$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa File: fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa (raw, json) Hash identifier: GT78r1OS7hl8o8vDrK/Z85BV1ddAAbEHBxKVPpoTvos= Subject key identifier: CA:51:D1:C9:F5:65:F0:50:B8:6A:3A:33:20:83:F6:D6:BA:F8:2E:B7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED9C74EEDE9761ECC79857080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 275658 IP address blocks: 38.159.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:4e:ed:e9:76:1e:cc:79:85:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=dd84c1d0-b047-4460-bfda-3ccc7e44804a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:aa:b6:76:96:c9:22:57:a0:f7:3d:f6:5c:fd: ea:55:68:92:b5:a6:75:76:42:ce:e5:f6:9a:87:e8: 33:70:35:53:0f:12:c7:42:1b:09:7a:7d:db:24:4d: 51:a5:6e:d6:03:f0:6c:26:f6:b0:60:28:c4:53:c2: 68:8f:dd:1e:46:78:54:7a:24:e8:d7:0c:71:7a:7b: 32:05:5c:d1:35:5f:37:b4:e3:67:fe:54:bf:a4:c0: 0d:12:cc:38:c9:47:b4:e2:c8:c3:64:10:42:31:c8: 92:55:96:91:5f:34:0c:d2:1f:2f:0b:5a:9b:47:e3: d5:23:bc:ac:6f:51:75:90:88:d4:84:42:11:e0:40: ab:26:6b:8c:a2:d3:54:72:a7:f8:02:76:4d:d5:f4: e0:54:24:83:6c:61:72:d2:65:45:ef:41:54:32:34: 9a:1c:f0:ee:52:1e:96:21:8c:e5:10:fe:93:bc:32: 80:4e:98:75:2b:ab:82:27:33:ba:a9:d8:87:b9:78: d4:2f:07:2d:ac:a8:3f:4a:ba:3c:15:7f:2a:30:49: 9c:9a:22:a5:9d:e0:35:81:ef:91:ed:aa:9b:e1:62: 10:57:6f:83:c1:ce:a3:33:cb:0f:8f:fd:95:3d:b5: fb:52:67:f2:c1:67:cc:38:36:54:b7:e7:34:f7:52: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:D1:C9:F5:65:F0:50:B8:6A:3A:33:20:83:F6:D6:BA:F8:2E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:91:d6:97:3b:aa:6e:fe:b2:3a:27:09:a9:c0:b2:f4:c0:3d: 5c:78:f5:dc:9d:93:91:bd:a8:cd:07:4a:e4:f8:cd:e3:fe:a1: c5:0e:4a:7c:f4:9e:38:72:41:4f:56:a0:37:e4:f3:0e:9f:25: a9:03:fb:4b:4a:90:6c:fb:d4:22:85:42:34:d7:7d:56:c2:0b: f2:be:f6:90:00:73:2e:72:1f:22:02:6b:5a:58:fd:d5:a7:10: 86:7a:d1:cd:c2:5c:d9:cc:87:f5:6a:a3:93:07:0e:fd:47:36: 19:e4:f8:26:63:cd:91:ce:d0:b2:11:b2:c3:f3:b7:25:97:d0: b1:44:54:49:ea:20:a5:67:a9:ee:44:4d:b7:18:37:c5:66:eb: d2:04:f9:3a:c9:fb:07:09:68:98:43:f8:e3:55:98:47:7a:36: 43:b3:fa:d9:b5:24:25:4f:6f:e0:2b:34:70:f1:4b:19:60:28: 64:b7:e1:c6:57:d6:74:3f:fe:e4:1a:d6:09:5d:a6:19:3c:da: 8f:fa:da:f7:9d:14:fb:e6:e8:db:aa:d2:e4:2f:ce:94:54:f9: 42:2e:3e:5c:1f:ac:dd:26:b1:a7:7b:a4:aa:ec:2d:e2:7d:12: 91:47:bc:e5:ad:38:98:3e:3d:9f:2e:22:9d:7f:19:56:21:2a: cf:43:69:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx07t6XYezHmFcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZGQ4NGMxZDAtYjA0Ny00NDYwLWJmZGEtM2NjYzdlNDQ4MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqq2dpbJIleg9z32XP3qVWiStaZ1dkLO5faa h+gzcDVTDxLHQhsJen3bJE1RpW7WA/BsJvawYCjEU8Joj90eRnhUeiTo1wxxensy BVzRNV83tONn/lS/pMANEsw4yUe04sjDZBBCMciSVZaRXzQM0h8vC1qbR+PVI7ys b1F1kIjUhEIR4ECrJmuMotNUcqf4AnZN1fTgVCSDbGFy0mVF70FUMjSaHPDuUh6W IYzlEP6TvDKATph1K6uCJzO6qdiHuXjULwctrKg/Sro8FX8qMEmcmiKlneA1ge+R 7aqb4WIQV2+Dwc6jM8sPj/2VPbX7UmfywWfMODZUt+c091JaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpR0cn1ZfBQuGo6MyCD9ta6+C63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmEzOGVjNDUtNDRiOC0z ZDJhLThmMmEtZGRjZTAxMzkzNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJp/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeR1pc7qm7+sjonCanAsvTAPVx49dydk5G9qM0HSuT4zeP+ocUOSnz0 njhyQU9WoDfk8w6fJakD+0tKkGz71CKFQjTXfVbCC/K+9pAAcy5yHyICa1pY/dWn EIZ60c3CXNnMh/Vqo5MHDv1HNhnk+CZjzZHO0LIRssPztyWX0LFEVEnqIKVnqe5E TbcYN8Vm69IE+TrJ+wcJaJhD+ONVmEd6NkOz+tm1JCVPb+ArNHDxSxlgKGS34cZX 1nQ//uQa1gldphk82o/62vedFPvm6Nuq0uQvzpRU+UIuPlwfrN0msad7pKrsLeJ9 EpFHvOWtOJg+PZ8uIp1/GVYhKs9Daag= -----END CERTIFICATE-----Generated at Fri Sep 11 14:27:37 2026 by rpki-client