$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e485ce60-f651-332c-b142-0afd4d05009c.roa File: e485ce60-f651-332c-b142-0afd4d05009c.roa (raw, json) Hash identifier: Y72A276kHRlpOFaEFi5vXSOWyHcuKJtOmgwSh4HO+JA= Subject key identifier: 83:B8:A0:D0:E1:64:B8:42:31:E5:CD:2E:8B:C2:A7:D2:CD:5F:46:EA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0C0778B18FA2BC7705F6D280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e485ce60-f651-332c-b142-0afd4d05009c.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 154480 IP address blocks: 38.72.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:78:b1:8f:a2:bc:77:05:f6:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=3d4b1078-0b34-4aa5-b9b0-23cc42c56d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:6d:a0:56:16:19:d3:60:96:1a:99:5a:a5: e3:ad:ea:24:d6:06:58:45:f9:b3:db:f9:03:6a:a2: 61:5d:50:75:3b:86:5d:77:ad:0c:85:a3:e3:06:cf: 6d:ed:dc:8d:eb:0b:de:2b:15:65:78:41:19:a6:08: a5:6d:e1:4d:ed:a5:dc:3a:eb:8f:a7:ae:dd:c1:22: 61:d8:a4:cd:0b:25:25:6e:12:cd:a8:88:29:b9:b3: a1:06:5b:e8:a6:7e:2a:c2:82:4f:d2:c8:d9:cf:9a: 4b:f4:b7:8a:b1:e1:3a:ed:78:ff:9e:1a:0e:85:93: 6f:4d:bd:f3:37:05:57:64:3f:14:fa:af:f1:ae:c7: 5a:e1:51:9d:a9:7b:fd:f4:ba:b9:56:4e:ac:73:e8: f5:79:01:8c:2d:4e:07:9f:9e:5c:34:3c:a3:3f:e6: 27:ad:63:b8:c7:72:69:a5:39:40:46:6d:68:ee:9d: e1:2c:72:7e:44:90:32:cf:95:8a:4c:cd:ab:7f:68: ce:64:1d:3b:17:9e:af:e3:9a:d5:e4:b3:21:5f:ee: 90:8e:58:78:8b:94:e4:0c:33:43:3b:3e:da:e9:be: 02:7e:90:cf:5d:3b:23:9d:08:70:47:95:cd:e1:fd: aa:7b:a3:77:f4:b9:0f:fc:b0:3f:6b:3b:07:40:f2: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B8:A0:D0:E1:64:B8:42:31:E5:CD:2E:8B:C2:A7:D2:CD:5F:46:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e485ce60-f651-332c-b142-0afd4d05009c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.72.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:72:0e:e7:d5:be:ee:9c:ee:47:62:d5:68:24:e6:cb:31:54: fb:5f:06:82:3d:56:af:3e:c4:e9:2a:08:0a:02:fc:63:ae:54: 3a:eb:bf:e7:70:6e:93:3e:e7:10:5e:df:1f:b1:79:e7:bf:15: c1:4c:52:b4:bc:43:c3:9e:05:81:7a:03:49:79:53:a1:68:a0: 4e:42:93:00:97:c4:20:a0:37:ca:6c:79:24:d7:da:5b:e0:14: 4d:f8:57:3a:17:45:50:f8:f7:42:83:11:87:52:1e:f4:d2:01: 26:af:dd:e9:a1:ba:fd:11:20:1e:34:6a:93:70:3b:8d:31:19: 9e:79:f1:57:f8:30:78:82:ce:0c:1f:d9:98:8d:8a:50:31:54: ea:af:fb:dd:26:1c:bd:e8:2b:8a:fa:5a:a9:97:97:43:8f:0d: ef:4b:a9:75:75:14:71:ce:6b:3c:15:4d:df:81:8f:c5:ec:80: db:39:8c:76:46:19:38:0b:93:63:3b:3d:ae:c8:93:9c:e0:ca: 8e:13:b0:89:1a:36:ef:f8:63:88:47:21:b3:34:00:2b:04:6b: b5:51:19:78:a9:7f:2a:5c:9c:16:12:7d:5e:96:c8:a1:fe:78: 9d:0f:f1:68:8f:87:e1:df:c0:40:3f:0d:84:ec:01:3f:1f:7d: 2b:08:84:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB3ixj6K8dwX20oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk M2Q0YjEwNzgtMGIzNC00YWE1LWI5YjAtMjNjYzQyYzU2ZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6ptoFYWGdNglhqZWqXjreok1gZYRfmz2/kD aqJhXVB1O4Zdd60MhaPjBs9t7dyN6wveKxVleEEZpgilbeFN7aXcOuuPp67dwSJh 2KTNCyUlbhLNqIgpubOhBlvopn4qwoJP0sjZz5pL9LeKseE67Xj/nhoOhZNvTb3z NwVXZD8U+q/xrsda4VGdqXv99Lq5Vk6sc+j1eQGMLU4Hn55cNDyjP+YnrWO4x3Jp pTlARm1o7p3hLHJ+RJAyz5WKTM2rf2jOZB07F56v45rV5LMhX+6Qjlh4i5TkDDND Oz7a6b4CfpDPXTsjnQhwR5XN4f2qe6N39LkP/LA/azsHQPJ6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO4oNDhZLhCMeXNLovCp9LNX0bqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTQ4NWNlNjAtZjY1MS0z MzJjLWIxNDItMGFmZDRkMDUwMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkiGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVyDufVvu6c7kdi1Wgk5ssxVPtfBoI9Vq8+xOkqCAoC/GOuVDrrv+dw bpM+5xBe3x+xeee/FcFMUrS8Q8OeBYF6A0l5U6FooE5CkwCXxCCgN8pseSTX2lvg FE34VzoXRVD490KDEYdSHvTSASav3emhuv0RIB40apNwO40xGZ558Vf4MHiCzgwf 2ZiNilAxVOqv+90mHL3oK4r6WqmXl0OPDe9LqXV1FHHOazwVTd+Bj8XsgNs5jHZG GTgLk2M7Pa7Ik5zgyo4TsIkaNu/4Y4hHIbM0ACsEa7VRGXipfypcnBYSfV6WyKH+ eJ0P8WiPh+HfwEA/DYTsAT8ffSsIhBI= -----END CERTIFICATE-----Generated at Fri Sep 11 13:13:16 2026 by rpki-client