$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/443d4948-0ae2-37a0-9f00-4351b761fb8c.roa File: 443d4948-0ae2-37a0-9f00-4351b761fb8c.roa (raw, json) Hash identifier: oEiIpAuZpHlNMQuQXel2N4NePeV2kPUvRHKgHl2QbW8= Subject key identifier: 5B:0E:DE:81:65:11:45:5C:A1:CB:96:15:F7:1F:26:D3:B3:4D:4C:1F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F241AED3DE9133BE793969288 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/443d4948-0ae2-37a0-9f00-4351b761fb8c.roa Signing time: Fri 11 Sep 2026 15:58:48 +0000 ROA not before: Fri 11 Sep 2026 15:58:48 +0000 ROA not after: Thu 10 Dec 2026 16:58:48 +0000 asID: 214776 IP address blocks: 38.211.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:1a:ed:3d:e9:13:3b:e7:93:96:92:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 15:58:48 2026 GMT Not After : Dec 10 16:58:48 2026 GMT Subject: CN=d5628df0-d697-49e0-be5a-ad280ae79f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:d3:a7:37:02:4e:17:81:e0:f3:ae:a4:9c: 86:de:0c:cc:9d:29:99:d8:0c:41:ca:f7:53:28:92: 40:d1:c2:13:ab:7b:51:c4:8d:26:7e:50:c3:56:a9: dd:fc:16:32:fb:16:65:2a:35:02:0d:18:2c:49:98: 99:57:55:03:85:c7:d5:b3:4b:25:c8:f2:03:d9:f9: d6:51:f8:ef:6f:cc:e5:2d:cd:46:d7:49:3a:be:fe: 0b:27:b6:ac:4c:a2:c3:c5:2d:b9:0c:22:5f:c2:b5: bc:ed:56:3e:08:f8:10:19:be:a2:ce:9b:06:17:25: 84:98:1c:d7:32:a8:65:83:76:6c:2e:be:41:0b:d6: 30:fb:ba:9d:86:74:9b:c2:a9:c1:c8:b5:1c:4d:11: 4f:fd:6a:3d:a6:6f:36:e4:13:bf:44:d5:e7:4e:72: b6:00:96:c4:57:dd:1b:8d:7b:95:f1:ac:e7:cb:5f: a4:2e:31:93:89:f9:16:34:8f:50:6b:81:e6:be:be: a2:3a:0a:6a:28:29:db:97:8b:f2:6a:51:36:ef:9b: 67:58:90:6a:fa:28:d4:6a:b3:6d:13:e2:b7:bc:31: 6e:9f:11:07:ef:1b:92:77:62:6a:aa:d0:27:80:62: 76:99:06:4b:8e:7f:10:ed:03:61:bb:9d:5d:50:b5: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:DE:81:65:11:45:5C:A1:CB:96:15:F7:1F:26:D3:B3:4D:4C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/443d4948-0ae2-37a0-9f00-4351b761fb8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f2:41:97:53:8a:33:35:b4:99:cf:9d:b1:34:b6:d0:59:4e: 8d:e0:c9:62:1f:a8:81:a2:a8:4c:af:2c:bc:ee:0f:d9:63:24: 20:38:04:cd:2d:c9:6b:ea:0c:6b:35:ec:b4:3a:a8:34:4e:bf: b9:aa:f5:db:2c:67:46:dc:72:6a:2d:a3:d3:72:9d:0c:3f:27: 71:04:2d:d0:f8:50:6d:5d:a7:3d:27:52:26:de:b0:cd:fb:4b: d9:6e:66:66:9c:cd:5c:91:71:05:dd:ea:3c:95:f7:d9:37:3d: 96:34:2c:05:e0:33:7a:33:4e:ae:52:d9:a9:7a:4c:29:f4:bd: 5f:a2:03:e3:8d:7d:12:f1:ef:15:90:ef:43:59:ab:ad:9c:dd: 5f:6e:ed:7c:a8:d6:77:87:1a:61:65:57:47:de:df:e4:0f:9e: da:f0:38:d2:e4:6f:26:a0:cc:1b:cd:0b:79:1e:4d:16:5e:fd: f4:24:d9:e9:50:e3:02:c8:66:48:75:89:72:82:c8:5f:e7:a9: a7:a7:d9:90:b2:83:7a:b8:f4:b8:22:e0:39:a9:45:e5:eb:80: 17:3f:d5:98:36:da:91:16:93:39:16:f1:aa:14:9a:c1:cf:30: 9a:6e:63:08:f3:6b:33:7c:26:fb:df:7e:4c:d9:0e:0e:b8:fb: 6c:c4:f5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kGu096RM755OWkogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTE1NTg0OFoXDTI2MTIxMDE2NTg0OFowLzEtMCsGA1UEAxMk ZDU2MjhkZjAtZDY5Ny00OWUwLWJlNWEtYWQyODBhZTc5ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjufTpzcCTheB4POupJyG3gzMnSmZ2AxByvdT KJJA0cITq3tRxI0mflDDVqnd/BYy+xZlKjUCDRgsSZiZV1UDhcfVs0slyPID2fnW Ufjvb8zlLc1G10k6vv4LJ7asTKLDxS25DCJfwrW87VY+CPgQGb6izpsGFyWEmBzX Mqhlg3ZsLr5BC9Yw+7qdhnSbwqnByLUcTRFP/Wo9pm825BO/RNXnTnK2AJbEV90b jXuV8azny1+kLjGTifkWNI9Qa4Hmvr6iOgpqKCnbl4vyalE275tnWJBq+ijUarNt E+K3vDFunxEH7xuSd2JqqtAngGJ2mQZLjn8Q7QNhu51dULV5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsO3oFlEUVcocuWFfcfJtOzTUwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDQzZDQ5NDgtMGFlMi0z N2EwLTlmMDAtNDM1MWI3NjFmYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJtNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/yQZdTijM1tJnPnbE0ttBZTo3gyWIfqIGiqEyvLLzuD9ljJCA4BM0t yWvqDGs17LQ6qDROv7mq9dssZ0bccmoto9NynQw/J3EELdD4UG1dpz0nUibesM37 S9luZmaczVyRcQXd6jyV99k3PZY0LAXgM3ozTq5S2al6TCn0vV+iA+ONfRLx7xWQ 70NZq62c3V9u7Xyo1neHGmFlV0fe3+QPntrwONLkbyagzBvNC3keTRZe/fQk2elQ 4wLIZkh1iXKCyF/nqaen2ZCyg3q49Lgi4DmpReXrgBc/1Zg22pEWkzkW8aoUmsHP MJpuYwjzazN8JvvffkzZDg64+2zE9T0= -----END CERTIFICATE-----Generated at Fri Sep 25 23:18:23 2026 by rpki-client