$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b29a6df9-cb35-323e-8a11-2c00f89c051c.roa File: b29a6df9-cb35-323e-8a11-2c00f89c051c.roa (raw, json) Hash identifier: y0O3m4wIFCTb9KR4ZapswWV6w9Z6LmbiNTEsdvhKAZk= Subject key identifier: 2B:38:02:2E:71:D5:7C:BF:E5:76:7B:6B:7D:F4:87:8F:70:22:5E:D9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED5EA142943AD604BB1142C40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b29a6df9-cb35-323e-8a11-2c00f89c051c.roa Signing time: Fri 14 Aug 2026 15:47:20 +0000 ROA not before: Fri 14 Aug 2026 15:47:20 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 328840 IP address blocks: 38.109.102.0/24 maxlen: 24 38.110.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:ea:14:29:43:ad:60:4b:b1:14:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 14 15:47:20 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4272e5c3-84cc-48d0-a159-840983ba7dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:11:63:64:07:69:a7:86:59:12:c9:3a:24: 31:8a:b2:44:8d:e0:bb:ad:e8:2c:06:46:5e:cc:e6: a7:76:f3:32:12:b7:12:c9:bc:7b:d7:50:23:8f:fa: d6:70:ce:cb:a3:c4:d8:93:0c:e5:46:e8:67:fb:91: d6:a1:52:89:89:a3:74:38:68:8d:4a:03:e7:75:72: ba:df:c1:60:cb:87:97:f1:a6:ea:e6:80:86:83:0c: a6:2c:74:a4:15:b4:18:5f:10:aa:bc:a6:ff:d1:b3: 92:49:11:2c:be:8f:09:2d:ab:f9:38:7c:67:35:39: db:30:90:0c:1b:7b:4d:46:e2:82:68:54:2a:97:fc: 87:3e:07:a5:db:42:2f:1b:d5:dc:a6:cc:69:42:a5: ad:8f:27:99:75:15:62:41:f1:20:35:35:15:b0:b7: 95:25:52:39:57:58:c6:fb:11:d6:bc:ca:77:5e:52: 05:f1:f4:9b:39:9d:2a:9d:3f:1d:8f:43:1b:42:b1: f3:e1:d2:7c:1a:e6:f2:cc:68:31:51:26:18:4a:23: 2c:fa:b7:2b:f9:ac:cc:39:d6:b6:32:03:a7:99:7e: da:87:3d:a5:d6:83:da:57:e5:0f:fc:44:c8:59:c0: ba:c3:24:d3:2e:b7:01:57:0b:1b:22:59:fb:c5:32: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:38:02:2E:71:D5:7C:BF:E5:76:7B:6B:7D:F4:87:8F:70:22:5E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b29a6df9-cb35-323e-8a11-2c00f89c051c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.109.102.0/24 38.110.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:39:e5:87:18:29:d8:2d:ff:5c:33:67:15:19:79:a0:44:f4: 7d:1f:f2:d1:b1:ae:99:4d:de:ec:1a:32:61:56:cb:e9:66:6a: c6:00:cf:68:cb:4a:ae:63:2d:4b:72:49:92:a4:6b:63:19:4c: ac:22:70:92:67:5f:9d:76:18:a6:47:69:06:8a:f9:18:05:3e: 4a:ea:18:bf:7b:7c:6f:40:61:a7:5f:21:68:c6:e6:d1:e7:50: af:75:a8:0d:2e:80:4d:83:6b:a6:70:8f:34:50:17:1c:54:94: fc:50:be:33:b1:f6:c9:38:d2:0f:1f:27:19:e2:d8:cf:48:d1: 46:57:98:9c:ae:ba:b3:79:29:e9:12:82:e6:98:36:35:d8:ac: 49:06:d5:10:1d:d5:e1:65:10:d0:5f:c6:dc:58:71:2c:02:43: 41:46:5c:63:35:79:d1:22:c5:13:d2:5f:10:03:58:7d:ef:c0: 5c:1a:c3:5a:c5:39:82:1f:52:97:fc:00:5b:af:aa:33:cb:35: 5d:a2:37:fa:41:d2:22:39:81:24:81:88:06:2c:91:45:b1:e2: 37:83:0a:7c:d2:d9:28:47:38:ec:29:6d:bb:2c:29:4a:cf:7f: 8b:ab:83:70:14:8c:90:01:af:a6:a8:e3:07:e7:17:3c:7b:bd: fa:dc:58:d1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7V6hQpQ61gS7EULEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxNDE1NDcyMFoXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDI3MmU1YzMtODRjYy00OGQwLWExNTktODQwOTgzYmE3ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5kRY2QHaaeGWRLJOiQxirJEjeC7regsBkZe zOandvMyErcSybx711Ajj/rWcM7Lo8TYkwzlRuhn+5HWoVKJiaN0OGiNSgPndXK6 38Fgy4eX8abq5oCGgwymLHSkFbQYXxCqvKb/0bOSSREsvo8JLav5OHxnNTnbMJAM G3tNRuKCaFQql/yHPgel20IvG9XcpsxpQqWtjyeZdRViQfEgNTUVsLeVJVI5V1jG +xHWvMp3XlIF8fSbOZ0qnT8dj0MbQrHz4dJ8GubyzGgxUSYYSiMs+rcr+azMOda2 MgOnmX7ahz2l1oPaV+UP/ETIWcC6wyTTLrcBVwsbIln7xTJJyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCs4Ai5x1Xy/5XZ7a330h49wIl7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjI5YTZkZjktY2IzNS0z MjNlLThhMTEtMmMwMGY4OWMwNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJm1mAwQA Jm57MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGg55YcYKdgt/1wzZxUZeaBE9H0f8tGxrplN3uwaMmFWy+lm asYAz2jLSq5jLUtySZKka2MZTKwicJJnX512GKZHaQaK+RgFPkrqGL97fG9AYadf IWjG5tHnUK91qA0ugE2Da6ZwjzRQFxxUlPxQvjOx9sk40g8fJxni2M9I0UZXmJyu urN5KekSguaYNjXYrEkG1RAd1eFlENBfxtxYcSwCQ0FGXGM1edEixRPSXxADWH3v wFwaw1rFOYIfUpf8AFuvqjPLNV2iN/pB0iI5gSSBiAYskUWx4jeDCnzS2ShHOOwp bbssKUrPf4urg3AUjJABr6ao4wfnFzx7vfrcWNE= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:18 2026 by rpki-client