$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa File: df0b34e2-e449-34cd-8b4f-82098402cffa.roa (raw, json) Hash identifier: aGTaRogDy0ULWqxfcDpNaEUoK1AVDVI02HqCKWirVC8= Subject key identifier: 43:1E:DF:D0:10:CD:18:A8:57:31:C7:CA:88:6D:94:10:DE:DF:78:9C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F093CDF3E7D1BB587980B8A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 393436 IP address blocks: 38.20.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:df:3e:7d:1b:b5:87:98:0b:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=54957b2c-e27b-496e-8271-3c52e81ffe5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:f8:74:46:ea:c9:7d:d9:2b:a1:3b:11:b6: 0d:f8:e3:2c:3e:91:93:60:43:71:3a:dd:b2:bc:a2: 38:e6:e4:c3:e1:6e:83:8b:e0:32:e2:5d:a1:3b:51: 1d:3e:e7:8d:29:2f:68:06:70:82:c4:c3:a9:c3:bf: 00:02:8a:08:ba:38:98:5a:72:fc:ae:21:ef:d9:ae: 29:be:ad:ea:5d:9e:4b:cc:0d:e6:c2:f8:9b:1f:b0: 06:0b:7e:a5:f6:fb:a5:7a:ce:0c:9e:a8:d2:af:89: 9b:f7:ed:06:0e:31:86:22:63:62:57:b0:0a:d4:16: 97:38:26:1c:e0:de:ef:cb:77:18:9d:c4:01:52:8f: 7b:02:76:65:a8:a0:64:55:6d:29:bd:25:97:8d:c4: 59:ea:25:68:33:8c:25:f5:cc:4f:78:42:a4:36:37: a6:9f:f9:ee:76:75:24:13:31:93:d3:63:a4:c4:01: e7:1f:a8:dd:05:d1:7c:b4:17:a4:85:30:0c:71:81: 90:c2:5e:de:4a:8f:1f:50:61:3c:20:28:a4:9e:04: 09:d8:28:58:d1:d0:5d:a0:28:f4:81:08:2b:08:16: 9d:a0:70:e6:64:99:37:7d:f2:a4:c0:08:c6:b0:cc: d2:f5:db:d0:73:dd:c6:fa:86:3d:28:81:6e:64:71: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:DF:D0:10:CD:18:A8:57:31:C7:CA:88:6D:94:10:DE:DF:78:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2d:7f:c1:03:6d:bf:af:1c:ae:ca:3c:72:42:7e:bc:02:a4: 30:41:5c:31:51:a0:15:14:ba:19:01:6c:cc:c4:b7:d3:10:0d: 25:45:d0:7e:f4:b3:90:f4:29:f5:11:17:13:11:45:e3:97:3f: 66:72:66:cc:73:10:d3:94:44:f5:56:3a:66:84:b9:e5:b8:2d: c2:04:c2:19:3e:3f:9e:67:f7:03:55:15:0b:e3:ec:a7:a2:db: f3:e5:c1:a5:04:4b:e5:15:1c:09:d3:cd:20:a8:fa:22:5d:e0: 24:d6:60:32:29:2b:fe:ca:bb:b4:24:1d:f3:82:4f:72:bb:95: df:be:06:46:a6:5c:17:05:eb:a8:7a:94:e1:f0:ce:8c:8d:15: 6e:31:72:f7:e1:ad:84:c8:9c:57:ab:f6:86:21:55:63:72:dc: 75:48:ee:1a:e1:90:27:47:be:3f:48:65:cb:be:e4:1b:2e:55: 64:b2:fc:69:3b:42:43:c0:d3:e6:99:48:2e:18:94:81:c8:6c: 57:87:19:c4:ae:43:9b:f5:57:8a:9b:a6:99:2a:73:2b:52:82: a1:4e:1f:b0:82:c5:b4:e6:10:da:b2:ca:90:6e:e3:47:77:88: 15:13:d8:b4:eb:79:22:5a:10:af:65:9f:72:5f:8f:32:57:f3: e8:61:37:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN8+fRu1h5gLioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NTQ5NTdiMmMtZTI3Yi00OTZlLTgyNzEtM2M1MmU4MWZmZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCz4dEbqyX3ZK6E7EbYN+OMsPpGTYENxOt2y vKI45uTD4W6Di+Ay4l2hO1EdPueNKS9oBnCCxMOpw78AAooIujiYWnL8riHv2a4p vq3qXZ5LzA3mwvibH7AGC36l9vules4MnqjSr4mb9+0GDjGGImNiV7AK1BaXOCYc 4N7vy3cYncQBUo97AnZlqKBkVW0pvSWXjcRZ6iVoM4wl9cxPeEKkNjemn/nudnUk EzGT02OkxAHnH6jdBdF8tBekhTAMcYGQwl7eSo8fUGE8ICikngQJ2ChY0dBdoCj0 gQgrCBadoHDmZJk3ffKkwAjGsMzS9dvQc93G+oY9KIFuZHEI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMe39AQzRioVzHHyohtlBDe33icMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGYwYjM0ZTItZTQ0OS0z NGNkLThiNGYtODIwOTg0MDJjZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJotf8EDbb+vHK7KPHJCfrwCpDBBXDFRoBUUuhkBbMzEt9MQDSVF0H70 s5D0KfURFxMRReOXP2ZyZsxzENOURPVWOmaEueW4LcIEwhk+P55n9wNVFQvj7Kei 2/PlwaUES+UVHAnTzSCo+iJd4CTWYDIpK/7Ku7QkHfOCT3K7ld++BkamXBcF66h6 lOHwzoyNFW4xcvfhrYTInFer9oYhVWNy3HVI7hrhkCdHvj9IZcu+5BsuVWSy/Gk7 QkPA0+aZSC4YlIHIbFeHGcSuQ5v1V4qbppkqcytSgqFOH7CCxbTmENqyypBu40d3 iBUT2LTreSJaEK9ln3JfjzJX8+hhNzg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:09:06 2026 by rpki-client