$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc57b9b4-6752-3c81-9eba-429580aa701e.roa File: cc57b9b4-6752-3c81-9eba-429580aa701e.roa (raw, json) Hash identifier: 9rvVgzapUNlr3RWsmtqjeYBTGyS5/tsUraKdpUgKkiU= Subject key identifier: 02:F6:81:80:E8:DB:56:58:1B:02:4E:B5:72:07:21:7B:78:21:58:8D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EBB11AB5AA1972751D5A5B5C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc57b9b4-6752-3c81-9eba-429580aa701e.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 274152 IP address blocks: 38.252.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:ab:5a:a1:97:27:51:d5:a5:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b8c503f3-dfe0-4c73-8e62-f273b4211516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:c9:23:15:b0:bf:44:81:e5:57:49:37:35: 2d:c4:64:7b:07:ad:15:c5:99:85:56:07:b7:b0:2a: 76:5c:a1:09:6f:ac:04:d7:06:ba:2c:4e:e0:e5:d9: f0:42:5a:3b:e4:14:c8:f0:22:27:33:68:1d:ca:82: 6e:dd:78:fe:73:0d:47:13:24:03:3c:42:4f:fa:a4: 16:f8:1e:c7:28:de:93:dd:4d:71:8c:67:9b:72:a8: cb:c9:ab:ab:fa:4e:d3:e0:2c:09:98:d8:89:c7:48: 72:58:75:ee:9d:47:79:4b:8c:65:47:0a:80:1a:63: 43:c8:d7:af:e7:43:99:72:cf:38:91:22:8d:86:ac: 18:d5:fc:ac:9b:ee:f2:de:bc:97:07:8b:46:6a:cc: 0e:70:30:e1:60:d9:a7:89:be:41:14:bf:23:f0:99: 9a:14:70:6a:4b:2b:34:31:a0:57:df:68:94:4b:20: e9:7b:15:ef:48:63:25:30:42:1f:40:cf:75:44:9f: 53:9c:89:68:fe:9e:48:d8:13:9b:a9:3f:91:eb:d3: 71:0d:0f:d1:0c:9b:ef:05:8f:84:51:50:8d:97:80: 5d:a5:c2:80:5d:23:90:1d:ae:96:16:f2:5c:7c:1a: fd:50:3c:dd:c4:3e:21:50:41:31:be:9a:04:40:80: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:81:80:E8:DB:56:58:1B:02:4E:B5:72:07:21:7B:78:21:58:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc57b9b4-6752-3c81-9eba-429580aa701e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:25:4e:bb:d0:f6:57:01:d2:35:c1:cf:7e:38:be:e3:da:9b: ed:49:99:03:10:73:a1:d4:b8:4f:9b:a1:6b:2e:d1:79:27:d2: f7:33:7c:ab:8c:71:a2:28:ae:dc:d6:cd:bb:8d:00:3f:51:df: e8:fa:f2:03:14:81:f8:53:aa:b4:f5:0e:0d:c1:d4:f9:b9:f2: bd:92:89:7b:de:79:3c:4a:46:32:26:77:32:62:fe:9f:8f:44: 92:14:44:ad:38:bc:59:e6:e0:9d:ca:88:38:dc:41:03:3e:46: 62:30:f3:50:38:15:8e:14:64:8c:a0:5f:58:e2:d0:88:08:b4: 7a:45:4d:5c:60:14:bc:fa:b7:40:7a:42:10:22:6e:33:0f:e8: 82:08:62:48:f4:2a:65:b3:34:4d:15:c6:28:d4:0a:f3:52:04: d0:7e:80:2a:c3:3d:8a:c6:07:dd:85:ff:1e:4e:1f:f2:e9:27: 1c:a4:ac:99:11:32:a0:bd:88:c0:96:e8:3a:59:bf:89:52:af: 2c:c7:28:b3:67:09:8f:68:43:79:50:80:f8:2b:d6:58:d6:45: c0:73:7b:2d:2f:5b:2e:4d:6b:a5:5e:35:c2:83:96:a5:38:53: d7:25:64:29:11:cf:8d:17:91:6c:05:2d:7a:e2:a6:bf:40:82: 98:15:68:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EataoZcnUdWltcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjhjNTAzZjMtZGZlMC00YzczLThlNjItZjI3M2I0MjExNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i7JIxWwv0SB5VdJNzUtxGR7B60VxZmFVge3 sCp2XKEJb6wE1wa6LE7g5dnwQlo75BTI8CInM2gdyoJu3Xj+cw1HEyQDPEJP+qQW +B7HKN6T3U1xjGebcqjLyaur+k7T4CwJmNiJx0hyWHXunUd5S4xlRwqAGmNDyNev 50OZcs84kSKNhqwY1fysm+7y3ryXB4tGaswOcDDhYNmnib5BFL8j8JmaFHBqSys0 MaBX32iUSyDpexXvSGMlMEIfQM91RJ9TnIlo/p5I2BObqT+R69NxDQ/RDJvvBY+E UVCNl4BdpcKAXSOQHa6WFvJcfBr9UDzdxD4hUEExvpoEQIB30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL2gYDo21ZYGwJOtXIHIXt4IViNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2M1N2I5YjQtNjc1Mi0z YzgxLTllYmEtNDI5NTgwYWE3MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQlTrvQ9lcB0jXBz344vuPam+1JmQMQc6HUuE+boWsu0Xkn0vczfKuM caIortzWzbuNAD9R3+j68gMUgfhTqrT1Dg3B1Pm58r2SiXveeTxKRjImdzJi/p+P RJIURK04vFnm4J3KiDjcQQM+RmIw81A4FY4UZIygX1ji0IgItHpFTVxgFLz6t0B6 QhAibjMP6IIIYkj0KmWzNE0VxijUCvNSBNB+gCrDPYrGB92F/x5OH/LpJxykrJkR MqC9iMCW6DpZv4lSryzHKLNnCY9oQ3lQgPgr1ljWRcBzey0vWy5Na6VeNcKDlqU4 U9clZCkRz40XkWwFLXripr9AgpgVaOw= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:08 2026 by rpki-client