$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cf440e90-75d4-3cc0-a417-71c533d65a3d.roa File: cf440e90-75d4-3cc0-a417-71c533d65a3d.roa (raw, json) Hash identifier: O6xhPGC/5M9JdzaB7EtOllPDSTGiW648vyAY0lJgfYE= Subject key identifier: 59:F4:33:3D:77:75:D5:22:86:BC:0F:AF:C9:55:53:91:87:66:25:90 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1F9242E395CB2210C1089800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cf440e90-75d4-3cc0-a417-71c533d65a3d.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 201539 IP address blocks: 38.100.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:42:e3:95:cb:22:10:c1:08:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=0a2ce739-eecd-41df-b0a9-e08a1900d429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:49:fb:07:69:ab:4f:90:91:4a:f4:04:44: 6a:62:e2:c7:cf:02:fb:3c:f9:90:5d:1c:6d:3b:05: e0:4c:cd:0a:08:b0:19:0a:b6:d2:e2:7d:ee:6a:e6: fd:cb:e4:6e:b7:54:5d:1b:54:4a:20:67:94:39:a0: a9:7d:9b:65:4d:69:43:be:c9:6e:4b:0f:9b:59:f5: de:9f:0a:a0:d5:dd:b7:93:24:cb:19:cd:1f:7f:17: 2f:b1:31:30:65:fd:68:ee:47:52:38:9d:34:1a:21: 43:f2:16:b0:de:a6:07:b2:50:6d:b5:32:12:60:0c: 89:f1:bd:f4:70:40:03:2d:a3:ad:f0:e6:43:7f:18: 7d:18:3f:7d:79:b7:35:5b:54:2c:6a:c2:7a:60:3d: 0f:33:ce:44:17:bc:b5:f5:fd:d8:18:e7:64:cd:d9: 01:56:e6:5b:32:a7:91:e1:24:1e:da:14:68:a2:62: 53:2f:d3:f3:c3:e2:43:8e:bc:ee:a3:db:6a:4f:27: 1c:b9:e7:4e:cf:a7:93:2d:96:47:d0:00:0c:04:bf: 09:aa:a9:65:d9:ad:12:b5:ac:d1:41:77:32:03:22: 64:28:bb:90:ca:5c:95:ea:47:19:2c:22:78:ab:d7: 25:cd:fa:46:6e:f8:a6:dc:ff:0b:a3:1c:e6:5e:a5: 7a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F4:33:3D:77:75:D5:22:86:BC:0F:AF:C9:55:53:91:87:66:25:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cf440e90-75d4-3cc0-a417-71c533d65a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.100.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e5:24:08:7d:3b:7c:51:f2:86:95:c2:7c:fc:d1:75:d5:3d: df:f3:5f:09:f4:81:d9:d7:18:03:f2:c4:a5:88:67:76:75:80: 86:d3:91:9d:a5:8b:7c:86:df:c1:e1:41:f0:cc:60:ac:be:09: 4f:82:a2:fe:95:0d:af:32:65:b3:12:2b:79:42:9c:58:9e:e5: 2b:83:27:f5:8c:df:69:ff:8d:7a:8e:50:27:df:bf:8c:78:d3: e9:b8:f7:5e:b7:2c:ab:eb:96:c5:89:d9:cc:55:a1:02:42:1a: 74:99:30:6a:4f:06:19:95:d3:46:75:d3:54:3d:56:a8:10:a0: 93:7e:cb:e4:12:f7:a0:29:14:91:1f:89:4c:e7:7e:f8:e7:09: bd:a3:b9:c3:8e:bd:9f:c3:c2:9f:7b:8f:b4:f3:d1:92:f4:79: 04:15:bd:c6:86:18:7d:39:8d:e7:5e:1d:26:70:6a:58:1b:7c: c0:5d:19:ef:77:18:2f:7f:ea:48:18:ac:f3:7e:4e:3f:ba:2a: 23:f3:46:15:a3:60:e2:6d:13:ac:03:16:b8:79:df:ea:a5:b4: 0d:d1:2f:a5:9d:11:cd:fb:41:50:b6:14:36:13:a5:49:8a:66: 8c:ee:9b:1c:ee:2e:e2:e4:12:6f:d0:12:ba:60:2a:e8:c7:3c: fb:7e:5b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkLjlcsiEMEImAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk MGEyY2U3MzktZWVjZC00MWRmLWIwYTktZTA4YTE5MDBkNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl5J+wdpq0+QkUr0BERqYuLHzwL7PPmQXRxt OwXgTM0KCLAZCrbS4n3uaub9y+Rut1RdG1RKIGeUOaCpfZtlTWlDvsluSw+bWfXe nwqg1d23kyTLGc0ffxcvsTEwZf1o7kdSOJ00GiFD8haw3qYHslBttTISYAyJ8b30 cEADLaOt8OZDfxh9GD99ebc1W1QsasJ6YD0PM85EF7y19f3YGOdkzdkBVuZbMqeR 4SQe2hRoomJTL9Pzw+JDjrzuo9tqTyccuedOz6eTLZZH0AAMBL8Jqqll2a0StazR QXcyAyJkKLuQylyV6kcZLCJ4q9clzfpGbvim3P8LoxzmXqV6wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn0Mz13ddUihrwPr8lVU5GHZiWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2Y0NDBlOTAtNzVkNC0z Y2MwLWE0MTctNzFjNTMzZDY1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmQXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHflJAh9O3xR8oaVwnz80XXVPd/zXwn0gdnXGAPyxKWIZ3Z1gIbTkZ2l i3yG38HhQfDMYKy+CU+Cov6VDa8yZbMSK3lCnFie5SuDJ/WM32n/jXqOUCffv4x4 0+m49163LKvrlsWJ2cxVoQJCGnSZMGpPBhmV00Z101Q9VqgQoJN+y+QS96ApFJEf iUznfvjnCb2jucOOvZ/Dwp97j7Tz0ZL0eQQVvcaGGH05jedeHSZwalgbfMBdGe93 GC9/6kgYrPN+Tj+6KiPzRhWjYOJtE6wDFrh53+qltA3RL6WdEc37QVC2FDYTpUmK ZozumxzuLuLkEm/QErpgKujHPPt+W8k= -----END CERTIFICATE-----Generated at Fri Sep 11 13:55:41 2026 by rpki-client