$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2bf177c4-d721-3f51-9646-1ea7a781a4c7.roa File: 2bf177c4-d721-3f51-9646-1ea7a781a4c7.roa (raw, json) Hash identifier: R8N/82Ru47OHcn5WGUN4aCWycTbVBSy3SSuBD3H7Muk= Subject key identifier: 16:A9:D9:E9:96:15:1D:A1:29:65:D7:A4:E9:D0:B3:CE:B7:61:27:19 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F549DAB6DBE8B96CA4C685788 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2bf177c4-d721-3f51-9646-1ea7a781a4c7.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 39944 IP address blocks: 38.52.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:ab:6d:be:8b:96:ca:4c:68:57:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6b8a2b2d-d003-4283-bd9e-9b1b6f78c357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:da:84:30:e0:78:6a:e3:a3:68:9a:2e:42: db:5d:c9:7d:21:c6:43:b8:84:ec:ed:08:a7:9f:2d: ec:0e:35:73:19:d6:8e:a8:8d:94:7b:ad:33:30:66: 3a:20:3e:5c:4c:b5:3d:e6:0e:96:04:7c:0e:6a:26: 07:8a:50:9d:74:8a:fb:dd:b9:36:c5:fe:0d:10:59: ae:0d:b4:ef:d6:f5:6e:e9:b3:c8:40:16:79:08:96: e7:84:dc:10:cb:24:ee:c0:88:49:9c:f3:1c:c0:b2: 05:f1:5c:a0:22:07:a8:fb:36:32:b7:7a:58:54:01: 50:ec:42:46:3c:a4:4f:cf:e5:cd:6c:d7:a9:cc:ee: 4c:90:8b:4f:6a:b6:22:02:d3:99:85:f6:a4:d5:4d: e4:eb:4a:b6:1c:cc:da:fe:d6:7b:ef:21:57:ae:73: e9:0f:18:b8:51:ff:9b:0d:60:93:cb:cb:0b:4c:79: ef:dd:71:42:93:c5:15:1b:32:64:c7:1a:28:d2:90: 95:2a:41:29:4d:7e:ba:d8:79:26:90:80:b1:dd:09: 0d:31:56:78:b6:f6:74:fe:57:d2:6f:ed:61:93:05: aa:69:1e:74:d7:07:05:8e:24:d2:91:37:17:0f:00: 6c:e6:83:f0:fd:8d:e2:f1:2d:21:91:6f:81:a8:27: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A9:D9:E9:96:15:1D:A1:29:65:D7:A4:E9:D0:B3:CE:B7:61:27:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2bf177c4-d721-3f51-9646-1ea7a781a4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.52.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:30:8e:5f:a9:a0:77:2a:e2:4a:ed:8b:92:d4:1e:d2:47:b4: d5:24:8b:73:6f:6f:77:ef:39:3a:67:db:7c:52:53:de:a2:02: a3:20:39:07:56:76:96:f5:18:71:30:17:13:9a:bd:20:9d:15: 09:8e:64:a7:ad:3c:40:e4:01:e6:57:9c:10:84:34:00:28:77: d2:18:60:32:8f:c5:20:3a:9d:17:a9:75:49:d3:2f:49:c6:2e: ea:eb:fd:84:5e:92:88:7b:a2:ca:d5:c0:3d:75:6a:da:f9:6b: d5:0a:61:5d:18:dd:0e:2d:b5:58:7f:ef:7e:34:64:d0:79:db: e6:c0:44:84:98:ee:14:58:91:60:7c:ee:fd:b0:08:b5:dc:82: 41:ec:93:59:e8:7b:60:00:af:69:42:71:b9:cd:78:6b:66:64: 15:f6:39:22:cc:85:8b:44:e9:b6:ce:39:98:b2:82:73:5b:eb: c6:ba:92:90:bc:53:30:69:8d:8b:cc:6d:7c:fa:26:74:53:47: 5b:72:ad:fe:aa:d1:6c:fc:ec:dc:38:d9:5e:f0:30:f8:f9:2b: 4b:3c:20:ee:43:2a:49:ae:df:ee:ab:71:87:68:6a:b7:c5:07: 98:e7:9a:a7:6b:c7:68:1c:ce:73:f9:86:36:9c:fc:b7:01:fd: 2d:d5:e4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnattvouWykxoV4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NmI4YTJiMmQtZDAwMy00MjgzLWJkOWUtOWIxYjZmNzhjMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOzahDDgeGrjo2iaLkLbXcl9IcZDuITs7Qin ny3sDjVzGdaOqI2Ue60zMGY6ID5cTLU95g6WBHwOaiYHilCddIr73bk2xf4NEFmu DbTv1vVu6bPIQBZ5CJbnhNwQyyTuwIhJnPMcwLIF8VygIgeo+zYyt3pYVAFQ7EJG PKRPz+XNbNepzO5MkItParYiAtOZhfak1U3k60q2HMza/tZ77yFXrnPpDxi4Uf+b DWCTy8sLTHnv3XFCk8UVGzJkxxoo0pCVKkEpTX662HkmkICx3QkNMVZ4tvZ0/lfS b+1hkwWqaR501wcFjiTSkTcXDwBs5oPw/Y3i8S0hkW+BqCfNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBap2emWFR2hKWXXpOnQs863YScZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmJmMTc3YzQtZDcyMS0z ZjUxLTk2NDYtMWVhN2E3ODFhNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJjTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIwjl+poHcq4krti5LUHtJHtNUki3Nvb3fvOTpn23xSU96iAqMgOQdW dpb1GHEwFxOavSCdFQmOZKetPEDkAeZXnBCENAAod9IYYDKPxSA6nRepdUnTL0nG Lurr/YRekoh7osrVwD11atr5a9UKYV0Y3Q4ttVh/7340ZNB52+bARISY7hRYkWB8 7v2wCLXcgkHsk1noe2AAr2lCcbnNeGtmZBX2OSLMhYtE6bbOOZiygnNb68a6kpC8 UzBpjYvMbXz6JnRTR1tyrf6q0Wz87Nw42V7wMPj5K0s8IO5DKkmu3+6rcYdoarfF B5jnmqdrx2gcznP5hjac/LcB/S3V5DQ= -----END CERTIFICATE-----Generated at Sat Oct 3 22:44:40 2026 by rpki-client