$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66fe3f29-5dfa-320c-96d3-907533cf7d8b.roa File: 66fe3f29-5dfa-320c-96d3-907533cf7d8b.roa (raw, json) Hash identifier: RxchIFyBQj55WxHYallAoyoVoSAU+Fl9WIMOXn+RXOY= Subject key identifier: 33:80:A5:D1:D8:12:35:12:40:DC:25:B3:F8:D3:B5:87:E8:7F:75:28 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4C3D61D5FB105F4ABC0DD200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66fe3f29-5dfa-320c-96d3-907533cf7d8b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 272864 IP address blocks: 38.196.254.0/23 maxlen: 24 38.252.107.0/24 maxlen: 24 38.252.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:61:d5:fb:10:5f:4a:bc:0d:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a9717e5d-0ad1-4db1-8a0c-caa1818fe27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:16:ac:89:92:71:89:53:3e:fa:30:b7:6f: a6:25:f6:0c:0e:21:27:e8:24:70:b7:11:21:fe:63: cd:60:12:b8:73:26:ba:35:87:11:37:68:20:94:9b: ae:2d:8b:df:47:7e:af:66:2b:cc:7d:12:ef:e2:fd: 4f:a0:22:1e:37:d8:d4:c6:ff:ec:de:53:8a:fc:92: fe:73:03:36:5d:5d:e3:6d:dd:7b:a8:07:97:fb:56: bd:b1:b4:fa:d6:dc:20:ec:1a:2e:2c:24:7d:5f:6e: 98:4c:19:7e:1a:c4:33:e8:fe:77:83:71:11:ed:4b: dc:f0:b8:03:49:87:67:18:3c:2c:f2:75:7b:87:37: 91:a8:a3:20:38:9e:28:27:d4:24:45:01:90:6c:66: a9:00:fe:b2:d2:73:86:c5:a7:fd:07:e3:6c:1d:61: 88:c2:83:9b:94:e3:b4:d3:2a:d4:46:34:e9:13:20: c7:f1:21:64:29:bc:16:c0:05:d7:bd:d3:f0:02:2b: ea:58:00:df:91:74:35:49:0d:5b:c4:88:92:73:d4: 67:8d:2d:d8:01:84:b7:c0:93:29:2d:98:31:87:64: b0:f0:c9:0d:9e:51:8a:6d:4a:da:83:fa:58:76:03: 8e:37:a6:a4:2f:24:8e:07:1b:97:45:11:fb:b5:0f: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:A5:D1:D8:12:35:12:40:DC:25:B3:F8:D3:B5:87:E8:7F:75:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66fe3f29-5dfa-320c-96d3-907533cf7d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.254.0/23 38.252.107.0/24 38.252.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b3:d1:c1:25:0c:ff:b5:6f:2f:7f:ac:de:d4:d9:07:6c:87: 87:62:de:40:eb:33:61:9a:a4:72:e9:13:28:76:68:6a:ea:ea: bc:e1:3b:6b:65:22:c2:29:a2:be:cb:a8:40:f0:a8:f7:ed:ba: 2d:d7:b4:ba:6a:3d:f0:6c:15:cc:81:ab:f5:6f:10:ab:ae:f6: 28:41:8c:4c:a7:26:54:f3:44:ca:39:a9:54:37:58:25:51:3d: a5:f9:db:c8:a2:5b:fc:2f:11:6c:1f:d9:d5:bc:0a:d9:9a:f9: 52:e0:32:8d:45:77:8d:e9:5e:3f:20:4b:3b:12:a2:60:43:04: d7:e4:fb:9b:95:e5:ba:c0:4c:53:ea:28:42:1b:c9:e6:16:19: 6b:29:32:fa:47:ac:0a:cf:90:c0:ce:ad:cf:e4:ad:b0:00:df: db:50:e5:7f:b4:9c:a9:e0:0d:56:b5:4d:89:05:6c:92:86:61: 25:e2:70:22:be:01:f1:aa:fe:35:e8:cb:f4:3d:b1:88:45:83: b9:ad:93:f6:d7:9d:04:3e:ef:2b:b2:fc:c2:18:81:fb:b6:9a: 13:d7:0e:93:ac:da:b2:c7:fb:40:3b:68:86:01:00:ad:3a:b0: 16:e3:7c:bf:c1:9e:de:88:d3:7a:f2:da:6f:5f:6d:c7:77:a6: 5f:46:52:41 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9MPWHV+xBfSrwN0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTk3MTdlNWQtMGFkMS00ZGIxLThhMGMtY2FhMTgxOGZlMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtEWrImScYlTPvowt2+mJfYMDiEn6CRwtxEh /mPNYBK4cya6NYcRN2gglJuuLYvfR36vZivMfRLv4v1PoCIeN9jUxv/s3lOK/JL+ cwM2XV3jbd17qAeX+1a9sbT61twg7BouLCR9X26YTBl+GsQz6P53g3ER7Uvc8LgD SYdnGDws8nV7hzeRqKMgOJ4oJ9QkRQGQbGapAP6y0nOGxaf9B+NsHWGIwoOblOO0 0yrURjTpEyDH8SFkKbwWwAXXvdPwAivqWADfkXQ1SQ1bxIiSc9RnjS3YAYS3wJMp LZgxh2Sw8MkNnlGKbUrag/pYdgOON6akLySOBxuXRRH7tQ8dEQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDOApdHYEjUSQNwls/jTtYfof3UoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjZmZTNmMjktNWRmYS0z MjBjLTk2ZDMtOTA3NTMzY2Y3ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBJsT+AwQA JvxrAwQAJvzjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAASz0cElDP+1by9/rN7U2Qdsh4di3kDrM2GapHLp Eyh2aGrq6rzhO2tlIsIpor7LqEDwqPftui3XtLpqPfBsFcyBq/VvEKuu9ihBjEyn JlTzRMo5qVQ3WCVRPaX528iiW/wvEWwf2dW8Ctma+VLgMo1Fd43pXj8gSzsSomBD BNfk+5uV5brATFPqKEIbyeYWGWspMvpHrArPkMDOrc/krbAA39tQ5X+0nKngDVa1 TYkFbJKGYSXicCK+AfGq/jXoy/Q9sYhFg7mtk/bXnQQ+7yuy/MIYgfu2mhPXDpOs 2rLH+0A7aIYBAK06sBbjfL/Bnt6I03ry2m9fbcd3pl9GUkE= -----END CERTIFICATE-----Generated at Sat Sep 26 08:15:20 2026 by rpki-client