$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bc3d29b-3603-3cde-8745-091c9ba24847.roa File: 1bc3d29b-3603-3cde-8745-091c9ba24847.roa (raw, json) Hash identifier: ewjYfDbHfrc04aKB0lBBuTbTYINHguGm+xgy9zHEVMI= Subject key identifier: DC:AF:2F:87:AF:22:0C:D0:67:BA:42:FF:9F:4F:9A:DB:CA:39:8B:E0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F454280C8CA20E657C87CE600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bc3d29b-3603-3cde-8745-091c9ba24847.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 273133 IP address blocks: 38.19.228.0/22 maxlen: 24 38.172.128.0/22 maxlen: 23 38.190.100.0/22 maxlen: 24 38.225.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:80:c8:ca:20:e6:57:c8:7c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=b1e855c4-f965-43e1-966e-4f0d45a105e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:ad:8c:f0:f1:2c:0b:51:f4:5e:3f:76:f4: 0d:6a:b1:46:8d:36:a4:45:16:d8:78:ba:dd:af:bd: 1c:72:88:62:2a:b5:62:ec:cb:ff:1f:52:37:47:3d: 31:77:7b:18:7a:35:2f:96:60:05:e0:8f:cd:61:f5: 9d:25:94:17:eb:68:bb:3a:4d:b2:91:53:82:06:34: 36:28:c4:b0:e7:e9:a9:44:85:b3:ad:85:66:96:c3: 5b:0f:2d:b5:70:e6:fa:39:4c:de:1c:58:bb:fe:a0: 5d:78:55:9c:3f:96:37:70:a0:ec:2e:e4:74:c9:9b: d8:27:41:30:38:2b:2e:86:79:0e:4e:e8:ac:91:ec: cc:ec:d9:18:ed:12:aa:25:a0:9f:7e:22:e8:64:84: 80:40:59:eb:ba:9d:78:ea:10:bd:e1:63:40:d0:37: db:2a:6d:f9:e6:af:1e:1a:c5:a4:50:39:fe:e1:4b: 39:ca:db:7d:b9:7f:48:c7:27:c3:be:72:63:5a:40: 4e:99:51:04:ba:48:62:74:c9:38:67:d4:e0:3f:51: ba:7c:2b:03:c2:3e:31:9a:e4:c5:61:36:02:3e:5b: 37:bd:41:ad:da:f3:d2:31:e8:d2:fb:f1:c1:12:1e: ea:d3:3e:78:42:6f:22:76:bd:7c:5e:5f:99:87:81: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AF:2F:87:AF:22:0C:D0:67:BA:42:FF:9F:4F:9A:DB:CA:39:8B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bc3d29b-3603-3cde-8745-091c9ba24847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.228.0/22 38.172.128.0/22 38.190.100.0/22 38.225.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:23:15:e4:99:af:93:e4:bf:dd:47:9d:8a:68:52:99:16:df: bf:11:43:39:0d:a8:2c:d9:af:cf:9f:01:05:e8:49:4f:5d:b1: 5b:34:b9:b7:0a:f1:8b:52:c1:3c:37:c9:cc:8d:cb:df:ab:60: 22:df:11:1e:5b:e0:68:2f:cf:11:de:d1:c9:26:53:32:7b:2c: de:7f:37:f8:15:3f:29:8b:bb:6b:40:95:26:71:3f:1f:17:7a: d7:a4:91:0a:56:9a:76:c8:6f:64:fa:98:96:ce:2d:8d:9c:48: 43:ae:3f:24:da:70:5c:d0:4b:ec:ed:10:a2:32:dd:a1:e7:4b: b0:dc:b2:c4:c5:b3:9d:c8:9b:e3:ad:61:f8:b2:b3:5d:0f:02: 27:90:c7:85:7b:bf:29:cb:33:1c:0d:32:ca:3e:29:f8:dc:81: aa:ee:45:56:39:bb:a6:4f:db:7b:10:36:20:93:d4:68:a3:be: 25:83:a1:d9:4c:30:66:b2:54:3d:30:05:89:6e:6a:a8:cb:3d: d2:bb:b5:a3:ae:02:f6:24:d9:ed:66:a6:fd:6b:39:b1:4e:72: c8:46:db:d0:dc:1d:2b:5b:d2:d8:53:75:4f:d8:86:58:49:23: ca:45:d4:9e:f5:c0:b7:4b:85:32:6b:f1:e2:8a:ee:24:6e:30: 91:8d:d4:cc -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9FQoDIyiDmV8h85gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YjFlODU1YzQtZjk2NS00M2UxLTk2NmUtNGYwZDQ1YTEwNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3GtjPDxLAtR9F4/dvQNarFGjTakRRbYeLrd r70ccohiKrVi7Mv/H1I3Rz0xd3sYejUvlmAF4I/NYfWdJZQX62i7Ok2ykVOCBjQ2 KMSw5+mpRIWzrYVmlsNbDy21cOb6OUzeHFi7/qBdeFWcP5Y3cKDsLuR0yZvYJ0Ew OCsuhnkOTuiskezM7NkY7RKqJaCffiLoZISAQFnrup146hC94WNA0DfbKm355q8e GsWkUDn+4Us5ytt9uX9IxyfDvnJjWkBOmVEEukhidMk4Z9TgP1G6fCsDwj4xmuTF YTYCPls3vUGt2vPSMejS+/HBEh7q0z54Qm8idr18Xl+Zh4GbPQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFNyvL4evIgzQZ7pC/59PmtvKOYvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWJjM2QyOWItMzYwMy0z Y2RlLTg3NDUtMDkxYzliYTI0ODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCJhPkAwQC JqyAAwQCJr5kAwQDJuEgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAAjFeSZr5Pkv91HnYpoUpkW378RQzkN qCzZr8+fAQXoSU9dsVs0ubcK8YtSwTw3ycyNy9+rYCLfER5b4GgvzxHe0ckmUzJ7 LN5/N/gVPymLu2tAlSZxPx8XetekkQpWmnbIb2T6mJbOLY2cSEOuPyTacFzQS+zt EKIy3aHnS7DcssTFs53Im+OtYfiys10PAieQx4V7vynLMxwNMso+KfjcgaruRVY5 u6ZP23sQNiCT1GijviWDodlMMGayVD0wBYluaqjLPdK7taOuAvYk2e1mpv1rObFO cshG29DcHStb0thTdU/YhlhJI8pF1J71wLdLhTJr8eKK7iRuMJGN1Mw= -----END CERTIFICATE-----Generated at Sat Sep 26 11:41:48 2026 by rpki-client