$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d393acfd-1a02-3ec6-9f10-e199c594f79e.roa File: d393acfd-1a02-3ec6-9f10-e199c594f79e.roa (raw, json) Hash identifier: gPYvmPnDTEUkvRDjCuR/QyqtrUiFe+MPXcVC2Yv01dc= Subject key identifier: 65:E8:33:15:D4:BE:5F:5E:38:B3:0D:1D:BF:D5:1E:24:5D:6A:C7:F3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA791B71D8F66D2FAABAC34C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d393acfd-1a02-3ec6-9f10-e199c594f79e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394303 IP address blocks: 38.70.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:b7:1d:8f:66:d2:fa:ab:ac:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=22b999fa-0d1c-4fa7-b179-8ebf62d15347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:2b:8d:be:24:5c:df:bc:5b:e4:46:03:a9: 6a:ea:01:28:c9:cf:4c:ac:e4:eb:d4:03:91:c9:61: 4c:66:26:e0:01:51:04:cd:65:15:a5:52:cf:ab:7a: 0b:f5:57:da:33:ac:55:f9:2e:26:c0:ce:ac:fa:25: f8:9e:af:08:6f:73:32:cf:28:9a:96:6d:9e:21:36: 38:30:24:dd:04:c3:8b:c6:81:6b:71:cf:7e:33:84: 0c:bd:af:48:d5:2e:08:55:1a:9f:3b:3e:1f:a1:10: 77:83:d6:ce:b4:ed:5f:c7:01:65:38:34:0e:71:54: a1:9c:dc:48:72:d2:28:24:43:4d:37:be:a3:67:39: e8:f6:96:d0:7f:7c:3c:16:8d:27:f6:84:4c:b1:1c: ff:7a:a0:59:40:33:d6:e6:f8:76:50:f4:30:09:d5: 92:dc:cf:c5:65:f9:cc:c1:b7:2f:e0:05:52:7b:10: ce:11:38:72:68:cf:d3:10:a6:5c:89:eb:6d:0b:6e: 4d:87:e4:bc:09:a0:d8:f6:3d:a9:58:68:34:59:c9: df:69:b9:14:d7:ac:17:c6:d4:72:dd:54:8d:4f:be: c5:10:e1:ac:2b:e4:a0:25:7a:09:d5:1c:9b:1e:de: 07:54:7c:37:3d:be:bb:7f:1d:a0:2f:90:05:3e:a0: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E8:33:15:D4:BE:5F:5E:38:B3:0D:1D:BF:D5:1E:24:5D:6A:C7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d393acfd-1a02-3ec6-9f10-e199c594f79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9b:6c:d1:b6:11:be:ac:4c:cd:3b:d1:75:81:db:5a:22:58: c6:a9:d1:f4:96:e6:7f:65:53:32:a0:39:25:5b:ac:5e:c7:31: 1c:2f:2d:9a:5c:7a:74:74:54:69:1a:b6:b3:42:df:1d:c3:2e: 20:f9:ed:d7:66:75:42:28:d3:1a:20:5b:06:73:01:35:5d:7c: bd:4d:56:db:2a:53:cd:d4:31:4c:dd:94:d1:07:84:51:3d:b3: 0a:86:68:e8:53:6d:8d:ce:c1:de:21:4a:38:c0:a1:30:19:39: e3:ef:8a:dc:5c:1d:6f:76:c0:c1:47:14:3d:7c:5a:f2:01:61: 09:10:49:39:9b:dd:5c:a4:03:f7:ed:fe:de:a3:d5:bf:4e:47: 05:51:47:58:9b:67:2a:47:cd:af:f2:46:58:62:95:84:3e:44: e7:cf:24:63:7b:07:b8:8e:0e:31:7e:f8:80:d4:61:4a:e4:0b: a8:9d:54:75:f4:51:75:05:93:7e:5f:22:d2:2c:3c:02:54:a3: 55:0c:78:3f:f3:0d:3f:14:3c:c7:35:ec:10:2c:65:ba:95:5c: fa:1a:70:34:b1:53:66:f6:79:67:20:f9:85:cf:bf:1e:ba:47: 1a:7f:52:b9:a2:cd:64:c6:d7:8e:6e:55:8a:7b:7b:89:0e:d2: a8:3f:b9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkbcdj2bS+qusNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjJiOTk5ZmEtMGQxYy00ZmE3LWIxNzktOGViZjYyZDE1MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L0rjb4kXN+8W+RGA6lq6gEoyc9MrOTr1AOR yWFMZibgAVEEzWUVpVLPq3oL9VfaM6xV+S4mwM6s+iX4nq8Ib3Myzyialm2eITY4 MCTdBMOLxoFrcc9+M4QMva9I1S4IVRqfOz4foRB3g9bOtO1fxwFlODQOcVShnNxI ctIoJENNN76jZzno9pbQf3w8Fo0n9oRMsRz/eqBZQDPW5vh2UPQwCdWS3M/FZfnM wbcv4AVSexDOEThyaM/TEKZciettC25Nh+S8CaDY9j2pWGg0WcnfabkU16wXxtRy 3VSNT77FEOGsK+SgJXoJ1RybHt4HVHw3Pb67fx2gL5AFPqCBNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXoMxXUvl9eOLMNHb/VHiRdasfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDM5M2FjZmQtMWEwMi0z ZWM2LTlmMTAtZTE5OWM1OTRmNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADubbNG2Eb6sTM070XWB21oiWMap0fSW5n9lUzKgOSVbrF7HMRwvLZpc enR0VGkatrNC3x3DLiD57ddmdUIo0xogWwZzATVdfL1NVtsqU83UMUzdlNEHhFE9 swqGaOhTbY3Owd4hSjjAoTAZOePvitxcHW92wMFHFD18WvIBYQkQSTmb3VykA/ft /t6j1b9ORwVRR1ibZypHza/yRlhilYQ+ROfPJGN7B7iODjF++IDUYUrkC6idVHX0 UXUFk35fItIsPAJUo1UMeD/zDT8UPMc17BAsZbqVXPoacDSxU2b2eWcg+YXPvx66 Rxp/UrmizWTG145uVYp7e4kO0qg/ud4= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:13 2026 by rpki-client