$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba267c52-61cc-3149-a67a-c752a84a5a82.roa File: ba267c52-61cc-3149-a67a-c752a84a5a82.roa (raw, json) Hash identifier: IPEi6MdikmtxkghfJ/QG48VapTRO8gKyExAf/7HwQk8= Subject key identifier: 20:5F:E3:18:8C:11:DA:D3:86:9C:25:91:0D:42:69:F1:74:CF:8F:BB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF456959175FCF90EF4B84100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba267c52-61cc-3149-a67a-c752a84a5a82.roa Signing time: Tue 25 Aug 2026 13:20:12 +0000 ROA not before: Tue 25 Aug 2026 13:20:12 +0000 ROA not after: Mon 23 Nov 2026 14:20:12 +0000 asID: 7018 IP address blocks: 38.114.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:56:95:91:75:fc:f9:0e:f4:b8:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 25 13:20:12 2026 GMT Not After : Nov 23 14:20:12 2026 GMT Subject: CN=9ebbeae2-4341-4e88-85de-5b83441979f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:e1:ee:17:42:c7:18:81:2b:4e:89:64:f8: d3:62:60:a6:28:30:f3:1d:f7:33:fa:16:d5:ab:fd: fd:58:95:e6:2f:2c:0e:2a:4e:f8:58:8d:31:25:44: d3:0d:99:a3:f9:3b:32:a4:5b:43:af:28:af:48:89: fa:27:e7:d4:42:4a:3a:01:3b:d6:d5:56:0f:ea:c4: 8a:d3:ee:85:a8:89:e1:7d:d9:5e:c9:b1:de:88:07: fc:d1:34:53:ee:67:cb:02:a4:13:ce:53:ff:bd:0e: f8:ec:35:21:9a:62:4e:ac:a7:24:31:eb:bd:06:8f: 88:2c:b3:c9:af:82:00:74:0b:75:63:f4:ce:76:52: 3d:0c:93:45:2d:8b:77:0d:5f:6d:e4:68:c8:80:ac: 18:5f:22:23:5e:cd:a2:0d:bd:8a:3a:ee:b4:25:39: bc:dc:bc:74:e6:92:08:16:37:40:4f:cb:68:8b:b6: 55:b5:c1:39:55:6d:fb:96:35:77:ae:36:37:3a:93: f1:28:54:88:f3:19:af:04:40:58:ca:84:79:6a:74: fa:f8:b9:62:1a:82:19:e7:e5:7d:53:48:ae:3c:5f: 58:39:6c:96:e6:a4:28:f5:64:4f:32:1d:97:78:2f: a4:b3:51:56:f7:b5:91:df:86:8c:67:c0:53:e4:5a: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:E3:18:8C:11:DA:D3:86:9C:25:91:0D:42:69:F1:74:CF:8F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba267c52-61cc-3149-a67a-c752a84a5a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.114.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:85:bc:3a:23:b4:67:94:27:ce:03:11:b6:2f:93:bb:2e:00: fc:fb:d4:d8:46:07:39:fe:a2:24:69:18:92:1e:35:61:79:d7: 87:77:e3:f9:e9:d3:13:05:7e:c5:20:6a:b5:5d:18:28:93:d6: 2d:cd:9e:60:29:8c:54:ef:d6:ed:4a:78:c8:63:f4:4e:d9:1a: 1a:ee:e9:73:39:1c:30:20:6e:e6:bd:0f:84:ba:92:93:84:af: 23:4b:d7:1a:14:46:c8:86:8b:f7:48:d5:e6:e5:de:4b:a5:27: 0d:c8:54:e7:19:98:ae:1d:ac:f4:06:d9:17:71:bb:b7:24:a6: 11:fa:2b:ef:6d:0a:0b:8d:84:c2:1e:45:71:ed:fc:76:72:c5: 32:3f:8c:23:73:b1:dd:af:35:56:a4:1a:b6:d8:a0:2b:e7:10: a4:63:6a:28:93:af:81:3e:a1:95:e1:5f:51:02:d2:9b:1e:b2: 08:81:5e:a5:e4:20:66:bb:65:a6:69:8a:a7:32:0d:b0:02:80: bc:a5:a5:30:a2:96:0a:6c:d6:6d:fe:19:50:32:fb:a4:9e:e3: 20:43:78:76:a3:72:e1:d6:63:32:6c:ed:ec:be:f3:54:8c:12: 67:0e:16:e2:17:a5:0e:7a:c7:ff:a1:9d:61:1f:d4:c3:9d:91: fd:7d:6b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70VpWRdfz5DvS4QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNTEzMjAxMloXDTI2MTEyMzE0MjAxMlowLzEtMCsGA1UEAxMk OWViYmVhZTItNDM0MS00ZTg4LTg1ZGUtNWI4MzQ0MTk3OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDHh7hdCxxiBK06JZPjTYmCmKDDzHfcz+hbV q/39WJXmLywOKk74WI0xJUTTDZmj+TsypFtDryivSIn6J+fUQko6ATvW1VYP6sSK 0+6FqInhfdleybHeiAf80TRT7mfLAqQTzlP/vQ747DUhmmJOrKckMeu9Bo+ILLPJ r4IAdAt1Y/TOdlI9DJNFLYt3DV9t5GjIgKwYXyIjXs2iDb2KOu60JTm83Lx05pII FjdAT8toi7ZVtcE5VW37ljV3rjY3OpPxKFSI8xmvBEBYyoR5anT6+LliGoIZ5+V9 U0iuPF9YOWyW5qQo9WRPMh2XeC+ks1FW97WR34aMZ8BT5FoB+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBf4xiMEdrThpwlkQ1CafF0z4+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmEyNjdjNTItNjFjYy0z MTQ5LWE2N2EtYzc1MmE4NGE1YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnLaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWFvDojtGeUJ84DEbYvk7suAPz71NhGBzn+oiRpGJIeNWF514d34/np 0xMFfsUgarVdGCiT1i3NnmApjFTv1u1KeMhj9E7ZGhru6XM5HDAgbua9D4S6kpOE ryNL1xoURsiGi/dI1ebl3kulJw3IVOcZmK4drPQG2Rdxu7ckphH6K+9tCguNhMIe RXHt/HZyxTI/jCNzsd2vNVakGrbYoCvnEKRjaiiTr4E+oZXhX1EC0psesgiBXqXk IGa7ZaZpiqcyDbACgLylpTCilgps1m3+GVAy+6Se4yBDeHajcuHWYzJs7ey+81SM EmcOFuIXpQ56x/+hnWEf1MOdkf19a1Y= -----END CERTIFICATE-----Generated at Tue Sep 1 03:01:12 2026 by rpki-client