$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cf80639e-6801-3fd0-8bcd-cc74b2289f8f.roa File: cf80639e-6801-3fd0-8bcd-cc74b2289f8f.roa (raw, json) Hash identifier: A6okb/CkJyU2A7tZFu9z7KbGnBbUl515pHffOFF6bxk= Subject key identifier: 8D:07:40:DC:BC:4E:7C:85:79:90:32:AB:43:0A:F4:C8:05:FB:5C:3E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA78F11AA38AE0D754D16F480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cf80639e-6801-3fd0-8bcd-cc74b2289f8f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 271907 IP address blocks: 38.20.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:11:aa:38:ae:0d:75:4d:16:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1d3042a6-e635-45df-95c2-f31158026e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:46:1f:98:b3:9b:6f:ee:39:57:6c:4c:6e: 31:04:3c:68:d7:75:fa:2f:a3:b4:ba:fe:f9:bd:fa: 49:25:30:a1:a0:57:e1:fc:2a:30:09:d1:b6:1f:7b: 90:a7:2b:c2:6f:82:2f:51:85:dc:78:26:4c:aa:77: 08:cd:08:59:76:4a:95:80:b7:18:e3:c6:84:c2:70: 98:c2:2b:66:35:10:07:d8:ca:e8:5f:bb:40:66:f8: c9:88:13:c0:42:96:b1:97:02:e1:45:04:f6:5c:eb: 31:4d:5e:de:f1:2a:b2:af:dc:86:cd:c7:a4:bb:65: 94:7b:bc:b1:0e:dd:31:aa:bc:3b:75:5c:39:f8:38: 7e:be:ee:05:14:bd:45:ba:d9:59:b2:f7:9e:67:66: 65:c0:0b:61:a4:49:2f:78:a2:99:ef:b8:e4:46:7d: eb:77:1e:20:ae:2d:47:a0:c5:cb:c2:57:68:dd:25: fe:12:45:40:ff:fe:df:05:79:b2:01:15:44:84:61: be:bb:2e:ad:58:f1:6b:a2:57:af:3c:fe:5a:d8:99: d3:65:23:43:de:7b:9a:c7:60:c8:2d:31:bb:70:59: 10:2b:a7:a8:cc:53:0a:c2:13:e3:74:96:cc:a9:88: d9:b1:d6:be:0f:6b:8b:61:a7:04:b7:f9:4a:cf:e8: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:07:40:DC:BC:4E:7C:85:79:90:32:AB:43:0A:F4:C8:05:FB:5C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cf80639e-6801-3fd0-8bcd-cc74b2289f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:35:be:c2:59:46:09:4e:cb:bf:24:a3:63:ec:e8:20:62:01: 68:20:24:bf:86:60:6d:96:df:67:c8:27:44:59:e0:65:1e:7d: 71:b1:5e:5d:b7:3a:eb:54:f5:65:2c:14:ee:23:5f:d7:45:2e: 99:9b:15:ac:be:1c:c8:c8:e3:39:6c:a6:1e:4d:23:f2:57:5e: 84:9d:bf:8f:67:44:9f:ea:be:28:72:c0:06:f2:85:40:f3:01: 4f:33:27:a9:68:87:06:95:28:dd:cf:c0:6f:90:38:53:67:d0: 24:cf:36:76:16:64:c3:eb:41:89:ee:be:9c:cc:f6:cd:2b:cb: 43:3f:c8:76:d9:76:57:46:f7:e4:09:fb:ca:05:eb:8b:35:b6: db:12:03:9a:54:be:b9:21:bb:82:41:dc:5c:0e:4c:d2:64:15: b4:2a:bd:6c:21:60:00:a8:93:dc:68:29:07:6f:4b:26:69:4e: 10:48:41:71:01:82:4b:20:47:c2:11:ce:0f:26:79:4d:49:7b: 47:73:48:1b:45:77:df:0d:8f:05:f9:ff:e7:76:f3:b3:d4:05: c1:11:96:38:77:41:85:4b:20:9f:3c:53:d1:96:7b:99:c3:5d: 73:05:f1:53:ac:6e:13:40:b9:41:0e:15:10:a2:7e:a1:03:19: 25:c6:66:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njxGqOK4NdU0W9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWQzMDQyYTYtZTYzNS00NWRmLTk1YzItZjMxMTU4MDI2ZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzptGH5izm2/uOVdsTG4xBDxo13X6L6O0uv75 vfpJJTChoFfh/CowCdG2H3uQpyvCb4IvUYXceCZMqncIzQhZdkqVgLcY48aEwnCY witmNRAH2MroX7tAZvjJiBPAQpaxlwLhRQT2XOsxTV7e8Sqyr9yGzceku2WUe7yx Dt0xqrw7dVw5+Dh+vu4FFL1FutlZsveeZ2ZlwAthpEkveKKZ77jkRn3rdx4gri1H oMXLwldo3SX+EkVA//7fBXmyARVEhGG+uy6tWPFrolevPP5a2JnTZSND3nuax2DI LTG7cFkQK6eozFMKwhPjdJbMqYjZsda+D2uLYacEt/lKz+ix2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0HQNy8TnyFeZAyq0MK9MgF+1w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2Y4MDYzOWUtNjgwMS0z ZmQwLThiY2QtY2M3NGIyMjg5ZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhTlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk1vsJZRglOy78ko2Ps6CBiAWggJL+GYG2W32fIJ0RZ4GUefXGxXl23 OutU9WUsFO4jX9dFLpmbFay+HMjI4zlsph5NI/JXXoSdv49nRJ/qvihywAbyhUDz AU8zJ6lohwaVKN3PwG+QOFNn0CTPNnYWZMPrQYnuvpzM9s0ry0M/yHbZdldG9+QJ +8oF64s1ttsSA5pUvrkhu4JB3FwOTNJkFbQqvWwhYACok9xoKQdvSyZpThBIQXEB gksgR8IRzg8meU1Je0dzSBtFd98NjwX5/+d287PUBcERljh3QYVLIJ88U9GWe5nD XXMF8VOsbhNAuUEOFRCifqEDGSXGZmg= -----END CERTIFICATE-----Generated at Fri Sep 11 14:27:28 2026 by rpki-client