$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fb11996c-2e00-3cf4-89da-9e40cab9f0d5.roa File: fb11996c-2e00-3cf4-89da-9e40cab9f0d5.roa (raw, json) Hash identifier: 5S1U+j/5u5eupyndpwSiKzdNjVi8bzjb+Xiy/eck7YM= Subject key identifier: 1D:A1:21:6A:74:08:04:D3:31:CC:BB:C0:4C:81:9B:7E:4F:09:C2:6E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB72145D9F0388467FBF84900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fb11996c-2e00-3cf4-89da-9e40cab9f0d5.roa Signing time: Mon 03 Aug 2026 15:08:29 +0000 ROA not before: Mon 03 Aug 2026 15:08:29 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 153359 IP address blocks: 38.45.144.0/24 maxlen: 24 38.75.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b7:21:45:d9:f0:38:84:67:fb:f8:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 3 15:08:29 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=12bb4e1e-95fd-4654-8a6e-d70be5814c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:51:c7:aa:4c:46:c5:0d:0f:e3:d9:6c:ac: 1c:8c:20:6a:8a:6a:2c:ff:33:f4:38:cd:01:99:c3: 95:6e:81:d9:ca:04:65:bc:0a:82:a2:ae:5f:ea:d3: bb:b0:03:73:74:6b:b7:e7:0b:e8:64:64:9e:dd:99: b2:61:fd:da:cf:32:d2:e9:ba:d5:17:1c:6f:cd:34: 0c:9c:d3:15:0a:0d:fe:e8:96:30:db:40:1e:bd:be: 11:b4:78:33:69:37:bb:4e:f6:f3:f8:3d:fa:55:d9: 3d:96:25:52:99:95:c9:19:6f:9a:14:ac:9a:86:19: 4b:39:b0:c9:58:69:e0:c0:8b:f9:c9:fc:a9:f1:78: b4:1b:78:44:4c:3d:f0:cc:f5:c7:2e:fe:17:4e:d0: ae:1f:1e:64:cc:38:eb:6c:98:8b:cd:c9:c1:b4:d4: 10:18:3e:c6:67:76:2b:4e:1f:a7:5e:08:55:64:39: 42:0a:1b:1c:71:b5:e3:32:e6:55:3c:d1:4e:b6:ef: ab:13:e5:b0:5c:fe:d1:65:80:2f:e9:44:03:75:07: d5:3d:f3:45:5d:a8:14:e4:70:a5:e8:96:3b:b9:60: 7a:3b:52:50:46:98:37:14:48:bb:c4:36:49:d1:e3: 0f:1e:fd:fb:8a:c6:78:06:5d:39:40:b5:5f:05:5f: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:21:6A:74:08:04:D3:31:CC:BB:C0:4C:81:9B:7E:4F:09:C2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fb11996c-2e00-3cf4-89da-9e40cab9f0d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.144.0/24 38.75.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fb:9c:51:67:71:9f:f0:73:ed:2e:38:c7:ea:b0:1c:91:07: e6:83:a9:20:ed:90:e1:09:a8:3a:5c:9d:9a:80:e7:14:4d:bc: 2d:12:d0:f7:ba:06:aa:aa:cb:cb:24:57:17:f9:4d:80:6e:a0: b5:37:e8:62:b9:a3:0a:db:ba:41:74:89:90:ad:08:4b:65:1a: 44:07:9e:0f:7f:d3:57:36:0a:9b:47:37:db:4b:22:d5:92:aa: f3:2c:6d:ce:0b:c2:df:b0:92:f5:03:3d:81:d9:5f:15:93:51: ce:18:bd:ec:4b:6b:d3:db:98:ed:c9:ce:a8:e6:5c:f9:00:88: c3:22:bc:9b:0f:9e:81:af:74:a5:d4:d7:c7:28:44:41:c1:06: 3a:01:9d:8b:4b:cd:68:5f:ef:ec:57:56:d7:29:6e:b1:d4:e0: 56:22:34:b8:b2:42:e0:c8:61:8a:67:5e:05:8c:42:01:f1:ae: e4:35:9e:a7:35:35:68:07:5f:7e:af:cf:73:dc:32:1c:5d:f3: f0:35:2c:3e:2c:5a:42:35:77:a3:31:4f:9c:6f:34:d0:21:f9: 00:3f:48:82:6f:76:0d:15:13:b5:f3:29:fe:f4:1a:a8:3f:e6: 74:5c:9f:51:8c:31:a4:1d:0f:b2:f3:f5:8e:0a:5d:a3:62:45: 36:1a:f9:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE63IUXZ8DiEZ/v4SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwMzE1MDgyOVoXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk MTJiYjRlMWUtOTVmZC00NjU0LThhNmUtZDcwYmU1ODE0YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOZRx6pMRsUND+PZbKwcjCBqimos/zP0OM0B mcOVboHZygRlvAqCoq5f6tO7sANzdGu35wvoZGSe3ZmyYf3azzLS6brVFxxvzTQM nNMVCg3+6JYw20Aevb4RtHgzaTe7Tvbz+D36Vdk9liVSmZXJGW+aFKyahhlLObDJ WGngwIv5yfyp8Xi0G3hETD3wzPXHLv4XTtCuHx5kzDjrbJiLzcnBtNQQGD7GZ3Yr Th+nXghVZDlCChsccbXjMuZVPNFOtu+rE+WwXP7RZYAv6UQDdQfVPfNFXagU5HCl 6JY7uWB6O1JQRpg3FEi7xDZJ0eMPHv37isZ4Bl05QLVfBV+HZwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB2hIWp0CATTMcy7wEyBm35PCcJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmIxMTk5NmMtMmUwMC0z Y2Y0LTg5ZGEtOWU0MGNhYjlmMGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJi2QAwQB JkviMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJz7nFFncZ/wc+0uOMfqsByRB+aDqSDtkOEJqDpcnZqA5xRN vC0S0Pe6Bqqqy8skVxf5TYBuoLU36GK5owrbukF0iZCtCEtlGkQHng9/01c2CptH N9tLItWSqvMsbc4Lwt+wkvUDPYHZXxWTUc4YvexLa9PbmO3JzqjmXPkAiMMivJsP noGvdKXU18coREHBBjoBnYtLzWhf7+xXVtcpbrHU4FYiNLiyQuDIYYpnXgWMQgHx ruQ1nqc1NWgHX36vz3PcMhxd8/A1LD4sWkI1d6MxT5xvNNAh+QA/SIJvdg0VE7Xz Kf70Gqg/5nRcn1GMMaQdD7Lz9Y4KXaNiRTYa+Vo= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:26 2026 by rpki-client