$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa File: b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa (raw, json) Hash identifier: yDF7ZmiAgAbYIf09tFhFvTnj8r+T7UuA/Y1Z1nJQRgY= Subject key identifier: FE:7F:B1:6D:EB:56:B9:FA:09:57:3C:BB:10:D0:80:2C:20:8F:42:E7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF1BA0808EB0637E909BAC580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa Signing time: Mon 24 Aug 2026 14:53:09 +0000 ROA not before: Mon 24 Aug 2026 14:53:09 +0000 ROA not after: Sun 22 Nov 2026 15:53:09 +0000 asID: 271832 IP address blocks: 38.3.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:ba:08:08:eb:06:37:e9:09:ba:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 24 14:53:09 2026 GMT Not After : Nov 22 15:53:09 2026 GMT Subject: CN=d15c0610-f745-4c35-80e8-f11a24f594c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:0a:d2:80:85:36:de:e3:df:56:6c:43:7e: ca:af:5b:b6:57:dd:b8:ae:31:d0:f9:78:94:56:18: 08:4a:05:26:5f:02:cd:0e:18:5f:30:72:d6:f3:44: 35:b2:97:9a:d7:7e:13:ee:87:19:1e:3a:35:3e:64: 6e:ec:34:6b:8f:3a:de:4d:10:e4:02:02:cc:cf:9b: 55:a8:4b:9c:3d:4e:13:4e:4f:ef:08:cf:68:4c:7b: 35:cd:81:8d:73:34:2c:7b:47:13:ba:c3:fd:27:11: 5d:22:32:06:d9:ee:f4:06:9e:62:6b:1e:be:91:b1: a5:31:82:7c:b8:6f:cb:c4:75:ef:bf:4f:bb:84:33: ae:ec:36:da:46:19:9f:75:7d:b6:29:56:66:2a:62: 29:9b:52:dc:58:58:ec:fc:fb:45:3b:7f:26:78:70: ee:72:ac:84:79:b6:06:69:3d:e3:94:02:66:73:ee: 44:ca:0b:77:75:0d:50:eb:d5:64:3d:9c:e2:45:07: fd:c7:68:56:97:03:5b:67:bb:01:48:0b:f0:73:e8: 23:2a:32:3f:e6:e9:2c:a2:91:c7:d8:75:fb:f9:d2: 38:15:cc:61:a5:a4:79:6f:14:3b:ba:fd:3f:37:f6: 36:b2:1e:47:a6:b6:df:2d:1a:2f:15:e7:55:64:cf: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7F:B1:6D:EB:56:B9:FA:09:57:3C:BB:10:D0:80:2C:20:8F:42:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:a4:7f:8f:53:8c:2c:c0:ac:d1:c2:af:d9:b2:5d:ed:d4:2e: be:d7:77:a8:1a:cb:76:54:5e:cf:7b:32:51:03:2a:e9:34:83: 0a:02:ab:33:d7:7e:76:a4:a6:fb:52:3d:c1:06:f6:32:12:39: 3f:ef:0c:a2:a1:73:62:66:57:02:ab:f6:a0:9e:b6:9c:0d:85: 90:d7:cf:17:15:12:dc:35:cc:6f:7e:5a:c1:9a:ae:0a:9a:d0: 45:c7:d0:aa:b5:2c:77:dd:87:73:8a:8a:51:98:f5:c0:38:1b: 1c:39:ec:6a:6d:d3:da:0b:f0:7f:45:57:07:c5:31:16:0e:bd: 67:89:42:7b:25:30:9d:31:c7:bc:b3:14:be:d2:2a:12:9d:30: 38:52:e0:8b:e0:12:cb:19:ba:34:62:1b:1d:a4:e3:5f:03:aa: f0:b6:62:4d:0f:ec:f3:58:27:f0:84:e0:e2:f0:95:d3:96:b0: 59:44:07:45:22:ff:b6:2a:45:00:d5:ea:12:bb:26:83:70:0d: 32:c4:47:67:ff:9c:f2:a1:e6:99:a2:75:17:67:c2:47:02:7a: 3f:00:78:1e:40:df:fd:0b:a6:ae:d8:4d:46:1c:17:41:cc:35: b8:b3:d3:0c:f1:70:e9:40:34:a5:24:2e:8d:7e:e6:31:df:f1: 7b:64:e3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xuggI6wY36Qm6xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNDE0NTMwOVoXDTI2MTEyMjE1NTMwOVowLzEtMCsGA1UEAxMk ZDE1YzA2MTAtZjc0NS00YzM1LTgwZTgtZjExYTI0ZjU5NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzAK0oCFNt7j31ZsQ37Kr1u2V924rjHQ+XiU VhgISgUmXwLNDhhfMHLW80Q1spea134T7ocZHjo1PmRu7DRrjzreTRDkAgLMz5tV qEucPU4TTk/vCM9oTHs1zYGNczQse0cTusP9JxFdIjIG2e70Bp5iax6+kbGlMYJ8 uG/LxHXvv0+7hDOu7DbaRhmfdX22KVZmKmIpm1LcWFjs/PtFO38meHDucqyEebYG aT3jlAJmc+5Eygt3dQ1Q69VkPZziRQf9x2hWlwNbZ7sBSAvwc+gjKjI/5uksopHH 2HX7+dI4FcxhpaR5bxQ7uv0/N/Y2sh5HprbfLRovFedVZM9zYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5/sW3rVrn6CVc8uxDQgCwgj0LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjk5ZTYzNzUtOTE3Zi0z MDQxLWI0MmMtMzNmNWUwZDVkMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMikf49TjCzArNHCr9myXe3ULr7Xd6gay3ZUXs97MlEDKuk0gwoCqzPX fnakpvtSPcEG9jISOT/vDKKhc2JmVwKr9qCetpwNhZDXzxcVEtw1zG9+WsGargqa 0EXH0Kq1LHfdh3OKilGY9cA4Gxw57Gpt09oL8H9FVwfFMRYOvWeJQnslMJ0xx7yz FL7SKhKdMDhS4IvgEssZujRiGx2k418DqvC2Yk0P7PNYJ/CE4OLwldOWsFlEB0Ui /7YqRQDV6hK7JoNwDTLER2f/nPKh5pmidRdnwkcCej8AeB5A3/0Lpq7YTUYcF0HM Nbiz0wzxcOlANKUkLo1+5jHf8Xtk49k= -----END CERTIFICATE-----Generated at Fri Sep 11 13:46:27 2026 by rpki-client