$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa File: ecf51332-d73e-32fb-9c5a-355af3d7577b.roa (raw, json) Hash identifier: hmehpKkFN7q/Z0j/RXYKktLNGy4bVNd4bCbB0zTHZYM= Subject key identifier: 65:4D:36:95:8E:74:DE:8E:6B:05:B5:64:D0:2F:F2:D3:3B:62:46:35 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EDF5C8E2E24642BF6B2D74B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 212698 IP address blocks: 38.64.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:8e:2e:24:64:2b:f6:b2:d7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=2a37ead4-3d18-4d59-88c2-c4e14c2e396e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:97:af:24:46:af:e6:e3:b9:56:0e:e6:f5: 41:c7:3e:7d:7c:fe:09:fd:34:83:fd:93:aa:da:79: 60:50:3f:f1:eb:b4:82:99:e8:82:d6:22:00:8c:18: 93:c5:92:0d:22:cb:4a:59:cf:1d:6c:b5:4a:64:4c: c6:fd:72:8c:78:dd:a9:3b:a6:d7:67:59:73:83:20: 78:2f:4d:2f:54:ba:14:e6:4a:eb:0a:50:ba:93:6d: 17:c2:d0:f0:f1:b2:d3:ce:a6:a1:2e:5e:84:5a:50: db:32:c0:0c:fa:08:99:32:43:40:cc:3c:07:6c:9a: 81:59:14:80:8f:ec:d7:c3:57:49:ab:41:46:b9:b6: 66:9b:31:ff:37:0f:ea:89:1c:f4:08:37:11:7b:d1: c6:69:2d:fa:dc:c5:2e:b5:41:85:85:17:22:42:ab: 50:11:fa:56:a3:28:d3:05:73:98:b4:29:0d:72:6d: 38:12:91:12:4d:40:55:a1:c6:e7:b2:5a:36:b4:a3: 4f:48:b5:8d:34:3c:20:f0:10:df:12:e0:de:01:65: 4d:b4:1a:86:10:3f:ff:a4:d6:6d:83:7d:4e:b0:2e: de:2d:14:3c:58:08:f4:18:cd:3d:c4:96:5e:73:0b: e2:de:8e:b9:51:08:ec:67:fd:c9:a6:b2:82:3e:79: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4D:36:95:8E:74:DE:8E:6B:05:B5:64:D0:2F:F2:D3:3B:62:46:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.64.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:20:41:d6:2b:1b:93:4c:63:41:3a:b3:61:d9:ad:9f:f8:04: b0:80:0f:25:a6:a9:3d:a7:5d:17:ad:d1:bc:e7:42:f2:53:5e: a7:b2:4f:19:c7:9f:06:38:c3:2f:b4:9c:7a:fc:a4:e1:b8:1e: bd:db:c0:36:71:62:45:52:1d:53:8e:81:e9:39:a9:dc:f2:f5: dd:8b:c5:02:63:1a:65:d0:e7:0a:6e:a9:33:00:4e:44:3d:e6: 30:5d:83:08:9a:0d:36:78:47:76:3f:29:46:3d:ef:ba:a1:17: 83:3f:0b:3a:42:52:17:28:24:75:6b:f9:57:00:3d:81:17:d3: 6a:7b:d6:8a:11:81:61:4a:74:33:f1:f2:3a:30:99:27:1e:56: 06:08:45:78:b5:69:86:31:da:07:ee:61:1a:b4:63:92:7c:29: bc:5a:3e:2b:85:e2:f0:7c:7c:0e:19:9a:85:69:db:bb:73:22: cf:59:79:56:f5:39:55:72:5d:81:65:2f:66:c1:e7:61:11:10: 51:f6:c8:10:2e:1b:f6:e5:6b:49:ff:20:21:e6:4c:c4:3d:70: 5d:25:dd:ed:47:2d:13:b9:26:92:b1:1f:6d:bc:eb:1b:06:ac: ef:35:b1:6d:d0:70:e1:62:8d:b2:e3:71:85:1f:85:66:ec:41: 33:43:20:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7fXI4uJGQr9rLXS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk MmEzN2VhZDQtM2QxOC00ZDU5LTg4YzItYzRlMTRjMmUzOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAKXryRGr+bjuVYO5vVBxz59fP4J/TSD/ZOq 2nlgUD/x67SCmeiC1iIAjBiTxZINIstKWc8dbLVKZEzG/XKMeN2pO6bXZ1lzgyB4 L00vVLoU5krrClC6k20XwtDw8bLTzqahLl6EWlDbMsAM+giZMkNAzDwHbJqBWRSA j+zXw1dJq0FGubZmmzH/Nw/qiRz0CDcRe9HGaS363MUutUGFhRciQqtQEfpWoyjT BXOYtCkNcm04EpESTUBVocbnslo2tKNPSLWNNDwg8BDfEuDeAWVNtBqGED//pNZt g31OsC7eLRQ8WAj0GM09xJZecwvi3o65UQjsZ/3JprKCPnnuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVNNpWOdN6OawW1ZNAv8tM7YkY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWNmNTEzMzItZDczZS0z MmZiLTljNWEtMzU1YWYzZDc1NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4gQdYrG5NMY0E6s2HZrZ/4BLCADyWmqT2nXRet0bznQvJTXqeyTxnH nwY4wy+0nHr8pOG4Hr3bwDZxYkVSHVOOgek5qdzy9d2LxQJjGmXQ5wpuqTMATkQ9 5jBdgwiaDTZ4R3Y/KUY977qhF4M/CzpCUhcoJHVr+VcAPYEX02p71ooRgWFKdDPx 8jowmSceVgYIRXi1aYYx2gfuYRq0Y5J8KbxaPiuF4vB8fA4ZmoVp27tzIs9ZeVb1 OVVyXYFlL2bB52EREFH2yBAuG/bla0n/ICHmTMQ9cF0l3e1HLRO5JpKxH2286xsG rO81sW3QcOFijbLjcYUfhWbsQTNDILY= -----END CERTIFICATE-----Generated at Fri Sep 11 13:50:57 2026 by rpki-client