$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cd28a91-72e6-311d-8877-d576722a2203.roa File: 1cd28a91-72e6-311d-8877-d576722a2203.roa (raw, json) Hash identifier: wsoBQiOK4KNRy+u/u0Cw5bjW3BUcqSQbOAEPgGyJLfw= Subject key identifier: 67:17:AC:8C:B0:33:52:1F:1A:5B:9B:3A:53:CA:79:2A:1F:6A:05:25 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4974E0238FFDCDE496CD7D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cd28a91-72e6-311d-8877-d576722a2203.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 150008 IP address blocks: 38.31.241.0/24 maxlen: 24 38.31.242.0/23 maxlen: 24 38.31.244.0/22 maxlen: 24 38.31.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e0:23:8f:fd:cd:e4:96:cd:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee7f51c5-6ae1-4b6a-96b0-ab613e33c4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:53:8d:66:0d:15:19:b8:0d:be:46:6e:dd: 3a:d3:56:06:10:0f:47:41:78:5d:aa:ff:8e:d5:70: 94:a2:37:99:99:3e:fd:11:af:41:f7:bd:89:33:7f: f0:4d:b8:dc:6a:73:45:b4:d2:6e:f8:87:c2:7f:1d: 28:44:63:d5:d8:4d:46:e4:ce:3c:79:b8:73:31:fd: 5e:a8:c6:10:a8:87:d0:eb:e3:6a:4a:bb:23:f0:62: 37:68:bc:e3:96:7d:f9:0a:cf:f6:a5:c8:1f:9e:b2: 1d:1a:61:34:c0:5c:44:ba:dc:37:6e:2c:f0:f7:83: 5c:44:d5:6b:66:ee:93:1d:ba:b5:02:48:08:f2:d5: d7:9a:f8:d5:a9:96:8a:d7:90:35:43:41:f6:0c:1a: 71:78:d2:34:cf:ee:ae:7b:0e:f2:5d:c5:d2:66:3f: be:eb:73:6e:52:c8:33:46:1d:81:96:fb:bc:a7:0c: 20:0d:0b:81:c7:3e:88:ec:70:29:50:59:a4:90:f8: eb:b8:fd:b6:ce:f2:61:76:4d:9c:75:bd:4b:26:7e: 57:50:70:e6:56:0e:ea:75:7d:05:b6:f5:c7:db:74: 31:39:5c:4e:bd:bc:ca:1c:a6:60:fd:cf:7f:8e:b4: ec:02:65:b5:e3:28:04:9d:7a:59:8c:33:19:71:81: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:AC:8C:B0:33:52:1F:1A:5B:9B:3A:53:CA:79:2A:1F:6A:05:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cd28a91-72e6-311d-8877-d576722a2203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.31.241.0-38.31.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5d:b6:ca:7d:4e:89:dc:bb:4a:4c:f8:e5:0d:16:3e:bd:2b: 67:a2:53:55:62:94:d8:1e:53:b9:d6:e5:d1:3e:49:f0:7c:6f: 2c:85:be:fa:d1:cc:c8:77:03:d9:98:9b:5a:b7:09:24:ea:14: 0a:32:d9:76:3e:ef:50:bb:49:36:80:35:14:f8:c0:b5:9d:78: 2f:14:57:54:14:c5:d9:4d:78:64:73:c9:fb:4b:3b:61:7c:f0: 29:56:36:13:d5:39:f2:8d:54:3a:3a:1b:b2:77:33:84:4b:03: 9f:f4:39:db:fa:2a:07:f4:be:06:a8:33:62:e8:a8:3b:06:a6: b8:23:9e:0c:fd:16:de:b7:4d:8f:9b:60:0d:d6:34:30:82:38: 86:59:4a:28:2e:63:f1:e7:9b:dd:67:d7:38:3a:ad:b3:0d:a9: b8:c9:80:c0:0e:43:eb:6a:43:59:fc:ad:3e:39:31:41:cf:13: 56:56:67:0c:dc:1e:14:a0:82:6b:7c:ad:32:bd:79:6e:14:92: a9:23:c8:59:27:35:4c:f0:96:ba:19:56:06:40:3d:50:4b:c2: 16:19:b8:bd:80:ad:47:aa:09:82:47:55:a3:e9:b2:ff:55:d9: a8:9e:59:56:cc:6c:b7:79:51:7d:2c:4c:00:eb:72:c6:cd:62: b3:d6:76:a6 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE9JdOAjj/3N5JbNfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWU3ZjUxYzUtNmFlMS00YjZhLTk2YjAtYWI2MTNlMzNjNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq35TjWYNFRm4Db5Gbt0601YGEA9HQXhdqv+O 1XCUojeZmT79Ea9B972JM3/wTbjcanNFtNJu+IfCfx0oRGPV2E1G5M48ebhzMf1e qMYQqIfQ6+NqSrsj8GI3aLzjln35Cs/2pcgfnrIdGmE0wFxEutw3bizw94NcRNVr Zu6THbq1AkgI8tXXmvjVqZaK15A1Q0H2DBpxeNI0z+6uew7yXcXSZj++63NuUsgz Rh2Blvu8pwwgDQuBxz6I7HApUFmkkPjruP22zvJhdk2cdb1LJn5XUHDmVg7qdX0F tvXH23QxOVxOvbzKHKZg/c9/jrTsAmW14ygEnXpZjDMZcYG4qQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFGcXrIywM1IfGlubOlPKeSofagUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWNkMjhhOTEtNzJlNi0z MTFkLTg4NzctZDU3NjcyMmEyMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAAmH/ED AwUmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQC5XbbKfU6J3LtKTPjlDRY+vStnolNVYpTYHlO51uXRPknw fG8shb760czIdwPZmJtatwkk6hQKMtl2Pu9Qu0k2gDUU+MC1nXgvFFdUFMXZTXhk c8n7SzthfPApVjYT1TnyjVQ6OhuydzOESwOf9Dnb+ioH9L4GqDNi6Kg7Bqa4I54M /Rbet02Pm2AN1jQwgjiGWUooLmPx55vdZ9c4Oq2zDam4yYDADkPrakNZ/K0+OTFB zxNWVmcM3B4UoIJrfK0yvXluFJKpI8hZJzVM8Ja6GVYGQD1QS8IWGbi9gK1HqgmC R1Wj6bL/VdmonllWzGy3eVF9LEwA63LGzWKz1nam -----END CERTIFICATE-----Generated at Thu Oct 1 22:52:27 2026 by rpki-client