$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa File: 0952f43e-16b7-3030-95a3-48a989059742.roa (raw, json) Hash identifier: 5fkD9oZfVk6YY+TJWwJF4SaUKpwK9AZfPQtXC7TrEEU= Subject key identifier: 00:15:37:34:85:EB:0C:9C:9F:CC:E8:BC:EB:D1:FA:F0:61:ED:58:28 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4974C4B303B13CC7D1228D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 270165 IP address blocks: 38.19.204.0/22 maxlen: 24 38.43.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c4:b3:03:b1:3c:c7:d1:22:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e0b2f40e-e06b-4fe1-a06b-fe8a8628dfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:58:03:0c:34:a9:eb:ae:fb:c6:94:f0:08: 6e:0b:dd:df:97:de:f0:0c:d7:b5:cf:d7:76:30:7c: aa:76:aa:d1:87:0b:32:0a:f6:b6:f4:2f:f6:4b:95: c9:ce:7b:68:14:8e:99:22:5d:36:3c:8e:2f:b3:86: 17:cf:6c:0c:70:47:e3:88:29:26:de:ad:5b:90:7c: 6c:e4:31:2e:e4:da:d4:82:13:e6:35:4e:b3:0e:10: f5:dd:dc:86:88:df:23:75:84:ce:c5:b5:91:97:48: 90:f1:d1:61:8c:c9:d1:1b:b3:55:c6:c5:5c:c2:d1: 7f:b7:ba:e2:ea:60:b7:61:e9:fe:a7:44:d9:0d:14: 09:f7:44:58:85:1d:05:46:d5:eb:12:ec:9f:23:58: 21:97:13:0d:96:e6:4a:f4:06:54:10:a9:17:fe:1d: ad:cd:53:af:ac:9c:23:a6:2b:05:b4:aa:27:29:95: 93:19:bf:dc:83:8b:d7:15:1d:c7:10:3a:ff:ea:60: fd:e4:7e:27:c9:52:a0:1b:96:58:74:61:64:1b:ea: d6:73:8e:21:cb:d4:0a:a4:2a:1d:6c:b0:3f:64:b8: 0b:88:f1:e3:91:36:9a:62:db:91:5f:0f:fc:6f:ff: 76:d6:20:3c:1a:2d:d8:4a:f4:8b:80:57:45:56:64: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:15:37:34:85:EB:0C:9C:9F:CC:E8:BC:EB:D1:FA:F0:61:ED:58:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.204.0/22 38.43.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:68:19:b8:6c:00:00:79:9a:9b:91:58:53:8e:c0:2b:bd:57: 3d:51:77:46:c6:a4:cb:32:8f:3b:a4:9e:61:f5:b7:b3:82:c9: 1a:ef:76:9c:09:9f:25:5a:28:fe:bd:ba:6c:31:bc:10:42:5c: ed:70:50:b2:91:26:ea:99:8e:dc:81:7a:24:8f:41:8e:e6:08: 9f:f2:84:09:0d:99:f1:90:ed:d6:cc:76:5a:79:c3:60:bd:40: 58:a1:c6:11:7c:90:7b:09:e2:dd:56:48:38:dc:9f:94:06:6c: b6:d9:d0:17:e6:be:a7:50:be:c3:cb:4b:c9:42:b5:97:81:b5: da:41:d8:9c:58:09:c9:a7:2e:74:28:ad:7c:34:77:17:93:f5: 59:83:1e:a4:3e:30:40:c7:6c:4d:a7:ef:c8:8c:ae:e7:07:ef: 59:1b:0a:e4:f8:4d:81:b5:80:83:f7:9e:4c:77:d6:9e:cb:8d: 39:c7:30:12:35:61:31:56:16:bf:f0:3e:4e:c5:98:1a:dc:87: db:ec:96:a0:aa:38:26:37:a8:64:63:aa:bb:e8:61:0b:56:6e: 48:39:03:56:9e:c6:28:34:ac:5f:ec:25:2c:3c:c4:6d:2b:78: 4b:ea:4a:e9:12:7b:ea:47:78:76:34:62:99:e7:25:0b:c7:d9: 8d:5b:66:a3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdMSzA7E8x9EijYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTBiMmY0MGUtZTA2Yi00ZmUxLWEwNmItZmU4YTg2MjhkZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueFYAww0qeuu+8aU8AhuC93fl97wDNe1z9d2 MHyqdqrRhwsyCva29C/2S5XJzntoFI6ZIl02PI4vs4YXz2wMcEfjiCkm3q1bkHxs 5DEu5NrUghPmNU6zDhD13dyGiN8jdYTOxbWRl0iQ8dFhjMnRG7NVxsVcwtF/t7ri 6mC3Yen+p0TZDRQJ90RYhR0FRtXrEuyfI1ghlxMNluZK9AZUEKkX/h2tzVOvrJwj pisFtKonKZWTGb/cg4vXFR3HEDr/6mD95H4nyVKgG5ZYdGFkG+rWc44hy9QKpCod bLA/ZLgLiPHjkTaaYtuRXw/8b/921iA8Gi3YSvSLgFdFVmSy4QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAAVNzSF6wycn8zovOvR+vBh7VgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDk1MmY0M2UtMTZiNy0z MDMwLTk1YTMtNDhhOTg5MDU5NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJhPMAwQC JitgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEhoGbhsAAB5mpuRWFOOwCu9Vz1Rd0bGpMsyjzuknmH1t7OC yRrvdpwJnyVaKP69umwxvBBCXO1wULKRJuqZjtyBeiSPQY7mCJ/yhAkNmfGQ7dbM dlp5w2C9QFihxhF8kHsJ4t1WSDjcn5QGbLbZ0BfmvqdQvsPLS8lCtZeBtdpB2JxY CcmnLnQorXw0dxeT9VmDHqQ+MEDHbE2n78iMrucH71kbCuT4TYG1gIP3nkx31p7L jTnHMBI1YTFWFr/wPk7FmBrch9vslqCqOCY3qGRjqrvoYQtWbkg5A1aexig0rF/s JSw8xG0reEvqSukSe+pHeHY0YpnnJQvH2Y1bZqM= -----END CERTIFICATE-----Generated at Sat Oct 3 19:35:18 2026 by rpki-client