$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd458920-69ef-3576-8a89-be965d41c608.roa File: dd458920-69ef-3576-8a89-be965d41c608.roa (raw, json) Hash identifier: LCOMc9JLbVuYRt1mKLYNIkJcsHnJJNUJbZGOQB1iYoQ= Subject key identifier: 2F:DA:3A:E8:F7:CB:A3:4E:81:6A:BA:63:79:7D:CF:4D:5A:33:0C:6C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EFF776D583D3935F7217B3780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd458920-69ef-3576-8a89-be965d41c608.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 401479 IP address blocks: 38.247.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:6d:58:3d:39:35:f7:21:7b:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=73d0a51d-3b5f-4abc-a91c-78557dce556f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:8b:59:c3:c2:96:47:0f:5b:8d:35:7e:75: c5:95:0f:ef:ef:dd:66:43:dd:db:f4:99:83:41:e1: b8:2e:be:5c:16:d4:e3:d7:4a:19:a9:0f:c6:83:d1: 21:63:1d:83:e2:df:23:41:14:75:02:a9:68:a2:48: 2f:97:30:01:0c:b7:58:9f:7f:af:b7:d0:45:7a:a1: 72:22:c0:d5:9c:32:aa:00:b5:9e:f2:2a:dc:1d:3f: 91:66:34:a8:46:04:6e:e1:e6:b4:e9:7e:7e:06:e9: aa:e5:b7:27:fe:54:af:01:c0:22:a4:47:3c:a4:a0: 8a:91:e2:59:c7:7f:f2:ee:ab:b8:15:87:d2:f3:60: db:e5:f9:86:e5:1f:ee:d8:cf:fe:8f:f7:2e:56:29: 13:aa:8c:f2:a1:f5:0c:72:15:98:8d:59:9b:2b:4d: b6:aa:8e:68:41:7d:86:04:f6:b3:06:66:85:75:5a: fd:62:07:a4:8f:4f:cf:83:60:ff:3f:cb:33:b8:21: 5d:ee:c9:d9:29:a8:6c:7d:2a:cb:13:78:a5:2f:9b: df:32:4e:bd:6f:b6:90:a9:b6:8a:24:37:3d:70:13: 9c:6c:f2:ee:a2:b3:53:7d:9c:05:7b:ea:c4:d6:db: 95:cb:6f:f5:3d:9c:23:77:97:aa:3c:cb:c4:6f:16: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:3A:E8:F7:CB:A3:4E:81:6A:BA:63:79:7D:CF:4D:5A:33:0C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd458920-69ef-3576-8a89-be965d41c608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.247.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e7:05:7f:9d:ee:0a:9b:90:ad:26:24:9d:57:1d:2f:4e:3c: d7:33:10:03:85:f7:21:55:0d:22:37:78:7c:6b:a2:14:bf:52: 24:49:2b:36:ba:48:aa:a8:ca:b1:38:0c:ca:a3:16:89:57:9d: e2:1c:b9:bd:18:8a:16:14:48:22:90:12:dc:61:a9:82:05:5b: a6:96:c7:ad:ef:02:c5:3b:ad:ab:97:16:62:b9:95:27:fb:d6: 6a:be:39:66:ca:13:a4:35:95:37:b6:06:4e:02:20:7e:41:4d: 68:6b:82:89:6f:e4:7d:01:ba:43:78:76:8c:cb:cb:62:23:1b: ec:b0:21:7c:ab:e4:d8:66:6c:7f:2f:50:01:44:21:d7:88:4b: 15:bd:fb:b5:eb:ac:b2:3c:93:5d:dd:8a:c6:e3:ba:4d:c7:ea: 25:a0:49:b7:cb:c1:73:2b:81:7a:a6:86:d1:82:61:84:fd:62: 36:f1:6f:d3:aa:cf:03:3a:78:7c:2c:5c:ce:21:f3:b2:5c:10: af:ba:ef:e5:dc:84:d7:4d:96:80:eb:13:d7:b9:41:ee:e5:50: 9a:37:78:fd:43:88:b3:c6:9d:ae:20:26:58:39:5b:fb:4d:bb: aa:41:d7:de:f1:b3:0d:46:d9:b3:4d:02:f0:54:8f:1d:3f:f9: f0:ea:1c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d21YPTk19yF7N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk NzNkMGE1MWQtM2I1Zi00YWJjLWE5MWMtNzg1NTdkY2U1NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBiLWcPClkcPW401fnXFlQ/v791mQ93b9JmD QeG4Lr5cFtTj10oZqQ/Gg9EhYx2D4t8jQRR1AqlookgvlzABDLdYn3+vt9BFeqFy IsDVnDKqALWe8ircHT+RZjSoRgRu4ea06X5+Bumq5bcn/lSvAcAipEc8pKCKkeJZ x3/y7qu4FYfS82Db5fmG5R/u2M/+j/cuVikTqozyofUMchWYjVmbK022qo5oQX2G BPazBmaFdVr9Ygekj0/Pg2D/P8szuCFd7snZKahsfSrLE3ilL5vfMk69b7aQqbaK JDc9cBOcbPLuorNTfZwFe+rE1tuVy2/1PZwjd5eqPMvEbxZ3wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/aOuj3y6NOgWq6Y3l9z01aMwxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGQ0NTg5MjAtNjllZi0z NTc2LThhODktYmU5NjVkNDFjNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJveAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHnBX+d7gqbkK0mJJ1XHS9OPNczEAOF9yFVDSI3eHxrohS/UiRJKza6 SKqoyrE4DMqjFolXneIcub0YihYUSCKQEtxhqYIFW6aWx63vAsU7rauXFmK5lSf7 1mq+OWbKE6Q1lTe2Bk4CIH5BTWhrgolv5H0BukN4dozLy2IjG+ywIXyr5NhmbH8v UAFEIdeISxW9+7XrrLI8k13disbjuk3H6iWgSbfLwXMrgXqmhtGCYYT9Yjbxb9Oq zwM6eHwsXM4h87JcEK+67+XchNdNloDrE9e5Qe7lUJo3eP1DiLPGna4gJlg5W/tN u6pB197xsw1G2bNNAvBUjx0/+fDqHEE= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:19 2026 by rpki-client