$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa File: c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa (raw, json) Hash identifier: dsZ9ah9JjgKFnXSvbEur+2L5GKlBcAra9VbCoVw/zpk= Subject key identifier: 88:53:EF:0E:2E:51:30:36:33:03:97:97:0A:2D:4C:B7:E6:FC:C5:B3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA797CC5A96767A55C4DA9A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 38.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:cc:5a:96:76:7a:55:c4:da:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d37bddea-7496-40f6-8e5b-486222e885b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:be:d1:96:57:1b:a2:5c:f5:c4:c3:ba:d2: ec:8a:2e:96:47:96:8c:e9:fd:ee:3f:e8:15:bb:a3: 05:17:98:22:26:a9:83:4a:5a:1d:40:d8:e4:b5:c9: d3:a2:d7:18:06:c3:b6:db:24:33:5e:ee:24:84:43: be:6f:52:02:e5:9a:a0:e5:0d:9c:d7:9f:b8:8b:ac: bf:cd:d6:aa:04:1c:7a:52:97:47:fc:c8:8e:e5:a3: d1:d4:fe:a7:9c:5d:eb:43:ae:17:4a:d8:aa:51:bd: 5b:19:66:fe:48:b9:30:59:a3:33:1e:30:3e:19:d0: a1:8a:6f:bc:81:d3:92:fd:d3:be:0a:54:17:0d:6c: a3:b3:3d:7b:7f:6b:67:f1:b4:1c:49:23:8e:48:cd: 58:66:49:40:00:e2:75:bd:27:29:9e:be:15:f1:95: 32:6f:05:9f:48:95:61:c9:d6:4c:f8:f7:04:3e:07: da:64:42:27:0a:40:3b:ac:fd:69:a3:3f:fe:91:91: 3c:47:62:2c:a2:7e:ab:b4:d3:b5:79:4a:c4:5c:b6: a5:04:fa:81:47:fb:e2:7a:df:2e:8b:4c:5f:71:29: 49:ad:7c:96:17:75:8f:43:50:60:a4:2d:a5:ba:88: 42:68:db:e1:c7:b7:b2:de:35:37:2b:41:04:33:9c: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:EF:0E:2E:51:30:36:33:03:97:97:0A:2D:4C:B7:E6:FC:C5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.96.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:79:09:7b:34:a2:1c:b9:e0:56:d8:63:c1:3b:53:69:41:e4: 2c:e3:5f:d7:65:b5:46:7c:ce:9e:b5:a1:8c:3c:da:f1:8f:55: fe:54:0c:d4:f1:24:35:1e:96:11:41:13:98:e5:80:e4:d2:09: 44:6c:9d:4f:e3:27:b9:f6:08:66:29:a0:aa:d4:fe:27:ff:1b: 58:05:77:9f:00:3f:54:aa:a4:31:0e:11:1d:8e:91:20:3d:40: 3f:33:c3:c5:85:13:22:5b:c5:45:8e:11:ee:14:20:37:5c:71: e9:73:1e:33:84:41:d1:12:15:fc:79:dc:b1:e9:a6:46:9d:91: e2:57:a2:c4:3e:ae:6a:63:c3:32:9a:74:7d:f0:5f:2e:03:61: cb:d4:aa:7d:f0:dd:78:0b:06:ff:51:6e:25:23:65:fa:05:7c: c4:60:4c:b2:17:f2:b0:aa:a7:6d:27:fb:d0:31:ba:56:28:12: 9b:a6:8e:04:df:1c:8f:a6:80:bb:73:8b:b8:c2:e7:f3:95:26: aa:79:ee:e7:79:73:88:00:f4:d8:07:2b:4b:ec:72:74:ba:e7: 07:14:49:5f:aa:50:56:ef:cc:23:1d:ff:04:9b:00:56:23:f8: 7c:91:67:2e:04:5b:16:56:98:44:a9:e8:28:12:c8:64:c7:b9: a8:65:d4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl8xalnZ6VcTamoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDM3YmRkZWEtNzQ5Ni00MGY2LThlNWItNDg2MjIyZTg4NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZy+0ZZXG6Jc9cTDutLsii6WR5aM6f3uP+gV u6MFF5giJqmDSlodQNjktcnTotcYBsO22yQzXu4khEO+b1IC5Zqg5Q2c15+4i6y/ zdaqBBx6UpdH/MiO5aPR1P6nnF3rQ64XStiqUb1bGWb+SLkwWaMzHjA+GdChim+8 gdOS/dO+ClQXDWyjsz17f2tn8bQcSSOOSM1YZklAAOJ1vScpnr4V8ZUybwWfSJVh ydZM+PcEPgfaZEInCkA7rP1poz/+kZE8R2Ison6rtNO1eUrEXLalBPqBR/viet8u i0xfcSlJrXyWF3WPQ1BgpC2luohCaNvhx7ey3jU3K0EEM5zhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhT7w4uUTA2MwOXlwotTLfm/MWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzVjZGRhMWEtNzNhMC0z ZWI3LWI4N2ItZTg5NzgwZWFhNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF5CXs0ohy54FbYY8E7U2lB5CzjX9dltUZ8zp61oYw82vGPVf5UDNTx JDUelhFBE5jlgOTSCURsnU/jJ7n2CGYpoKrU/if/G1gFd58AP1SqpDEOER2OkSA9 QD8zw8WFEyJbxUWOEe4UIDdccelzHjOEQdESFfx53LHppkadkeJXosQ+rmpjwzKa dH3wXy4DYcvUqn3w3XgLBv9RbiUjZfoFfMRgTLIX8rCqp20n+9AxulYoEpumjgTf HI+mgLtzi7jC5/OVJqp57ud5c4gA9NgHK0vscnS65wcUSV+qUFbvzCMd/wSbAFYj +HyRZy4EWxZWmESp6CgSyGTHuahl1Eo= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:05 2026 by rpki-client