaDlkiff0Pm35VA8zQqsmOENK7kcDMmX8t+ qe94Ny1zQKsdZO5jB5L+Kl+B389wSjO6BNjCaMAlEqwETpRpUMEgMU3OU6RBCt+a ehnV605iqIwYNPQt0dsECxbIy4HP97TLCJ5OuvKLrVNTX5Xq8CuFNuQofa3JvobL 2Yj6+K0dvsMAix0knHOG9UIeUMACqVdYKRjCdp2uAlRmsA+vvwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFB/QmrUVSYb+o5GASZLHvDp80clAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWEwZTgzOTYtNDdhZC0z NGEwLWE0NDktNjRhOWZjZDE4YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJgpmAwQA Jk3HAwQBJr/8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHZRHBukek85IJw4Xz9KDiUciP9KyCTU5PAKiqw4 kMeXwmbBSgDLjL9Jc1zWXHXEi0gKttZ7iZCJtrjNzuqb0/+s1D4aoUUVIdEiL6iq lRLIam2JmaMryVGsBoJ5g0L6p/jyJrEuBargA3tlhifQPlpo+KiT1UbqFYB1632g UZId40bZ+3PTiePPqcBBAmPQSdutBt1EuUFwHhAuvEjq5cJdbDArXpZF5zqW4DKT lkZgP/c5UcHXLSh92ojuAEmvA1XsEs6L2io5mUxOCFUJyZr30N+sAL6P0LXbGr8K V1mZJ/tsbXZTacLnAXZakDNTzc50K2tUgo7/EO9Ap6CPxUc= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:30 2026 by rpki-client