$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/157c53a0-0673-35d3-a2ec-5b0735490cc9.roa File: 157c53a0-0673-35d3-a2ec-5b0735490cc9.roa (raw, json) Hash identifier: IWLk4df5S35QgHuDKck68bta4rkbGlLLYT4AjAOe0pQ= Subject key identifier: D7:F1:14:C7:54:64:05:8F:89:44:04:76:1A:53:B5:5F:20:72:5B:F6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F305290E428AEDDEBBEC08680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/157c53a0-0673-35d3-a2ec-5b0735490cc9.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 64116 IP address blocks: 38.56.96.0/24 maxlen: 24 38.56.99.0/24 maxlen: 24 38.56.100.0/24 maxlen: 24 38.56.122.0/24 maxlen: 24 38.56.123.0/24 maxlen: 24 38.137.193.0/24 maxlen: 24 38.199.81.0/24 maxlen: 24 38.199.82.0/24 maxlen: 24 38.199.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:90:e4:28:ae:dd:eb:be:c0:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=d1cd9acc-cac4-4f57-bc0c-22d6beb13c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:68:25:96:c8:7f:d8:8b:57:fd:8d:bb:52: ca:1b:f6:01:77:83:77:51:03:f4:fb:22:09:68:b4: 71:e1:be:e8:61:f1:2e:e2:b4:a5:b8:49:67:e7:79: e3:af:08:12:86:cc:e2:f8:9c:ce:4d:37:34:10:70: 41:48:d2:87:15:dd:af:4f:3e:03:4d:5d:e9:84:fc: e8:5c:16:d0:f1:b7:a7:36:c1:e4:d9:b5:90:53:ad: 56:a2:5d:1f:79:1b:06:21:a7:e4:c6:0e:59:74:9d: 0b:e8:96:db:64:92:fc:81:eb:f6:52:14:bb:4d:d8: 89:20:5a:dc:41:f9:67:4d:8b:41:ac:b3:07:cd:51: 1f:e7:d3:62:6b:3f:34:f4:f6:d5:c8:9a:94:68:15: fb:fa:1d:d2:99:e5:18:b0:4e:66:67:bc:ee:29:e9: 1a:4b:09:78:14:a4:c9:1c:8e:c0:bc:2f:f4:59:93: f7:98:fe:37:ba:95:b8:7c:a8:25:72:b3:dd:aa:80: c3:39:ef:b2:38:e5:fa:a7:3c:11:1a:f0:9d:66:28: 8c:cd:1d:10:28:b0:de:7b:d8:0d:72:ae:6c:60:46: 54:62:fe:06:54:76:d7:bd:2f:ef:e2:c3:d9:c6:60: 8a:18:b3:05:3b:18:c1:ce:fd:00:da:07:62:8d:60: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F1:14:C7:54:64:05:8F:89:44:04:76:1A:53:B5:5F:20:72:5B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/157c53a0-0673-35d3-a2ec-5b0735490cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.96.0/24 38.56.99.0-38.56.100.255 38.56.122.0/23 38.137.193.0/24 38.199.81.0-38.199.83.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5d:a0:91:35:6a:69:81:e8:bb:82:16:0b:58:e0:1b:1e:50: 7a:ea:55:39:46:b3:0b:b9:f1:ec:29:ed:b4:d2:c9:9f:64:3d: ff:8e:fd:6b:08:35:e0:45:b3:e6:59:26:a7:38:cc:6c:39:27: ea:f4:62:7e:4a:ac:78:54:04:a5:72:13:e6:12:f3:12:f5:64: c1:74:cf:a7:1c:c5:0b:43:7a:c7:21:08:d4:34:58:9e:b7:34: 86:81:4d:35:58:4d:f7:89:af:31:c7:d7:45:1b:18:25:f3:01: 52:05:c0:3c:42:2a:35:f2:e5:d7:0d:6d:6b:b6:9c:38:99:87: 69:16:d2:90:6a:a2:38:74:b7:c4:ad:28:91:5a:0c:8f:21:b9: 57:b7:f3:2e:aa:c4:36:cf:cb:0d:dd:1d:0e:c4:1c:6b:39:69: 3a:ca:1f:c0:49:b8:34:a6:e1:f7:c4:77:e2:c3:57:13:a1:53: b7:82:6f:97:21:90:62:c6:c7:b8:e1:b5:50:21:83:d1:c3:e1: 0a:4c:2b:9d:4d:21:de:f3:b4:99:02:fc:ad:81:f1:fc:b3:7d: 68:89:2a:c6:1c:3d:77:3b:fa:23:08:a1:45:d6:73:51:4c:7b: d3:fe:85:fe:95:5a:fd:87:61:d2:85:9f:2f:92:ad:08:aa:de: ff:f9:fe:40 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE8wUpDkKK7d677AhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDFjZDlhY2MtY2FjNC00ZjU3LWJjMGMtMjJkNmJlYjEzYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8VoJZbIf9iLV/2Nu1LKG/YBd4N3UQP0+yIJ aLRx4b7oYfEu4rSluEln53njrwgShszi+JzOTTc0EHBBSNKHFd2vTz4DTV3phPzo XBbQ8benNsHk2bWQU61Wol0feRsGIafkxg5ZdJ0L6JbbZJL8gev2UhS7TdiJIFrc QflnTYtBrLMHzVEf59Niaz809PbVyJqUaBX7+h3SmeUYsE5mZ7zuKekaSwl4FKTJ HI7AvC/0WZP3mP43upW4fKglcrPdqoDDOe+yOOX6pzwRGvCdZiiMzR0QKLDee9gN cq5sYEZUYv4GVHbXvS/v4sPZxmCKGLMFOxjBzv0A2gdijWCSUQIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFNfxFMdUZAWPiUQEdhpTtV8gclv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTU3YzUzYTAtMDY3My0z NWQzLWEyZWMtNWIwNzM1NDkwY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAJjhgMAwD BAAmOGMDBAAmOGQDBAEmOHoDBAAmicEwDAMEACbHUQMEAibHUDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCR XaCRNWppgei7ghYLWOAbHlB66lU5RrMLufHsKe200smfZD3/jv1rCDXgRbPmWSan OMxsOSfq9GJ+Sqx4VASlchPmEvMS9WTBdM+nHMULQ3rHIQjUNFietzSGgU01WE33 ia8xx9dFGxgl8wFSBcA8Qio18uXXDW1rtpw4mYdpFtKQaqI4dLfErSiRWgyPIblX t/MuqsQ2z8sN3R0OxBxrOWk6yh/ASbg0puH3xHfiw1cToVO3gm+XIZBixse44bVQ IYPRw+EKTCudTSHe87SZAvytgfH8s31oiSrGHD13O/ojCKFF1nNRTHvT/oX+lVr9 h2HShZ8vkq0Iqt7/+f5A -----END CERTIFICATE-----Generated at Sun Sep 27 01:26:18 2026 by rpki-client