$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2265779-2ff6-39db-9d24-1dd6556a9738.roa File: c2265779-2ff6-39db-9d24-1dd6556a9738.roa (raw, json) Hash identifier: Lbv15aI5MWgSpQ4ltSccWTRjhPbdkiHmb7gsZx8wEz0= Subject key identifier: 2B:EA:7D:E4:D3:C7:86:42:4C:DF:72:3F:55:5B:87:20:B5:F4:65:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE926A272EA18CB48E0B76080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2265779-2ff6-39db-9d24-1dd6556a9738.roa Signing time: Fri 21 Aug 2026 13:09:42 +0000 ROA not before: Fri 21 Aug 2026 13:09:42 +0000 ROA not after: Thu 19 Nov 2026 14:09:42 +0000 asID: 327786 IP address blocks: 38.43.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:26:a2:72:ea:18:cb:48:e0:b7:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 21 13:09:42 2026 GMT Not After : Nov 19 14:09:42 2026 GMT Subject: CN=ad2e1d7c-273d-4f09-a66e-527f20977fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:26:f4:36:99:a4:8c:b9:fc:c0:38:d3:9c: e7:aa:f4:9b:39:96:77:f9:41:16:d9:b7:69:09:27: 35:51:0d:ed:07:52:44:aa:59:08:2f:6a:9e:9b:1e: f6:4f:fb:c8:d4:42:37:8c:86:52:0e:91:11:a3:48: 52:b9:5a:89:c4:dc:b1:f4:00:65:b0:b0:da:b4:de: a9:c8:48:42:ba:60:00:a9:21:8f:88:77:2d:1c:6a: 60:3b:15:75:03:30:61:23:d4:e0:22:f2:62:92:b3: 5d:7b:29:73:77:11:90:ec:75:02:22:8d:0f:fd:06: 0f:2d:95:d6:c4:60:1a:c0:ce:f2:78:48:b2:d3:c5: 53:cb:e4:f8:12:6b:f2:b1:83:29:08:74:ca:93:5e: 13:3b:19:03:17:f4:25:53:ff:b8:83:9d:b4:ed:ca: 8f:18:d3:75:87:02:56:1f:42:5f:e3:0d:46:3c:92: 13:c9:fe:94:81:39:8e:1e:f3:90:8e:91:48:09:92: b7:87:d4:09:83:7c:2a:50:d6:f6:d5:d4:aa:6b:b3: f7:23:c8:a0:bb:b4:19:0a:1c:fd:2d:b7:53:89:14: fd:89:e4:31:5b:c4:ab:62:15:7e:8d:3c:8e:3a:69: 9e:d9:3d:02:aa:60:a9:31:9a:9c:0f:bd:2f:35:df: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EA:7D:E4:D3:C7:86:42:4C:DF:72:3F:55:5B:87:20:B5:F4:65:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2265779-2ff6-39db-9d24-1dd6556a9738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:00:fc:05:cb:46:06:b8:23:d2:46:31:e4:6f:d5:d5:c8:bc: 46:b8:64:b9:0a:a3:ec:55:63:20:93:55:12:73:04:d0:c4:2e: 65:a3:50:80:ad:e2:9c:3b:ba:04:ac:98:68:77:fd:22:2f:f6: 66:24:9f:16:37:f4:2e:ed:71:29:99:5d:7a:4f:50:c5:f7:03: 6a:59:35:8a:e2:87:9a:ca:04:47:2e:13:d3:cc:ed:2e:2f:ba: ab:e0:a9:9b:8b:89:0c:7e:c0:c2:8e:bd:d4:a6:72:cf:96:87: 82:da:a1:25:f0:4e:58:3a:92:a9:a0:ad:ab:ce:ed:d5:6a:fe: 94:e2:19:59:25:d5:97:5e:d0:4b:a1:33:05:7f:05:04:6f:44: c5:9f:c5:59:de:90:9e:5f:01:1d:d0:2d:20:45:1b:12:38:9b: 8a:cc:0e:9b:07:ff:ae:95:f2:1e:ae:d7:68:49:94:58:3d:cb: 43:e5:a8:a7:ca:c7:9a:a9:cf:04:e0:a8:e4:9e:26:13:bc:f8: e9:29:85:b6:63:9e:07:3c:a5:b7:11:3d:27:81:aa:24:20:8f: 48:bc:38:3d:65:bf:2a:41:ab:e1:bc:33:75:df:1a:0f:7a:d4: 19:31:91:ca:e9:3d:65:3c:e0:20:6b:d2:ed:63:63:f5:3e:6b: d0:66:6f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pJqJy6hjLSOC3YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMTEzMDk0MloXDTI2MTExOTE0MDk0MlowLzEtMCsGA1UEAxMk YWQyZTFkN2MtMjczZC00ZjA5LWE2NmUtNTI3ZjIwOTc3ZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/km9DaZpIy5/MA405znqvSbOZZ3+UEW2bdp CSc1UQ3tB1JEqlkIL2qemx72T/vI1EI3jIZSDpERo0hSuVqJxNyx9ABlsLDatN6p yEhCumAAqSGPiHctHGpgOxV1AzBhI9TgIvJikrNdeylzdxGQ7HUCIo0P/QYPLZXW xGAawM7yeEiy08VTy+T4EmvysYMpCHTKk14TOxkDF/QlU/+4g5207cqPGNN1hwJW H0Jf4w1GPJITyf6UgTmOHvOQjpFICZK3h9QJg3wqUNb21dSqa7P3I8igu7QZChz9 LbdTiRT9ieQxW8SrYhV+jTyOOmme2T0CqmCpMZqcD70vNd+nlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvqfeTTx4ZCTN9yP1VbhyC19GUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzIyNjU3NzktMmZmNi0z OWRiLTlkMjQtMWRkNjU1NmE5NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJitIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgA/AXLRga4I9JGMeRv1dXIvEa4ZLkKo+xVYyCTVRJzBNDELmWjUICt 4pw7ugSsmGh3/SIv9mYknxY39C7tcSmZXXpPUMX3A2pZNYrih5rKBEcuE9PM7S4v uqvgqZuLiQx+wMKOvdSmcs+Wh4LaoSXwTlg6kqmgravO7dVq/pTiGVkl1Zde0Euh MwV/BQRvRMWfxVnekJ5fAR3QLSBFGxI4m4rMDpsH/66V8h6u12hJlFg9y0PlqKfK x5qpzwTgqOSeJhO8+OkphbZjngc8pbcRPSeBqiQgj0i8OD1lvypBq+G8M3XfGg96 1BkxkcrpPWU84CBr0u1jY/U+a9Bmb1U= -----END CERTIFICATE-----Generated at Fri Sep 11 13:47:15 2026 by rpki-client