$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa File: ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa (raw, json) Hash identifier: TQ+hi1pl8xEmmopb5his6Mp4h4OgAf41K0JTojWu7Ro= Subject key identifier: 61:64:62:A7:39:49:EF:44:EC:90:39:8E:D9:4E:7D:F8:E5:0D:FB:79 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB9AC520A55A3501F49460400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 272403 IP address blocks: 38.101.88.0/23 maxlen: 23 38.101.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:52:0a:55:a3:50:1f:49:46:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=e7ef1b12-4cfe-442c-8051-30bb635df6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:2a:ed:d3:34:2c:55:48:31:ff:d1:97:0d: a0:e0:66:9a:57:d6:73:48:1d:30:8b:85:7e:0d:7f: 17:15:3d:dc:63:ed:cd:9c:77:6f:53:00:10:94:d5: 52:1c:eb:8d:be:4e:9b:9b:e8:de:6c:a6:7a:72:06: fc:e1:ab:b9:20:42:f2:ac:82:8b:d5:9b:d6:d0:14: 2b:43:ad:06:a1:61:75:b7:5e:3f:79:98:89:91:32: 34:8b:20:97:08:b0:33:3d:fa:10:e2:2e:07:1d:df: c8:ce:fd:20:59:80:41:03:14:46:44:32:ad:3b:e7: 8b:88:c8:b6:59:f0:0e:86:16:f7:5e:be:53:c8:4e: 94:6c:dc:5a:54:f6:dc:56:2c:01:f3:17:11:ad:08: 0d:66:51:a3:13:ed:a3:cd:cf:a3:bb:a9:52:5d:80: 6f:9e:6a:c9:6a:13:c0:ec:64:62:df:5b:e6:ca:85: 89:41:49:97:8e:88:af:31:55:77:d9:75:2a:7d:9b: 9b:00:29:75:ef:90:7b:d7:2e:f8:81:78:5d:68:b0: f7:c8:2a:70:54:07:d8:d4:45:62:19:0a:e4:c1:05: 04:93:f8:ac:07:f1:6e:c0:7d:3f:c3:07:28:6e:b1: f2:0c:1a:87:bf:2d:b2:81:5f:15:d1:80:86:b5:2e: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:64:62:A7:39:49:EF:44:EC:90:39:8E:D9:4E:7D:F8:E5:0D:FB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.101.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8d:81:98:e9:67:fd:c9:47:41:bb:68:80:6d:82:a2:f8:6f: b5:aa:be:be:5f:2f:6d:e5:fa:25:be:df:89:c2:44:58:1c:a7: 5c:42:7f:3f:95:cf:78:93:0d:5d:09:9c:c3:66:23:b3:98:b9: de:a6:87:64:35:83:6c:ab:f0:bb:c3:b7:9e:5c:23:df:2b:7c: d7:97:d0:ba:35:67:52:90:b2:fa:d8:17:89:4d:e2:0b:12:74: af:fa:b8:f7:9f:5c:31:c7:88:86:0a:63:0c:69:3e:67:da:b2: 04:0a:02:2e:0e:80:46:bd:1a:b3:f6:e9:b6:0d:ff:0e:7e:79: 62:09:6a:e5:18:c6:c2:e7:0c:37:03:5e:6d:73:65:dd:70:46: bc:81:76:7e:af:8c:4b:87:6e:36:a8:a8:e2:b9:92:36:98:73: 0f:74:b7:7c:f8:ae:63:c2:f4:fd:fa:1a:03:45:82:d8:c9:e3: 5d:0f:ec:db:f7:42:05:f5:90:95:48:60:5e:c9:61:65:8a:de: 11:a3:0c:0f:54:9a:b2:68:60:b9:48:1c:87:b2:f5:08:2c:f7: c7:5d:15:e9:d8:e0:e0:7e:ff:fb:20:7f:c0:3a:38:c1:9d:74: d0:12:30:57:3c:ce:b2:6e:b8:f3:ff:01:31:7d:cd:3c:8d:6d: b5:93:be:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rFIKVaNQH0lGBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTdlZjFiMTItNGNmZS00NDJjLTgwNTEtMzBiYjYzNWRmNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVMq7dM0LFVIMf/Rlw2g4GaaV9ZzSB0wi4V+ DX8XFT3cY+3NnHdvUwAQlNVSHOuNvk6bm+jebKZ6cgb84au5IELyrIKL1ZvW0BQr Q60GoWF1t14/eZiJkTI0iyCXCLAzPfoQ4i4HHd/Izv0gWYBBAxRGRDKtO+eLiMi2 WfAOhhb3Xr5TyE6UbNxaVPbcViwB8xcRrQgNZlGjE+2jzc+ju6lSXYBvnmrJahPA 7GRi31vmyoWJQUmXjoivMVV32XUqfZubACl175B71y74gXhdaLD3yCpwVAfY1EVi GQrkwQUEk/isB/FuwH0/wwcobrHyDBqHvy2ygV8V0YCGtS77AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFkYqc5Se9E7JA5jtlOffjlDft5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmZhM2ZiNDAtOGVmYy0z YjRlLThiNTgtZmQ0MmU5OTIyOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJmVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSNgZjpZ/3JR0G7aIBtgqL4b7Wqvr5fL23l+iW+34nCRFgcp1xCfz+V z3iTDV0JnMNmI7OYud6mh2Q1g2yr8LvDt55cI98rfNeX0Lo1Z1KQsvrYF4lN4gsS dK/6uPefXDHHiIYKYwxpPmfasgQKAi4OgEa9GrP26bYN/w5+eWIJauUYxsLnDDcD Xm1zZd1wRryBdn6vjEuHbjaoqOK5kjaYcw90t3z4rmPC9P36GgNFgtjJ410P7Nv3 QgX1kJVIYF7JYWWK3hGjDA9UmrJoYLlIHIey9Qgs98ddFenY4OB+//sgf8A6OMGd dNASMFc8zrJuuPP/ATF9zTyNbbWTvlg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:07:09 2026 by rpki-client