$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afab8d3f-618a-3c7b-8343-aa87c9e98597.roa File: afab8d3f-618a-3c7b-8343-aa87c9e98597.roa (raw, json) Hash identifier: VqUItV8k0LyeqEJPyHOw948B7MJhV6mlPPcwxXOUGnE= Subject key identifier: EB:18:FB:0D:91:AA:E9:1D:B5:36:4D:7D:C0:51:40:53:A3:65:3E:71 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EEBEC9DEAB4466DE21A2D8540 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afab8d3f-618a-3c7b-8343-aa87c9e98597.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 174 IP address blocks: 38.150.17.0/24 maxlen: 24 154.18.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:9d:ea:b4:46:6d:e2:1a:2d:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=02f3c7ba-4b9c-47fc-bfba-54939cb99694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:3d:6c:b5:cd:3b:c8:b8:43:d0:64:cb:46: 3c:f9:89:6c:32:48:62:63:57:d4:ab:43:24:b7:30: 51:77:5c:78:2e:5b:5e:d1:9b:e3:92:80:ff:ed:af: 31:62:19:ab:1d:67:fc:17:b0:51:eb:0c:f6:ba:27: 74:de:da:26:ab:4d:56:12:d3:61:82:a4:dd:7c:7b: b7:f8:89:88:40:64:b4:02:28:d4:42:33:58:56:8a: bd:8e:98:78:62:de:99:44:dc:53:fd:6c:dc:3f:27: 65:37:04:c5:6c:da:d9:38:83:bd:42:d3:d9:f7:23: 82:20:83:ce:d1:22:67:25:5f:2f:5f:d9:53:8b:a8: 37:da:bd:6f:26:74:26:f4:50:27:ee:19:96:37:8d: a6:16:10:d7:ed:a7:bb:fa:b4:2e:62:b4:c7:8f:6c: fb:f5:c3:b0:23:90:db:73:8d:cc:a7:85:2a:16:81: 23:57:54:97:ef:a4:09:b4:3d:b1:fd:25:57:12:a2: 63:47:fd:7b:2a:a5:da:2a:da:b6:97:a4:52:eb:37: e9:51:bf:63:00:35:54:ef:0f:63:3b:4a:0c:03:3c: 56:7b:10:b6:7b:a7:69:5b:71:e5:fe:d5:06:01:d3: b3:7a:81:42:44:ce:24:a2:8c:c5:cb:16:1c:d2:fa: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:18:FB:0D:91:AA:E9:1D:B5:36:4D:7D:C0:51:40:53:A3:65:3E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afab8d3f-618a-3c7b-8343-aa87c9e98597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.150.17.0/24 154.18.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:f0:67:91:00:18:e1:6c:58:db:4d:b1:5a:e6:24:b5:9d:aa: 50:29:ed:65:8b:f9:db:e6:2a:f5:b6:6c:2d:e5:6a:e5:66:81: cd:c6:5a:c4:62:7b:31:1e:34:dd:53:29:a6:6b:6a:93:06:07: 80:1e:d4:42:45:72:bb:74:09:1a:25:e8:59:6f:d7:1d:2e:81: 13:0d:aa:3a:a4:6f:5a:59:29:3a:73:f9:8d:61:1a:fb:5d:fb: 3d:15:32:b6:9c:f0:5e:82:60:c6:82:4d:20:01:a6:bc:06:a0: 92:3b:33:b8:e5:c1:99:eb:71:b5:6a:7f:01:92:f7:18:12:0a: 54:9a:d7:63:80:f4:06:54:98:58:0a:37:c1:da:f0:89:35:8d: 4d:a7:99:4d:bc:1e:c1:69:ee:68:85:3d:fe:4d:ac:59:c5:c7: 4b:d4:a9:30:b2:7c:70:ed:34:b7:02:95:c8:d7:a6:7f:13:9e: d0:e4:00:58:ec:bd:0d:84:03:f8:c8:0f:b6:de:aa:47:86:f7: 55:1a:9e:dd:e8:ba:6d:97:fe:63:d9:02:8a:8c:78:b0:71:6d: 32:b9:7e:41:33:a9:b7:1d:23:c4:4c:e0:16:66:96:66:f6:80: 72:17:72:75:c3:93:12:20:49:3a:1b:9d:13:0b:d9:03:ae:98: d0:ed:1f:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7r7J3qtEZt4hothUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDJmM2M3YmEtNGI5Yy00N2ZjLWJmYmEtNTQ5MzljYjk5Njk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkQ9bLXNO8i4Q9Bky0Y8+YlsMkhiY1fUq0Mk tzBRd1x4Llte0ZvjkoD/7a8xYhmrHWf8F7BR6wz2uid03tomq01WEtNhgqTdfHu3 +ImIQGS0AijUQjNYVoq9jph4Yt6ZRNxT/WzcPydlNwTFbNrZOIO9QtPZ9yOCIIPO 0SJnJV8vX9lTi6g32r1vJnQm9FAn7hmWN42mFhDX7ae7+rQuYrTHj2z79cOwI5Db c43Mp4UqFoEjV1SX76QJtD2x/SVXEqJjR/17KqXaKtq2l6RS6zfpUb9jADVU7w9j O0oMAzxWexC2e6dpW3Hl/tUGAdOzeoFCRM4koozFyxYc0vqWqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOsY+w2RqukdtTZNfcBRQFOjZT5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZhYjhkM2YtNjE4YS0z YzdiLTgzNDMtYWE4N2M5ZTk4NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJpYRAwQA mhLiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL/wZ5EAGOFsWNtNsVrmJLWdqlAp7WWL+dvmKvW2bC3lauVm gc3GWsRiezEeNN1TKaZrapMGB4Ae1EJFcrt0CRol6Flv1x0ugRMNqjqkb1pZKTpz +Y1hGvtd+z0VMrac8F6CYMaCTSABprwGoJI7M7jlwZnrcbVqfwGS9xgSClSa12OA 9AZUmFgKN8Ha8Ik1jU2nmU28HsFp7miFPf5NrFnFx0vUqTCyfHDtNLcClcjXpn8T ntDkAFjsvQ2EA/jID7beqkeG91Uant3oum2X/mPZAoqMeLBxbTK5fkEzqbcdI8RM 4BZmlmb2gHIXcnXDkxIgSTobnRML2QOumNDtH9Q= -----END CERTIFICATE-----Generated at Fri Sep 11 12:38:12 2026 by rpki-client