$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa File: d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa (raw, json) Hash identifier: 8CxyAJAb7Fj+Q8PE0sMShOkCzJe3ZsjwigBo76ktFpw= Subject key identifier: A4:73:E3:FE:4D:B7:DF:47:21:9E:F5:39:6E:4B:B1:33:DF:77:76:67 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF2E762E547F8113D30E8CDC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 273595 IP address blocks: 38.3.164.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:62:e5:47:f8:11:3d:30:e8:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=060de7c8-a135-4a72-baf9-e4a5d289f1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:59:ad:b9:86:c4:51:60:31:5e:f3:bc:52: 03:55:9c:60:07:ed:82:9c:da:70:6a:8a:80:c3:a9: bd:46:11:25:d2:2f:8c:30:17:a0:34:7c:78:ab:10: 5a:dc:83:a4:23:c7:5a:98:c9:79:88:02:b0:1f:18: 2a:4f:a0:68:e1:62:4a:d9:d0:de:aa:f4:5d:54:b3: 7e:90:5b:d0:29:ea:5d:e2:56:35:e3:07:5f:98:79: 1d:df:28:5c:9c:26:2f:51:aa:25:23:23:eb:05:a9: ed:61:bb:d6:99:ea:16:bd:de:76:4a:a7:d9:b0:95: 52:70:0c:6e:6d:32:85:41:02:30:a5:44:6e:d1:d4: cd:5b:2c:da:b6:5e:79:5f:47:77:02:1b:d8:78:a8: cb:2e:03:89:0a:45:66:3b:64:ee:aa:9f:ec:7e:a1: 2c:50:1d:e8:ee:6f:87:2a:1d:a9:0b:0d:35:92:f7: d7:06:f8:8c:51:a0:93:5f:a0:fe:9d:da:84:15:69: 43:db:d3:a2:fa:bf:a4:dc:8f:99:c4:8a:9e:f7:ac: b8:6b:e1:9a:48:e2:c5:3d:69:ed:1c:45:c1:51:5c: e6:23:63:83:ab:8b:51:70:9d:05:da:33:2c:c8:6d: 1d:fe:b1:b6:ce:da:36:5f:d4:70:e9:23:18:0e:62: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:73:E3:FE:4D:B7:DF:47:21:9E:F5:39:6E:4B:B1:33:DF:77:76:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b8:f5:94:d8:fe:e3:25:26:e6:80:e2:c6:b2:41:11:15:9b: e5:a3:17:d8:6b:82:e8:83:f1:79:e1:20:0e:97:51:09:63:33: ef:30:9f:e0:7f:ac:7f:9a:0f:12:a1:6c:ee:c6:0f:d0:6f:1d: 97:46:05:c2:d3:6a:4f:02:52:c6:31:ef:bc:49:9a:55:be:60: 1e:7a:07:d9:a8:22:c2:9d:95:03:3b:0f:a0:1a:94:3b:50:ad: f6:a2:09:1e:18:54:ea:f5:77:ab:ae:35:c6:a5:3c:75:c2:25: e2:e0:04:7f:7a:06:5b:e2:f6:51:8e:97:bd:f3:6a:6f:1d:e9: 77:5c:59:07:d9:ea:5c:ca:e6:6e:a2:97:0f:e5:30:8e:6a:60: ca:c6:09:e2:7f:e5:d4:98:29:9a:98:93:14:c3:8f:47:ef:b6: de:04:83:db:c4:7e:c0:5e:d1:9e:a8:03:36:19:7a:99:7a:b0: 97:aa:7a:98:30:33:19:a5:74:c6:83:b2:f3:be:de:49:d0:56: aa:d9:e3:b2:57:fe:51:92:98:79:6f:17:5a:20:92:58:34:f3: 73:ec:fa:0e:48:30:30:fb:be:6d:dc:77:23:70:41:dd:5a:ce: 4e:f3:f9:89:ff:74:30:92:0b:1e:2c:e1:1c:e3:0d:e9:03:72: d8:76:79:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52LlR/gRPTDozcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MDYwZGU3YzgtYTEzNS00YTcyLWJhZjktZTRhNWQyODlmMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws5ZrbmGxFFgMV7zvFIDVZxgB+2CnNpwaoqA w6m9RhEl0i+MMBegNHx4qxBa3IOkI8damMl5iAKwHxgqT6Bo4WJK2dDeqvRdVLN+ kFvQKepd4lY14wdfmHkd3yhcnCYvUaolIyPrBantYbvWmeoWvd52SqfZsJVScAxu bTKFQQIwpURu0dTNWyzatl55X0d3AhvYeKjLLgOJCkVmO2Tuqp/sfqEsUB3o7m+H Kh2pCw01kvfXBviMUaCTX6D+ndqEFWlD29Oi+r+k3I+ZxIqe96y4a+GaSOLFPWnt HEXBUVzmI2ODq4tRcJ0F2jMsyG0d/rG2zto2X9Rw6SMYDmK65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRz4/5Nt99HIZ71OW5LsTPfd3ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDZiY2Q1ZjYtYmVmYS0z NTE5LThhMTktZWM5MjFmYTJlZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgOkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa49ZTY/uMlJuaA4sayQREVm+WjF9hrguiD8XnhIA6XUQljM+8wn+B/ rH+aDxKhbO7GD9BvHZdGBcLTak8CUsYx77xJmlW+YB56B9moIsKdlQM7D6AalDtQ rfaiCR4YVOr1d6uuNcalPHXCJeLgBH96Blvi9lGOl73zam8d6XdcWQfZ6lzK5m6i lw/lMI5qYMrGCeJ/5dSYKZqYkxTDj0fvtt4Eg9vEfsBe0Z6oAzYZepl6sJeqepgw MxmldMaDsvO+3knQVqrZ47JX/lGSmHlvF1ogklg083Ps+g5IMDD7vm3cdyNwQd1a zk7z+Yn/dDCSCx4s4RzjDekDcth2eUs= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:13 2026 by rpki-client