$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/38c68ec2-47f0-348d-8196-6a2679069f53.roa File: 38c68ec2-47f0-348d-8196-6a2679069f53.roa (raw, json) Hash identifier: toBEUqpZUzp74D8sL2g8Tudtw4xky0p3f6yE5iZWi28= Subject key identifier: CD:7E:F5:A3:44:00:5F:A3:3B:99:D4:D2:ED:40:2E:23:95:6A:E8:4E Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F0CBC3D1CD51B1569C4C56440 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/38c68ec2-47f0-348d-8196-6a2679069f53.roa Signing time: Thu 03 Sep 2026 07:04:26 +0000 ROA not before: Thu 03 Sep 2026 07:04:26 +0000 ROA not after: Wed 02 Dec 2026 08:04:26 +0000 asID: 6079 IP address blocks: 104.140.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:bc:3d:1c:d5:1b:15:69:c4:c5:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 3 07:04:26 2026 GMT Not After : Dec 2 08:04:26 2026 GMT Subject: CN=d7b02f7a-9b99-46b3-9b52-a0cd81bc0495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:4a:f1:8f:23:a7:0b:f9:6c:cb:d9:db:6f: 38:bd:4e:50:61:58:bf:3c:91:1a:21:ed:8d:3d:78: 41:89:c8:5f:cb:da:74:f2:ac:82:c6:ef:c7:c6:dc: fc:ce:d8:0e:7b:8d:b1:a9:e0:47:60:85:7a:7f:32: b1:d2:c9:d7:21:e8:22:0a:cc:eb:12:08:f5:17:cb: 45:33:e4:33:b7:09:4c:c9:b7:0c:db:1c:08:01:e7: 85:30:fe:d8:6b:75:36:42:96:24:c8:88:fb:09:31: c2:13:a1:f9:08:08:01:3e:cd:df:84:5c:3a:44:f4: 35:4c:10:96:53:4a:c4:a0:35:71:a5:2b:eb:f2:27: 13:bf:7c:d4:42:f8:22:ca:33:12:f9:e9:ab:af:2a: c9:56:85:97:6a:fc:56:8a:ac:04:b8:fa:84:9b:28: d1:9b:ca:95:31:a7:4c:a2:9b:5e:27:1d:61:14:61: a2:8a:d4:25:f8:38:c5:d0:e7:41:d8:1d:b5:d4:99: fd:b2:2b:28:82:36:c1:5f:c2:d6:d0:cf:94:5e:67: 8f:61:59:ca:b3:ee:79:b7:f2:68:fa:f5:86:d3:2a: 14:eb:93:7f:74:f6:e5:06:c4:d6:42:2d:8c:b0:06: b1:37:82:79:87:06:b4:b2:46:be:a9:04:f2:5f:ae: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7E:F5:A3:44:00:5F:A3:3B:99:D4:D2:ED:40:2E:23:95:6A:E8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/38c68ec2-47f0-348d-8196-6a2679069f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d5:97:23:6b:c7:88:c3:48:41:87:d3:31:bc:ca:75:30:c2: ea:15:e7:a1:50:76:cb:cc:74:e0:fb:3b:52:18:8b:87:e2:92: 8f:98:e9:2f:c9:ab:00:da:33:89:9d:f0:b9:cc:2e:d3:38:85: 47:87:bb:8e:bb:4b:62:e5:a2:0f:b0:0f:7a:fd:75:35:6f:4e: 10:41:b8:c5:ba:33:ee:53:af:3c:c6:ae:4f:27:45:8b:2c:ca: aa:9a:f9:c4:3f:e7:db:68:bc:f8:6d:48:a0:d0:37:fa:48:ff: be:11:df:6a:fe:26:b3:66:f8:f5:62:6c:69:cf:76:7a:a9:46: cd:db:93:c8:8b:6e:d6:4c:6c:d9:9d:29:c3:f5:9c:b3:24:e1: 89:c7:7e:22:dc:4b:86:60:79:47:72:18:6d:97:96:12:e7:4c: 0b:cf:da:29:8b:c7:e9:a9:bd:e0:31:11:1e:82:f4:9b:c0:f6: 0f:79:d8:4d:97:30:eb:6f:41:ec:cc:11:e6:29:d8:74:96:e9: cd:3b:b4:34:1d:05:43:11:f3:56:0e:f5:ff:51:2e:29:b0:fb: 6d:91:ea:e4:fa:f6:48:62:53:d3:b4:72:03:69:8e:45:f2:d3: b0:77:56:a0:a0:50:f0:b4:d8:a2:cd:c9:16:ed:b6:7c:e5:2a: ac:e4:f6:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MvD0c1RsVacTFZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwMzA3MDQyNloXDTI2MTIwMjA4MDQyNlowLzEtMCsGA1UEAxMk ZDdiMDJmN2EtOWI5OS00NmIzLTliNTItYTBjZDgxYmMwNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApONK8Y8jpwv5bMvZ2284vU5QYVi/PJEaIe2N PXhBichfy9p08qyCxu/Hxtz8ztgOe42xqeBHYIV6fzKx0snXIegiCszrEgj1F8tF M+QztwlMybcM2xwIAeeFMP7Ya3U2QpYkyIj7CTHCE6H5CAgBPs3fhFw6RPQ1TBCW U0rEoDVxpSvr8icTv3zUQvgiyjMS+emrryrJVoWXavxWiqwEuPqEmyjRm8qVMadM opteJx1hFGGiitQl+DjF0OdB2B211Jn9sisogjbBX8LW0M+UXmePYVnKs+55t/Jo +vWG0yoU65N/dPblBsTWQi2MsAaxN4J5hwa0ska+qQTyX66QtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1+9aNEAF+jO5nU0u1ALiOVauhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzhjNjhlYzItNDdmMC0z NDhkLTgxOTYtNmEyNjc5MDY5ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIzHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/VlyNrx4jDSEGH0zG8ynUwwuoV56FQdsvMdOD7O1IYi4fiko+Y6S/J qwDaM4md8LnMLtM4hUeHu467S2Llog+wD3r9dTVvThBBuMW6M+5TrzzGrk8nRYss yqqa+cQ/59tovPhtSKDQN/pI/74R32r+JrNm+PVibGnPdnqpRs3bk8iLbtZMbNmd KcP1nLMk4YnHfiLcS4ZgeUdyGG2XlhLnTAvP2imLx+mpveAxER6C9JvA9g952E2X MOtvQezMEeYp2HSW6c07tDQdBUMR81YO9f9RLimw+22R6uT69khiU9O0cgNpjkXy 07B3VqCgUPC02KLNyRbttnzlKqzk9gI= -----END CERTIFICATE-----Generated at Thu Sep 3 22:30:06 2026 by rpki-client