$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3df73626-6f0e-383c-a80e-8b3bcf55a300.roa File: 3df73626-6f0e-383c-a80e-8b3bcf55a300.roa (raw, json) Hash identifier: 1a7hntM8xYBVf0bG7P9raH5O3gmvTN/ChGTAdYdwdFA= Subject key identifier: 07:D1:C1:BA:B4:89:BA:7C:58:38:75:46:A0:91:45:4D:AD:B9:C8:37 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F53A3C1476D042A12B3717E40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3df73626-6f0e-383c-a80e-8b3bcf55a300.roa Signing time: Mon 28 Sep 2026 16:37:29 +0000 ROA not before: Mon 28 Sep 2026 16:37:29 +0000 ROA not after: Sun 27 Dec 2026 17:37:29 +0000 asID: 273000 IP address blocks: 38.252.208.0/24 maxlen: 24 38.252.209.0/24 maxlen: 24 38.252.211.0/24 maxlen: 24 38.252.213.0/24 maxlen: 24 38.252.214.0/24 maxlen: 24 38.252.216.0/24 maxlen: 24 38.252.219.0/24 maxlen: 24 38.252.220.0/24 maxlen: 24 38.252.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:c1:47:6d:04:2a:12:b3:71:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 28 16:37:29 2026 GMT Not After : Dec 27 17:37:29 2026 GMT Subject: CN=90def0e2-9f62-4813-8f54-c60a395e6e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:3f:4b:a4:c1:f2:be:e4:e4:2f:3c:75:a6: 0f:a4:23:39:2b:4b:27:68:d7:ec:76:56:b4:ea:ad: d1:52:8c:6b:d2:95:10:e5:ff:82:83:01:e6:5b:83: 61:d3:08:c6:5a:e1:c9:12:b2:d1:95:92:3d:58:d2: f4:e7:37:fd:73:06:c3:1a:cf:7b:45:08:21:cd:64: 32:24:3d:b6:e1:80:b3:be:9a:11:93:2c:03:fa:65: 06:25:8a:9f:30:3d:3e:b8:64:dd:6f:dc:7b:b6:84: 74:be:b7:0c:0f:ba:04:6d:28:22:fe:db:7c:cb:44: 15:65:00:ef:27:32:6e:5c:1c:48:de:bc:64:d3:c2: 80:17:f8:95:d8:db:e9:3e:7c:10:05:65:6d:f4:dd: 85:c7:b5:8a:24:68:32:13:90:cd:ed:a0:02:cf:09: aa:fd:57:55:69:21:f9:fd:db:2d:a6:86:2d:2c:e8: eb:d4:6c:86:79:02:0e:6d:cf:03:a2:8a:3e:63:75: 65:e0:c1:d4:5f:30:2f:d8:94:11:54:91:51:ea:47: cd:ca:e0:62:92:3d:7b:f8:04:e2:25:54:b0:dd:66: f4:13:c7:db:7f:df:d3:9e:20:62:8f:5b:23:b6:31: bf:a8:96:de:88:58:65:42:f1:f8:15:b5:c3:2a:7e: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D1:C1:BA:B4:89:BA:7C:58:38:75:46:A0:91:45:4D:AD:B9:C8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3df73626-6f0e-383c-a80e-8b3bcf55a300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.208.0/23 38.252.211.0/24 38.252.213.0-38.252.214.255 38.252.216.0/24 38.252.219.0-38.252.221.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:69:65:e7:a3:67:c0:75:be:21:39:58:0b:d8:97:9a:28:87: 83:05:73:e9:e8:08:d6:a7:de:da:c4:65:e1:3d:b3:fc:51:09: 6b:a2:71:4a:62:4f:7e:9a:fb:5f:33:83:b1:92:bf:62:66:c4: 3a:95:dc:d8:d4:19:94:09:9a:86:c3:41:ca:91:f3:b7:7e:35: a3:e5:57:82:b5:da:3d:62:60:c7:c7:89:7f:ad:a9:42:8e:f1: fc:e3:23:b2:a4:6b:ca:60:a4:76:d9:e5:41:0f:b0:21:7d:4c: bd:28:1f:0f:95:7b:49:19:2d:32:ba:4e:72:cb:7e:a4:bb:78: b2:3f:ae:db:54:30:7b:b8:b1:65:36:f7:90:b3:43:90:b4:9e: 30:4a:a3:24:14:5c:fb:fb:94:fc:a9:30:2a:cd:92:3a:0e:bc: a5:aa:5e:4d:3e:72:d0:22:f3:62:9c:6c:14:65:17:e9:f3:ae: d8:e3:92:76:5c:75:78:89:52:11:72:e5:6c:6a:e5:68:11:b8: 34:41:f3:08:e3:10:25:34:be:37:91:76:3f:65:21:f3:1e:1f: 01:65:79:71:9f:23:6b:af:2d:dd:b8:39:31:55:cf:e5:79:89: 50:d7:4f:5c:a8:d2:9a:6d:53:9e:db:02:e2:b5:96:55:de:66: 83:72:3a:f0 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE9To8FHbQQqErNxfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyODE2MzcyOVoXDTI2MTIyNzE3MzcyOVowLzEtMCsGA1UEAxMk OTBkZWYwZTItOWY2Mi00ODEzLThmNTQtYzYwYTM5NWU2ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3w/S6TB8r7k5C88daYPpCM5K0snaNfsdla0 6q3RUoxr0pUQ5f+CgwHmW4Nh0wjGWuHJErLRlZI9WNL05zf9cwbDGs97RQghzWQy JD224YCzvpoRkywD+mUGJYqfMD0+uGTdb9x7toR0vrcMD7oEbSgi/tt8y0QVZQDv JzJuXBxI3rxk08KAF/iV2NvpPnwQBWVt9N2Fx7WKJGgyE5DN7aACzwmq/VdVaSH5 /dstpoYtLOjr1GyGeQIObc8Dooo+Y3Vl4MHUXzAv2JQRVJFR6kfNyuBikj17+ATi JVSw3Wb0E8fbf9/TniBij1sjtjG/qJbeiFhlQvH4FbXDKn7A3wIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFAfRwbq0ibp8WDh1RqCRRU2tucg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2RmNzM2MjYtNmYwZS0z ODNjLWE4MGUtOGIzYmNmNTVhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBJvzQAwQA JvzTMAwDBAAm/NUDBAAm/NYDBAAm/NgwDAMEACb82wMEASb83DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa aWXno2fAdb4hOVgL2JeaKIeDBXPp6AjWp97axGXhPbP8UQlronFKYk9+mvtfM4Ox kr9iZsQ6ldzY1BmUCZqGw0HKkfO3fjWj5VeCtdo9YmDHx4l/ralCjvH84yOypGvK YKR22eVBD7AhfUy9KB8PlXtJGS0yuk5yy36ku3iyP67bVDB7uLFlNveQs0OQtJ4w SqMkFFz7+5T8qTAqzZI6Drylql5NPnLQIvNinGwUZRfp867Y45J2XHV4iVIRcuVs auVoEbg0QfMI4xAlNL43kXY/ZSHzHh8BZXlxnyNrry3duDkxVc/leYlQ109cqNKa bVOe2wLitZZV3maDcjrw -----END CERTIFICATE-----Generated at Wed Oct 14 10:06:05 2026 by rpki-client