$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df947e01-434b-3b1c-b94c-ed3536b6d843.roa File: df947e01-434b-3b1c-b94c-ed3536b6d843.roa (raw, json) Hash identifier: 0CketKulOd7Xcp7ph5RrLw4frZ9G92JN7xrc933uh6c= Subject key identifier: A7:49:34:86:E3:2D:4E:A7:BE:F6:66:50:2B:8F:6D:7A:BE:79:03:F3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0C07810631FC5CD1D04B0C40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df947e01-434b-3b1c-b94c-ed3536b6d843.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 273254 IP address blocks: 38.196.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:81:06:31:fc:5c:d1:d0:4b:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=f910a58c-0c51-426b-ad9b-5ac9a7fce125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:fe:d7:1d:b2:1e:40:ec:a9:84:ba:c9:ea: ba:52:09:a3:01:e7:96:8a:78:01:e5:0d:ea:01:cc: 42:79:4c:b7:f1:07:4b:98:92:ab:b6:65:e1:57:33: ba:8a:9b:23:ef:16:74:52:a7:92:65:09:42:46:a1: 11:19:0f:17:a8:00:9a:7c:c7:92:2a:b8:b7:2c:d8: 0d:86:e1:b3:a3:59:a6:0a:35:f2:28:a3:15:5e:0f: 19:49:9c:87:51:51:82:e4:c4:26:67:8f:fe:e6:32: 48:36:64:dc:7c:de:04:b6:71:cb:46:2a:c2:43:ac: fb:8b:d2:62:70:75:6d:7f:7f:ec:31:81:a4:64:c4: e2:e9:6f:69:91:7c:9f:95:45:bc:1c:98:9b:0d:dd: 6e:03:0f:50:fb:5a:b2:41:96:3c:f8:5f:16:d1:60: 41:c6:62:e7:01:0f:68:b4:07:60:66:b3:91:3d:58: 49:fa:fc:95:89:c8:86:b9:29:cb:83:a8:5b:6d:7a: 4a:07:a6:6b:19:a4:78:42:5e:97:c9:19:ca:03:ff: 97:ed:1a:2b:a3:dc:c1:33:de:da:e7:d0:8e:4a:ab: d7:10:ae:a3:19:94:36:96:0b:d5:85:ef:b8:67:be: 3e:cd:e1:af:06:e0:25:5c:46:00:be:85:f4:93:e5: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:49:34:86:E3:2D:4E:A7:BE:F6:66:50:2B:8F:6D:7A:BE:79:03:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df947e01-434b-3b1c-b94c-ed3536b6d843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:88:b2:c1:c4:f0:e5:05:1d:d1:9a:65:12:44:0f:70:77:f8: 95:35:04:2b:e1:07:60:17:ca:7d:48:a3:f9:c1:bb:3c:9d:bc: f8:9b:6c:d7:83:9f:aa:dc:b0:14:b5:f2:a2:86:27:0b:3a:76: 5f:4e:99:53:c8:c4:00:d7:1d:9c:21:9e:a5:e5:76:f2:cb:94: 13:f8:8f:4a:cb:24:3b:95:8f:48:5f:46:c0:ad:6f:63:18:a1: f6:b8:0f:d7:f3:a7:3a:e9:23:30:a4:24:30:14:e9:87:d6:13: f2:60:36:5c:bd:c6:18:cd:3a:7d:4e:0e:37:23:d2:31:78:1f: 87:24:4d:2d:c7:e8:6e:9b:8e:81:cc:f6:d8:a3:5f:49:fb:da: d7:0e:f4:29:2d:ba:be:f4:e7:f3:14:f5:f1:9e:8c:13:13:f3: cc:47:fe:1f:bd:4d:7f:05:d3:99:cd:af:47:4d:eb:d1:35:4c: 48:40:2a:f2:17:a8:ea:9f:39:8a:33:ad:4b:6b:a1:93:78:b7: b6:82:fb:a5:61:84:8f:d0:22:81:8c:22:89:d4:eb:04:60:e7: 65:72:5f:b7:cc:91:90:a2:aa:22:75:e8:6c:25:12:98:71:00: c0:22:ad:a4:77:03:19:77:d7:38:5e:c8:96:4d:f2:30:a7:6e: bf:90:9c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4EGMfxc0dBLDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjkxMGE1OGMtMGM1MS00MjZiLWFkOWItNWFjOWE3ZmNlMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkf+1x2yHkDsqYS6yeq6UgmjAeeWingB5Q3q AcxCeUy38QdLmJKrtmXhVzO6ipsj7xZ0UqeSZQlCRqERGQ8XqACafMeSKri3LNgN huGzo1mmCjXyKKMVXg8ZSZyHUVGC5MQmZ4/+5jJINmTcfN4EtnHLRirCQ6z7i9Ji cHVtf3/sMYGkZMTi6W9pkXyflUW8HJibDd1uAw9Q+1qyQZY8+F8W0WBBxmLnAQ9o tAdgZrORPVhJ+vyViciGuSnLg6hbbXpKB6ZrGaR4Ql6XyRnKA/+X7Roro9zBM97a 59COSqvXEK6jGZQ2lgvVhe+4Z74+zeGvBuAlXEYAvoX0k+VmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdJNIbjLU6nvvZmUCuPbXq+eQPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGY5NDdlMDEtNDM0Yi0z YjFjLWI5NGMtZWQzNTM2YjZkODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECIssHE8OUFHdGaZRJED3B3+JU1BCvhB2AXyn1Io/nBuzydvPibbNeD n6rcsBS18qKGJws6dl9OmVPIxADXHZwhnqXldvLLlBP4j0rLJDuVj0hfRsCtb2MY ofa4D9fzpzrpIzCkJDAU6YfWE/JgNly9xhjNOn1ODjcj0jF4H4ckTS3H6G6bjoHM 9tijX0n72tcO9Cktur705/MU9fGejBMT88xH/h+9TX8F05nNr0dN69E1TEhAKvIX qOqfOYozrUtroZN4t7aC+6VhhI/QIoGMIonU6wRg52VyX7fMkZCiqiJ16GwlEphx AMAiraR3Axl31zheyJZN8jCnbr+QnCw= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:34 2026 by rpki-client