$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ff1c334-0d40-3926-89b1-773aab620acf.roa File: 4ff1c334-0d40-3926-89b1-773aab620acf.roa (raw, json) Hash identifier: ieT4qgR885h+RVegxSZszhdwH6YBzd5MkXKEoESWRtI= Subject key identifier: 47:09:C5:F7:91:9C:E2:CF:15:E8:98:8B:9C:67:DC:CF:D7:5F:66:2F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F480D428D70B87CBC93FA3D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ff1c334-0d40-3926-89b1-773aab620acf.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 201749 IP address blocks: 154.38.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:42:8d:70:b8:7c:bc:93:fa:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=595fcfce-2ce5-43e8-baae-b55efc0aa5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:bc:61:d3:f8:eb:ed:1e:54:20:19:01:37: 68:e4:b2:ec:cc:1a:6c:7d:76:db:b7:20:19:05:e3: 37:36:bd:f6:44:00:8a:22:a5:f1:39:96:28:09:b9: 58:29:8b:e2:47:9a:36:17:f5:1e:73:e4:62:39:26: 43:22:ae:f5:b6:8d:e8:da:19:24:95:fd:73:27:aa: 16:6a:13:29:a9:0c:91:d7:89:06:45:8f:10:88:ad: 6b:4d:23:19:92:57:7a:d2:20:f9:ac:45:ef:94:c8: b4:e0:c2:03:11:54:65:14:50:76:0e:1b:7a:49:2c: 1c:cc:b5:84:41:06:e9:99:af:26:1f:3c:4f:42:df: 56:a5:4f:97:ed:e9:4a:77:68:9b:d1:45:47:28:d5: eb:0f:17:4a:4b:de:b3:b6:c0:82:13:8f:66:d9:45: 3f:0a:59:b7:0f:8c:74:af:f5:a2:17:e5:c9:ac:b3: 39:a9:2b:44:82:09:47:5a:63:d7:e9:03:9a:0d:29: 5b:82:f9:d2:ed:7f:34:23:3c:73:ad:2b:90:d9:5b: c8:e6:4d:c1:b9:56:57:bf:bd:03:28:73:50:88:de: 6f:ca:39:09:93:fb:e7:84:8d:9f:7b:0e:93:23:e3: 36:a8:ab:69:b9:82:12:c3:da:73:f2:ed:7f:97:49: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:09:C5:F7:91:9C:E2:CF:15:E8:98:8B:9C:67:DC:CF:D7:5F:66:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ff1c334-0d40-3926-89b1-773aab620acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.38.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:61:7b:04:f4:75:32:ea:04:3a:5a:a2:5b:e8:d1:be:92:35: 42:a0:d3:14:a4:d6:cb:79:a9:13:9e:1d:da:75:46:c3:5b:e3: c6:90:d0:89:20:19:ac:0c:28:20:22:17:93:0f:82:89:78:cb: 67:5c:84:91:b3:e0:75:36:56:0f:49:c6:5a:3f:a2:54:99:f3: a9:4e:96:c7:30:d6:3b:bd:0b:e8:0f:1a:46:7a:07:f6:c7:5b: 07:0d:51:0e:0f:56:14:5c:70:c8:53:50:1f:85:6b:23:c7:51: 70:e5:64:76:35:95:2b:d1:ba:a3:af:8e:b9:c4:02:b6:9e:d9: 7a:c5:80:74:14:07:9d:a9:7f:22:ab:36:e2:46:76:26:cd:c0: bf:b1:e5:2a:c0:66:69:ad:7e:8e:7b:94:e1:83:fa:99:d0:a7: 86:66:22:2d:59:21:20:64:6c:3f:94:80:ec:03:16:53:ec:69: 98:01:17:69:ce:59:76:ae:49:ac:fa:3c:30:a8:05:71:06:18: 90:68:8a:c8:3b:9b:d3:c7:a3:30:ed:45:ae:13:a3:33:46:92: ae:c0:54:31:a7:26:a4:3d:c2:4e:25:65:c3:ab:aa:cc:10:cb: d7:7c:49:9c:ec:d1:9d:20:1e:3b:3b:aa:1d:6c:76:04:ff:3b: dd:5c:ea:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUKNcLh8vJP6PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NTk1ZmNmY2UtMmNlNS00M2U4LWJhYWUtYjU1ZWZjMGFhNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi+8YdP46+0eVCAZATdo5LLszBpsfXbbtyAZ BeM3Nr32RACKIqXxOZYoCblYKYviR5o2F/Uec+RiOSZDIq71to3o2hkklf1zJ6oW ahMpqQyR14kGRY8QiK1rTSMZkld60iD5rEXvlMi04MIDEVRlFFB2Dht6SSwczLWE QQbpma8mHzxPQt9WpU+X7elKd2ib0UVHKNXrDxdKS96ztsCCE49m2UU/Clm3D4x0 r/WiF+XJrLM5qStEgglHWmPX6QOaDSlbgvnS7X80IzxzrSuQ2VvI5k3BuVZXv70D KHNQiN5vyjkJk/vnhI2few6TI+M2qKtpuYISw9pz8u1/l0m/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcJxfeRnOLPFeiYi5xn3M/XX2YvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGZmMWMzMzQtMGQ0MC0z OTI2LTg5YjEtNzczYWFiNjIwYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmiYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExhewT0dTLqBDpaolvo0b6SNUKg0xSk1st5qROeHdp1RsNb48aQ0Ikg GawMKCAiF5MPgol4y2dchJGz4HU2Vg9Jxlo/olSZ86lOlscw1ju9C+gPGkZ6B/bH WwcNUQ4PVhRccMhTUB+FayPHUXDlZHY1lSvRuqOvjrnEArae2XrFgHQUB52pfyKr NuJGdibNwL+x5SrAZmmtfo57lOGD+pnQp4ZmIi1ZISBkbD+UgOwDFlPsaZgBF2nO WXauSaz6PDCoBXEGGJBoisg7m9PHozDtRa4TozNGkq7AVDGnJqQ9wk4lZcOrqswQ y9d8SZzs0Z0gHjs7qh1sdgT/O91c6hw= -----END CERTIFICATE-----Generated at Sat Sep 26 05:56:56 2026 by rpki-client