$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9b094f8-ef5e-3b76-9136-57414ef33335.roa File: e9b094f8-ef5e-3b76-9136-57414ef33335.roa (raw, json) Hash identifier: A0Xd2LiCbFeky/fTaIW6/Mapvp25mExKTD5itz91zKs= Subject key identifier: 50:64:16:88:A5:6E:7E:91:EA:95:AF:0E:D0:8A:64:01:05:38:36:E3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE4F1E998D02AA42698F814A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9b094f8-ef5e-3b76-9136-57414ef33335.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 273254 IP address blocks: 38.252.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:e9:98:d0:2a:a4:26:98:f8:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=d5cd7d8b-8a6a-42e8-bca8-25ea86587dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ba:c4:09:fc:bb:95:71:ff:67:5e:11:09:c7: e2:18:c0:83:e4:ff:26:e9:5b:ea:6c:13:69:a8:60: ab:96:53:9d:f5:77:ae:13:67:d8:72:9e:00:14:30: 0e:58:a3:74:81:c9:e0:bc:b0:f7:1e:62:69:e1:58: ac:83:3e:e2:07:fa:e9:27:ea:1d:7d:3c:67:e4:47: b5:0f:a2:cd:c8:a5:8f:e2:73:15:2e:d8:4b:8d:1f: 7d:2f:b1:9a:33:4e:f0:64:f7:53:19:87:69:dd:a0: b9:85:fe:6b:63:91:7c:68:ad:e8:d9:61:7e:b3:72: 38:2a:b4:ad:c1:46:8e:0e:0b:42:a2:43:a0:cd:a2: 63:21:17:39:d9:cb:36:53:6e:f6:78:50:28:63:12: 02:24:85:2c:be:9d:64:93:38:a3:e3:bb:b0:ae:32: 6e:70:d0:5d:29:e7:d2:9c:f4:46:cd:71:1e:2c:a8: 04:9a:d2:08:42:bb:59:1a:78:99:1c:54:21:89:8f: 27:68:72:36:9b:68:5b:af:9b:69:e3:d0:83:54:9a: c3:9d:9f:96:60:8b:77:39:3b:d4:5a:56:33:ba:5b: 11:6c:8a:63:1a:e8:76:24:b8:d6:bc:52:b6:55:5f: d3:02:be:2e:d6:59:83:23:d4:69:d6:1d:5d:d1:bf: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:64:16:88:A5:6E:7E:91:EA:95:AF:0E:D0:8A:64:01:05:38:36:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9b094f8-ef5e-3b76-9136-57414ef33335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f5:fe:8e:ad:91:c4:9e:ac:12:60:25:22:17:38:d1:38:43: 11:18:c7:d5:63:f0:7a:f2:ab:ee:90:c5:a1:b8:c5:b3:29:c8: 8a:5d:45:12:ff:23:c8:6f:1d:98:8c:54:f9:80:14:4d:6c:e2: 69:6e:69:91:3c:71:30:45:b6:c2:07:00:a9:39:c1:4b:ec:75: 54:b0:b3:cc:bc:2b:de:45:5a:fa:e0:2f:a1:3f:3c:28:f2:66: c2:09:2f:13:8f:a1:c7:16:a7:79:d1:88:b7:b3:b6:d8:d2:60: f1:24:6a:9f:e7:81:05:8c:04:c9:0a:ee:1e:61:5d:c0:4e:cc: 5d:88:f5:f1:29:ab:70:21:21:ab:9a:63:c7:fc:d6:ab:da:24: ce:3f:4a:f3:2a:05:8f:25:52:d0:a9:33:60:74:83:1b:75:f9: 3f:0b:52:61:f3:2a:a6:e8:3d:2e:9a:44:21:8d:29:de:ea:ec: 40:14:ad:bb:45:05:b6:e5:88:4b:05:4f:d9:f6:7f:50:b6:ec: 95:58:e1:17:0e:10:be:4f:de:40:59:19:e7:ad:0d:4d:34:19: 10:b4:00:c5:5a:09:d8:6c:28:0b:0c:49:f6:7f:02:34:9e:4c: ff:be:4e:0b:58:95:93:80:ec:99:62:ac:dd:f9:5c:c0:c9:86: da:35:d8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8emY0CqkJpj4FKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDVjZDdkOGItOGE2YS00MmU4LWJjYTgtMjVlYTg2NTg3ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbrECfy7lXH/Z14RCcfiGMCD5P8m6VvqbBNp qGCrllOd9XeuE2fYcp4AFDAOWKN0gcngvLD3HmJp4Visgz7iB/rpJ+odfTxn5Ee1 D6LNyKWP4nMVLthLjR99L7GaM07wZPdTGYdp3aC5hf5rY5F8aK3o2WF+s3I4KrSt wUaODgtCokOgzaJjIRc52cs2U272eFAoYxICJIUsvp1kkzij47uwrjJucNBdKefS nPRGzXEeLKgEmtIIQrtZGniZHFQhiY8naHI2m2hbr5tp49CDVJrDnZ+WYIt3OTvU WlYzulsRbIpjGuh2JLjWvFK2VV/TAr4u1lmDI9Rp1h1d0b9SBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBkFoilbn6R6pWvDtCKZAEFODbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTliMDk0ZjgtZWY1ZS0z Yjc2LTkxMzYtNTc0MTRlZjMzMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvzJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP1/o6tkcSerBJgJSIXONE4QxEYx9Vj8Hryq+6QxaG4xbMpyIpdRRL/ I8hvHZiMVPmAFE1s4mluaZE8cTBFtsIHAKk5wUvsdVSws8y8K95FWvrgL6E/PCjy ZsIJLxOPoccWp3nRiLezttjSYPEkap/ngQWMBMkK7h5hXcBOzF2I9fEpq3AhIaua Y8f81qvaJM4/SvMqBY8lUtCpM2B0gxt1+T8LUmHzKqboPS6aRCGNKd7q7EAUrbtF BbbliEsFT9n2f1C27JVY4RcOEL5P3kBZGeetDU00GRC0AMVaCdhsKAsMSfZ/AjSe TP++TgtYlZOA7JlirN35XMDJhto12Eg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:35 2026 by rpki-client