$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b7b547a-ba0a-34d7-935e-23f57dbe09a5.roa File: 3b7b547a-ba0a-34d7-935e-23f57dbe09a5.roa (raw, json) Hash identifier: oLdDqhERphaM9mDdoI6GCi8pMLw1iUurD9kUSumggE8= Subject key identifier: 5A:E1:DF:75:6E:5B:EC:CA:EE:29:71:78:48:77:EF:58:CF:1B:D0:92 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F71EC3BF0F561D39BBEFB2618 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b7b547a-ba0a-34d7-935e-23f57dbe09a5.roa Signing time: Fri 09 Oct 2026 12:57:47 +0000 ROA not before: Fri 09 Oct 2026 12:57:47 +0000 ROA not after: Thu 31 Dec 2026 21:30:30 +0000 asID: 273567 IP address blocks: 38.51.252.0/22 maxlen: 24 38.210.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ec:3b:f0:f5:61:d3:9b:be:fb:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 12:57:47 2026 GMT Not After : Dec 31 21:30:30 2026 GMT Subject: CN=26ae82d2-1558-45f2-b090-7149a92058b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:d2:af:19:9f:96:a6:c5:69:f5:55:49:2e: 2b:37:6a:e8:70:dd:a8:3a:b9:f9:50:79:67:c7:88: b4:38:b8:49:4a:60:7d:45:09:55:b0:e3:9b:d3:69: 57:65:1b:0b:d5:16:21:32:98:83:42:a7:3f:58:0a: 1f:b4:34:4a:b2:d8:c1:db:b2:b3:27:06:36:a1:20: d4:9d:40:ec:f0:c7:a7:94:0f:18:b9:a8:c4:c6:35: 06:b5:e7:ce:04:e6:49:76:9a:7c:6e:c2:d0:9b:4b: 1b:1d:1c:70:4c:00:cd:34:62:e8:81:8a:3b:f2:3b: a2:0f:0a:52:e1:0c:33:51:3b:00:00:ee:2d:98:2b: 6f:e2:e1:13:a5:24:ef:2b:5a:4a:f4:f8:cc:ab:93: a1:c1:82:35:ff:6b:85:49:95:88:ff:71:09:ed:41: 24:df:e7:dc:73:11:b5:5e:77:5d:ea:d7:03:38:20: 2a:2a:f8:28:2c:73:ee:8b:04:48:3e:e1:1c:53:ef: c7:55:6d:f5:8b:35:f6:9b:ad:9e:4e:2c:e4:76:a2: d7:b3:81:50:25:d9:16:24:b8:bd:b1:4b:2a:e2:88: 43:92:6f:c6:e3:34:42:12:ba:cc:a7:b0:56:f2:fb: b7:06:87:94:2b:63:51:bb:41:5e:4d:89:fc:69:b6: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:DF:75:6E:5B:EC:CA:EE:29:71:78:48:77:EF:58:CF:1B:D0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b7b547a-ba0a-34d7-935e-23f57dbe09a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.51.252.0/22 38.210.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:85:9f:d2:55:09:0e:78:8a:ba:82:f9:90:6e:23:b5:14:aa: ef:0d:80:ae:5e:5c:e4:8e:9c:d3:30:eb:4c:1e:53:db:d5:65: 9f:b3:14:73:4a:30:2a:ae:f5:82:e3:c1:09:b4:66:f2:d8:2c: cf:9c:2a:f6:e1:9f:0d:76:f6:6d:59:4f:75:00:23:ab:46:a4: 50:18:91:90:da:2d:b8:22:8d:79:f9:84:a9:65:68:e0:c2:14: 21:b5:59:6f:c4:f2:22:67:61:64:10:c8:b4:d5:a5:bc:e4:6f: 6a:b9:5f:43:6e:ab:ce:d8:3a:a8:b1:ab:c1:00:d1:36:78:f2: 16:ae:c1:83:77:98:7e:70:76:e3:7c:60:86:ee:a6:72:2c:d2: dc:5e:f9:1f:40:fd:ef:f4:ec:71:5c:aa:7f:46:3b:5b:b6:f2: 94:02:68:98:5f:e8:81:d1:ae:e2:3d:fc:34:30:04:23:5a:3a: 5c:a1:71:15:85:2f:31:40:36:dd:ce:72:15:fe:2f:6f:6e:9e: 6e:34:6a:18:0c:0b:fa:86:9a:bb:5d:b2:b4:79:52:c7:f2:de: a1:84:52:1f:eb:8d:e7:31:63:55:20:4d:80:f1:95:8b:21:a6: 2c:33:92:8b:90:87:44:1a:66:4d:8b:01:0f:69:40:2e:61:37: b9:a0:07:68 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9x7Dvw9WHTm777JhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwOTEyNTc0N1oXDTI2MTIzMTIxMzAzMFowLzEtMCsGA1UEAxMk MjZhZTgyZDItMTU1OC00NWYyLWIwOTAtNzE0OWE5MjA1OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv3SrxmflqbFafVVSS4rN2rocN2oOrn5UHln x4i0OLhJSmB9RQlVsOOb02lXZRsL1RYhMpiDQqc/WAoftDRKstjB27KzJwY2oSDU nUDs8MenlA8YuajExjUGtefOBOZJdpp8bsLQm0sbHRxwTADNNGLogYo78juiDwpS 4QwzUTsAAO4tmCtv4uETpSTvK1pK9PjMq5OhwYI1/2uFSZWI/3EJ7UEk3+fccxG1 Xndd6tcDOCAqKvgoLHPuiwRIPuEcU+/HVW31izX2m62eTizkdqLXs4FQJdkWJLi9 sUsq4ohDkm/G4zRCErrMp7BW8vu3BoeUK2NRu0FeTYn8abZt0wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFrh33VuW+zK7ilxeEh371jPG9CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2I3YjU0N2EtYmEwYS0z NGQ3LTkzNWUtMjNmNTdkYmUwOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJjP8AwQA JtJ+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHiFn9JVCQ54irqC+ZBuI7UUqu8NgK5eXOSOnNMw60weU9vV ZZ+zFHNKMCqu9YLjwQm0ZvLYLM+cKvbhnw129m1ZT3UAI6tGpFAYkZDaLbgijXn5 hKllaODCFCG1WW/E8iJnYWQQyLTVpbzkb2q5X0Nuq87YOqixq8EA0TZ48hauwYN3 mH5wduN8YIbupnIs0txe+R9A/e/07HFcqn9GO1u28pQCaJhf6IHRruI9/DQwBCNa OlyhcRWFLzFANt3OchX+L29unm40ahgMC/qGmrtdsrR5Usfy3qGEUh/rjecxY1Ug TYDxlYshpiwzkouQh0QaZk2LAQ9pQC5hN7mgB2g= -----END CERTIFICATE-----Generated at Tue Oct 20 22:53:49 2026 by rpki-client