$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da756d70-c89b-3647-9d83-a8aa7003d070.roa File: da756d70-c89b-3647-9d83-a8aa7003d070.roa (raw, json) Hash identifier: UAXrcSfu67jlIzSOg/YNLyWBBS+hXhoWNP5DRncyAlE= Subject key identifier: E8:EB:4C:C2:21:99:6D:EE:D9:B7:6A:E7:BF:D1:85:DA:9C:6B:7A:4E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0B130559D9E072C01F431EA0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da756d70-c89b-3647-9d83-a8aa7003d070.roa Signing time: Wed 02 Sep 2026 16:47:40 +0000 ROA not before: Wed 02 Sep 2026 16:47:40 +0000 ROA not after: Tue 01 Dec 2026 17:47:40 +0000 asID: 0 IP address blocks: 38.111.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:13:05:59:d9:e0:72:c0:1f:43:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 2 16:47:40 2026 GMT Not After : Dec 1 17:47:40 2026 GMT Subject: CN=fc0d644f-09a2-4ad0-982d-6e2fcc019135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:21:73:90:ba:69:28:92:44:35:f6:f6:e1: 1d:a0:2e:ca:10:f4:d4:3a:dd:fc:e3:73:ad:80:19: ae:90:99:63:94:b4:42:4d:c2:e5:30:b9:a9:cd:d9: 4d:75:70:21:0d:67:7c:e3:96:0f:8a:0f:46:39:6a: d4:cd:77:35:45:13:39:37:8b:3d:94:24:87:05:92: db:59:e9:d6:ee:eb:a5:3e:7d:0c:46:fa:f3:94:e1: 23:e0:d7:9f:4b:b4:98:a8:6c:24:72:27:1c:c0:0b: c0:a1:31:a9:7a:10:cd:92:12:39:31:51:be:c2:3a: d9:30:1d:c2:8a:d3:50:54:3b:18:c1:ae:b7:b7:a2: be:6c:db:7d:58:72:b5:e2:17:64:d7:1e:03:50:0c: a7:fa:6f:08:40:08:c3:4d:32:3f:53:1f:dc:4e:ab: 9a:ca:80:78:85:1a:5e:56:2d:10:e3:13:bd:54:8a: c8:17:a8:2c:1f:17:62:08:76:e5:ea:d3:6f:19:f3: a5:20:1c:d3:c5:e6:9f:2d:16:9b:13:cc:6c:d3:b9: 05:6a:ab:9d:d0:c7:2a:51:8a:a2:9b:6c:56:ae:c6: f7:6c:ad:2c:9f:13:56:aa:bc:9a:6b:1f:60:ff:b4: 8b:b9:7a:c5:58:50:8f:c5:be:d1:31:50:e8:56:8c: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EB:4C:C2:21:99:6D:EE:D9:B7:6A:E7:BF:D1:85:DA:9C:6B:7A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da756d70-c89b-3647-9d83-a8aa7003d070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.111.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b1:5f:e0:7b:8a:97:5c:6b:7e:46:40:4a:a3:dc:31:44:8b: ad:ec:28:98:5f:09:3b:8b:13:88:74:e1:6c:73:64:c0:ac:7c: 61:6c:4a:e3:ac:3d:01:11:9c:35:4b:23:22:fe:e0:65:63:ba: e2:1b:b9:ce:cd:7d:d6:a1:5a:27:5b:7a:35:a5:cd:cd:4b:4c: bf:3c:c1:25:91:61:69:4b:61:99:00:cf:8c:50:3a:40:03:bd: f4:08:86:1a:b6:9c:25:6e:65:51:ba:5b:cd:97:33:92:69:61: fb:f0:a9:4f:9d:49:2f:6f:a7:46:e4:27:96:6b:1d:39:b6:88: 08:72:a4:be:11:b6:f6:20:d2:82:71:32:6e:2b:10:aa:66:12: a1:ae:ae:bb:34:95:af:42:01:03:df:2e:18:2f:17:4d:bf:de: f1:b9:08:d5:6b:a3:56:cc:5a:d9:90:42:58:38:8c:2f:0e:2a: 52:75:10:34:4f:91:12:71:1e:86:e4:d5:58:48:69:f7:b0:b9: 03:1f:7d:c3:8d:b6:92:bb:d6:26:f0:08:a7:e3:3f:6a:0d:f4: 8c:07:9d:72:d8:33:62:a1:23:2b:6e:56:ff:f8:c3:50:8f:6f: f9:81:a8:2e:7c:98:3f:60:0d:fc:86:0f:f9:9d:cd:04:65:b9: 9c:49:5b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8LEwVZ2eBywB9DHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMjE2NDc0MFoXDTI2MTIwMTE3NDc0MFowLzEtMCsGA1UEAxMk ZmMwZDY0NGYtMDlhMi00YWQwLTk4MmQtNmUyZmNjMDE5MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bUhc5C6aSiSRDX29uEdoC7KEPTUOt3843Ot gBmukJljlLRCTcLlMLmpzdlNdXAhDWd845YPig9GOWrUzXc1RRM5N4s9lCSHBZLb WenW7uulPn0MRvrzlOEj4NefS7SYqGwkciccwAvAoTGpehDNkhI5MVG+wjrZMB3C itNQVDsYwa63t6K+bNt9WHK14hdk1x4DUAyn+m8IQAjDTTI/Ux/cTquayoB4hRpe Vi0Q4xO9VIrIF6gsHxdiCHbl6tNvGfOlIBzTxeafLRabE8xs07kFaqud0McqUYqi m2xWrsb3bK0snxNWqryaax9g/7SLuXrFWFCPxb7RMVDoVoxRbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjrTMIhmW3u2bdq57/Rhdqca3pOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGE3NTZkNzAtYzg5Yi0z NjQ3LTlkODMtYThhYTcwMDNkMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm8RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIexX+B7ipdca35GQEqj3DFEi63sKJhfCTuLE4h04WxzZMCsfGFsSuOs PQERnDVLIyL+4GVjuuIbuc7NfdahWidbejWlzc1LTL88wSWRYWlLYZkAz4xQOkAD vfQIhhq2nCVuZVG6W82XM5JpYfvwqU+dSS9vp0bkJ5ZrHTm2iAhypL4RtvYg0oJx Mm4rEKpmEqGurrs0la9CAQPfLhgvF02/3vG5CNVro1bMWtmQQlg4jC8OKlJ1EDRP kRJxHobk1VhIafewuQMffcONtpK71ibwCKfjP2oN9IwHnXLYM2KhIytuVv/4w1CP b/mBqC58mD9gDfyGD/mdzQRluZxJW4Y= -----END CERTIFICATE-----Generated at Fri Sep 11 13:04:39 2026 by rpki-client