$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708913e2-0f67-39af-92d6-310746ddadfb.roa File: 708913e2-0f67-39af-92d6-310746ddadfb.roa (raw, json) Hash identifier: sqXtDdlgfx8d7NW19LwEWHn8Wu55j4kPfeU887feeEU= Subject key identifier: A1:87:F8:80:70:F5:BA:E5:C9:BC:B9:6C:B6:13:71:91:0D:33:C5:B8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3CE2ACC976463C116C5851C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708913e2-0f67-39af-92d6-310746ddadfb.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 273197 IP address blocks: 38.94.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:ac:c9:76:46:3c:11:6c:58:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=02fc6cb1-70fd-4fd3-bd7c-a6a674700730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:dd:ab:cd:a0:78:a6:b8:73:c9:89:71:83: 23:17:65:4f:e2:54:1f:e7:e3:97:45:cf:2a:d3:1b: 37:a6:8b:c5:c7:2f:8d:a2:5d:3d:cf:9f:c1:71:1a: ee:30:80:49:bb:a6:c0:f4:7a:0b:9e:1b:b8:44:49: c3:7e:90:1e:ee:5f:07:15:60:3b:53:b3:98:1b:8f: 8c:b2:01:76:c4:2a:8d:5a:76:8f:90:84:5a:4d:68: 23:47:6e:f9:4e:aa:51:3d:cc:89:74:ea:23:d5:5c: f3:7b:c3:14:27:04:aa:05:80:68:fe:88:19:69:11: 20:1c:f2:86:52:66:5a:95:2d:12:ff:ad:95:61:10: 3d:9a:c0:77:e8:c2:9f:0b:b8:4e:e5:05:b1:4f:7f: ce:4f:ec:58:80:37:86:28:8e:3d:4e:01:b0:e6:ab: d7:aa:45:50:19:20:3b:d9:f7:63:5c:7b:a5:98:b0: b5:87:bd:cc:8f:38:b2:95:5f:6f:f7:6f:66:66:eb: bc:98:95:91:57:ee:d5:6f:d8:86:14:ea:75:c6:d4: 50:55:29:bd:6a:da:c9:7d:db:67:7f:0f:5f:b6:1a: 3e:6d:8f:0d:e9:af:a6:b2:df:ca:01:ca:65:6b:90: 14:eb:18:a2:c7:f2:39:1f:39:a2:c4:e5:cb:0f:1d: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:87:F8:80:70:F5:BA:E5:C9:BC:B9:6C:B6:13:71:91:0D:33:C5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708913e2-0f67-39af-92d6-310746ddadfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9e:3c:00:47:72:c0:58:6a:a9:07:48:22:bf:ce:47:23:d5: 18:94:9d:cb:53:67:c9:36:50:dc:3a:ed:2e:24:86:92:7d:8e: cc:0e:11:b9:76:d9:18:ba:f6:01:80:27:24:39:71:4d:4b:43: 37:70:0a:2a:49:c9:ff:c7:f6:37:bc:3a:31:47:e3:52:81:65: 68:bd:02:71:52:f8:6c:17:2b:6e:b7:67:0f:39:2a:a3:8f:e0: 1b:e6:77:e9:7a:58:e0:8a:90:88:3a:5b:f7:94:b6:fc:38:e3: c9:58:61:97:c1:8e:29:93:6a:b0:25:de:bd:2a:63:23:d9:a1: a9:39:99:dc:aa:1e:72:8e:16:5a:19:24:df:89:7d:75:b2:52: 38:ff:02:45:08:c5:52:26:b8:6f:92:ab:a2:62:1e:f6:54:2f: d9:af:cd:37:b0:c9:88:52:02:db:33:97:f5:ea:14:4c:82:6e: 48:07:2b:7e:01:49:90:51:39:9a:6f:0c:72:3d:f1:96:35:61: bb:d6:22:78:10:72:5e:78:34:07:dd:ba:a1:2f:82:78:fd:91: 7b:0b:99:c2:42:98:c1:f3:09:d4:3c:f5:f6:c5:dc:6c:9b:b0: 9e:99:61:37:f6:1d:be:90:a8:59:7d:98:fd:14:a0:91:3e:47: af:d8:f4:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qzJdkY8EWxYUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MDJmYzZjYjEtNzBmZC00ZmQzLWJkN2MtYTZhNjc0NzAwNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo3dq82geKa4c8mJcYMjF2VP4lQf5+OXRc8q 0xs3povFxy+Nol09z5/BcRruMIBJu6bA9HoLnhu4REnDfpAe7l8HFWA7U7OYG4+M sgF2xCqNWnaPkIRaTWgjR275TqpRPcyJdOoj1Vzze8MUJwSqBYBo/ogZaREgHPKG UmZalS0S/62VYRA9msB36MKfC7hO5QWxT3/OT+xYgDeGKI49TgGw5qvXqkVQGSA7 2fdjXHulmLC1h73MjziylV9v929mZuu8mJWRV+7Vb9iGFOp1xtRQVSm9atrJfdtn fw9ftho+bY8N6a+mst/KAcpla5AU6xiix/I5HzmixOXLDx18eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGH+IBw9brlyby5bLYTcZENM8W4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzA4OTEzZTItMGY2Ny0z OWFmLTkyZDYtMzEwNzQ2ZGRhZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJl7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+ePABHcsBYaqkHSCK/zkcj1RiUnctTZ8k2UNw67S4khpJ9jswOEbl2 2Ri69gGAJyQ5cU1LQzdwCipJyf/H9je8OjFH41KBZWi9AnFS+GwXK263Zw85KqOP 4Bvmd+l6WOCKkIg6W/eUtvw448lYYZfBjimTarAl3r0qYyPZoak5mdyqHnKOFloZ JN+JfXWyUjj/AkUIxVImuG+Sq6JiHvZUL9mvzTewyYhSAtszl/XqFEyCbkgHK34B SZBROZpvDHI98ZY1YbvWIngQcl54NAfduqEvgnj9kXsLmcJCmMHzCdQ89fbF3Gyb sJ6ZYTf2Hb6QqFl9mP0UoJE+R6/Y9IM= -----END CERTIFICATE-----Generated at Sun Sep 27 03:57:54 2026 by rpki-client