$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa File: fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa (raw, json) Hash identifier: QnJxjFZ8+VDKz0uI9haOADnqMfIoPQwiHkPI68zD0M0= Subject key identifier: EC:9D:23:1A:40:73:0F:03:51:04:10:0D:31:8E:A3:45:FF:0D:77:78 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1732482826F26A171BD52C20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 273299 IP address blocks: 38.255.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:48:28:26:f2:6a:17:1b:d5:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=85776da4-e9bb-4388-82dc-da9ae56f0069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b1:48:5f:7e:a8:f3:23:4d:99:36:c8:ef:4d: 4f:d5:bc:c4:a6:ca:54:ce:fe:0e:d1:17:4f:ee:8b: 82:34:b8:65:4a:0b:71:18:26:73:81:ad:b6:db:87: b6:01:b0:7d:63:a7:08:89:f7:38:d3:c4:6b:d4:22: ab:14:9f:7c:6d:c7:17:4e:27:6b:56:f7:02:ab:50: ef:81:40:78:05:54:db:1d:0f:f7:15:f9:a0:82:41: 46:76:f8:0a:59:9c:45:29:66:86:de:66:b6:66:f1: 0b:e1:88:e0:0f:45:12:5f:56:02:97:33:8e:84:32: db:56:82:6b:d9:5c:82:18:ef:45:0d:9b:09:f4:87: b1:8f:f6:28:36:5f:92:63:16:d7:8d:d7:32:57:ae: a1:7c:0d:8f:ee:fa:4c:10:f1:05:4d:e2:d5:37:de: 7e:77:e7:5a:95:61:09:12:25:89:ab:2b:c3:9f:35: 62:66:33:6f:cf:91:4f:a5:5c:11:44:06:67:17:7a: f7:4e:d1:a0:c5:65:d4:41:82:f4:2e:9e:67:6f:e5: f0:36:20:63:9e:ce:3e:32:7f:d0:a2:55:96:48:09: 41:ed:c8:09:be:47:de:bd:76:96:4f:36:37:a9:0e: c8:6a:2e:2a:05:a4:52:cc:03:ec:fb:91:48:1a:98: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:23:1A:40:73:0F:03:51:04:10:0D:31:8E:A3:45:FF:0D:77:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6c:a8:a0:83:ab:e8:18:97:77:7d:3f:5b:18:73:68:e4:c5: 5c:0e:75:0b:7b:68:aa:4d:42:66:ea:a9:c5:b0:27:5d:63:85: e6:d7:6b:54:4c:0b:c9:4f:0a:3d:f1:24:20:8d:83:79:69:54: e5:d8:7a:bc:e3:15:c5:6f:ba:35:9d:8b:44:65:53:21:6b:fc: 02:16:3a:cb:08:3f:55:da:ee:46:90:31:93:a2:7c:6e:c0:62: f6:19:15:10:ea:20:01:80:02:9d:1e:97:8f:e1:68:00:25:79: d5:bc:be:ed:9e:48:6c:59:fe:65:29:42:32:26:99:bc:2b:b6: ab:ad:6e:bc:78:fa:43:e2:f0:0d:ec:84:68:28:e2:b0:43:dd: 6f:7d:d8:8e:c2:81:25:7a:23:36:65:3b:6f:80:d7:84:43:be: 0d:37:21:4f:58:66:dd:f5:ca:5f:1d:eb:44:ac:e3:a0:b0:b6: 98:01:9a:17:e7:fc:e4:10:f7:d6:e9:d3:f8:1a:bd:45:cb:11: 78:61:0f:87:84:4c:a5:12:e0:cd:1e:c0:dc:ba:88:74:11:b9: 67:f0:ad:e9:48:5b:7a:0d:f8:9e:1d:22:7a:1a:08:c6:c0:ab: 47:97:89:07:d7:f3:4f:ae:36:1f:50:63:03:43:ee:df:cb:7c: 59:39:fa:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkgoJvJqFxvVLCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ODU3NzZkYTQtZTliYi00Mzg4LTgyZGMtZGE5YWU1NmYwMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rFIX36o8yNNmTbI701P1bzEpspUzv4O0RdP 7ouCNLhlSgtxGCZzga2224e2AbB9Y6cIifc408Rr1CKrFJ98bccXTidrVvcCq1Dv gUB4BVTbHQ/3FfmggkFGdvgKWZxFKWaG3ma2ZvEL4YjgD0USX1YClzOOhDLbVoJr 2VyCGO9FDZsJ9Iexj/YoNl+SYxbXjdcyV66hfA2P7vpMEPEFTeLVN95+d+dalWEJ EiWJqyvDnzViZjNvz5FPpVwRRAZnF3r3TtGgxWXUQYL0Lp5nb+XwNiBjns4+Mn/Q olWWSAlB7cgJvkfevXaWTzY3qQ7Iai4qBaRSzAPs+5FIGpggcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOydIxpAcw8DUQQQDTGOo0X/DXd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmRkODljNzktNjU5Yy0z MDljLWI4OGUtZDNjOTNmOTRhMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZsqKCDq+gYl3d9P1sYc2jkxVwOdQt7aKpNQmbqqcWwJ11jhebXa1RM C8lPCj3xJCCNg3lpVOXYerzjFcVvujWdi0RlUyFr/AIWOssIP1Xa7kaQMZOifG7A YvYZFRDqIAGAAp0el4/haAAledW8vu2eSGxZ/mUpQjImmbwrtqutbrx4+kPi8A3s hGgo4rBD3W992I7CgSV6IzZlO2+A14RDvg03IU9YZt31yl8d60Ss46CwtpgBmhfn /OQQ99bp0/gavUXLEXhhD4eETKUS4M0ewNy6iHQRuWfwrelIW3oN+J4dInoaCMbA q0eXiQfX80+uNh9QYwND7t/LfFk5+r4= -----END CERTIFICATE-----Generated at Fri Sep 11 13:52:21 2026 by rpki-client