$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa File: 0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa (raw, json) Hash identifier: tB3T0tdQRJlnk9OCtsLG2pAwklDjoIsGWhButthI01g= Subject key identifier: 05:D7:50:54:8F:65:5E:C2:17:47:28:00:10:B3:9D:27:5E:F3:3F:94 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498C20881BA9BA5C73B02980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46783 IP address blocks: 38.20.184.0/21 maxlen: 24 38.45.232.0/21 maxlen: 24 38.57.234.0/23 maxlen: 24 38.64.56.0/21 maxlen: 24 38.65.88.0/21 maxlen: 24 38.71.18.0/24 maxlen: 24 38.114.88.0/21 maxlen: 24 38.123.112.0/21 maxlen: 24 38.146.29.0/24 maxlen: 24 38.146.30.0/24 maxlen: 24 38.255.16.0/23 maxlen: 24 154.50.110.0/24 maxlen: 24 154.51.40.0/23 maxlen: 24 154.53.74.0/23 maxlen: 24 209.146.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:20:88:1b:a9:ba:5c:73:b0:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=71a8d699-fb13-4912-abe4-85259e3d2ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:c2:09:45:be:2f:f2:42:df:36:78:39:9e: 26:56:82:d0:dd:26:48:f8:f7:b1:6a:69:cb:f4:5b: 7f:16:7a:ef:f8:8d:4f:45:7a:d6:6e:bc:4b:94:a1: c5:68:9b:8f:b6:92:77:3c:e8:93:c8:74:b3:d9:12: ee:4a:51:ef:8a:e6:ee:6c:f6:9a:8a:1a:f1:e7:3b: 7d:7c:2a:01:19:d4:67:31:e2:13:0e:ca:3d:4e:11: 49:c1:cb:91:ec:fb:9f:f7:ea:74:6a:04:d8:44:7e: 79:6a:77:07:f1:c6:15:0c:cd:e7:00:ad:60:1d:ba: 88:f2:fa:c9:8f:59:df:bd:28:90:bc:5f:28:f2:f9: be:d2:b0:83:e2:5b:0d:d7:81:cf:eb:c8:36:8b:15: 2e:11:75:88:56:f7:22:de:74:b2:0b:e6:b0:44:a7: 6d:a9:e9:fa:aa:2c:ce:ec:a3:3b:bd:6f:c0:e8:41: 09:a0:9f:3f:15:7d:6e:c0:2b:fa:e5:53:6a:3d:26: 82:74:8a:0f:b4:f3:49:5c:08:c2:dc:be:0e:f0:d0: 96:7d:85:d1:50:dd:41:ac:d1:7e:3d:2b:e5:10:40: 01:7a:23:9d:12:4d:15:f6:95:a2:28:05:ac:b4:b8: 9b:b6:ea:2b:28:0f:dc:ba:60:4f:8f:9c:94:b7:84: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D7:50:54:8F:65:5E:C2:17:47:28:00:10:B3:9D:27:5E:F3:3F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.184.0/21 38.45.232.0/21 38.57.234.0/23 38.64.56.0/21 38.65.88.0/21 38.71.18.0/24 38.114.88.0/21 38.123.112.0/21 38.146.29.0-38.146.30.255 38.255.16.0/23 154.50.110.0/24 154.51.40.0/23 154.53.74.0/23 209.146.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:5f:d9:f5:d8:a8:2c:e9:8a:61:71:ae:9a:f8:fc:af:6d:8c: 34:40:26:fd:57:9a:94:d3:d8:4b:bd:eb:0a:15:12:5e:05:d0: e9:76:54:52:29:d1:b8:12:8c:83:ce:86:2b:c5:01:7e:2c:74: 97:f2:f0:60:69:82:72:57:88:62:8a:3e:3c:6f:6d:22:31:96: 3c:e3:0e:f5:4c:e5:6d:77:1e:af:31:24:d1:1c:83:0e:6f:f8: e9:08:1d:dd:47:38:65:61:65:a7:82:fb:02:9a:ba:22:5d:c6: c9:36:3c:18:30:79:30:5f:3e:8d:36:5f:72:eb:cf:16:3c:76: 0c:90:53:99:9e:5c:10:60:15:a3:38:9e:a1:28:7e:cf:75:c8: bb:1d:5f:91:e4:fb:22:2d:f9:bd:80:0c:94:3c:08:ba:1e:99: 33:cb:66:99:e0:c3:7c:98:82:05:fb:05:18:9c:7a:79:67:c1: 53:a8:46:03:d8:0b:07:76:be:8f:a6:73:e9:e7:c9:b4:79:45: 11:ea:9c:e1:af:7c:7f:06:1f:5c:78:98:a1:80:d2:40:ff:26: cc:08:11:1e:76:7c:3b:c1:70:f6:fc:20:bd:cd:78:b3:ee:e6: 59:a0:fb:33:08:5c:31:63:a5:25:65:82:bc:b0:9e:00:eb:18: e3:32:74:c4 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUAQ0Mn0MoWE9JjCCIG6m6XHOwKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzFhOGQ2OTktZmIxMy00OTEyLWFiZTQtODUyNTllM2QyZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+nCCUW+L/JC3zZ4OZ4mVoLQ3SZI+PexamnL 9Ft/Fnrv+I1PRXrWbrxLlKHFaJuPtpJ3POiTyHSz2RLuSlHviububPaaihrx5zt9 fCoBGdRnMeITDso9ThFJwcuR7Puf9+p0agTYRH55ancH8cYVDM3nAK1gHbqI8vrJ j1nfvSiQvF8o8vm+0rCD4lsN14HP68g2ixUuEXWIVvci3nSyC+awRKdtqen6qizO 7KM7vW/A6EEJoJ8/FX1uwCv65VNqPSaCdIoPtPNJXAjC3L4O8NCWfYXRUN1BrNF+ PSvlEEABeiOdEk0V9pWiKAWstLibtuorKA/cumBPj5yUt4SvtQIDAQABo4IDqzCC A6cwHQYDVR0OBBYEFAXXUFSPZV7CF0coABCznSde8z+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGZhOTM3YWMtZWE1OC0z YjM2LWI0NDQtYWJlM2ViMWUwYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQDJhS4AwQD Ji3oAwQBJjnqAwQDJkA4AwQDJkFYAwQAJkcSAwQDJnJYAwQDJntwMAwDBAAmkh0D BAAmkh4DBAEm/xADBACaMm4DBAGaMygDBAGaNUoDBADRknQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAzV/Z 9dioLOmKYXGumvj8r22MNEAm/VealNPYS73rChUSXgXQ6XZUUinRuBKMg86GK8UB fix0l/LwYGmCcleIYoo+PG9tIjGWPOMO9UzlbXcerzEk0RyDDm/46Qgd3Uc4ZWFl p4L7Apq6Il3GyTY8GDB5MF8+jTZfcuvPFjx2DJBTmZ5cEGAVozieoSh+z3XIux1f keT7Ii35vYAMlDwIuh6ZM8tmmeDDfJiCBfsFGJx6eWfBU6hGA9gLB3a+j6Zz6efJ tHlFEeqc4a98fwYfXHiYoYDSQP8mzAgRHnZ8O8Fw9vwgvc14s+7mWaD7MwhcMWOl JWWCvLCeAOsY4zJ0xA== -----END CERTIFICATE-----Generated at Sun Sep 27 07:23:52 2026 by rpki-client