$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7ca7702c-391d-3c4e-82cd-c716810f6752.roa File: 7ca7702c-391d-3c4e-82cd-c716810f6752.roa (raw, json) Hash identifier: BPEQBMDC+IMalRyOli5EB2oUneywQZLKUKyHWQtVNF0= Subject key identifier: 76:02:9B:39:24:27:C5:CA:15:C2:98:27:56:21:1F:9F:FA:9A:49:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498AD5425B233921E6D50FC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7ca7702c-391d-3c4e-82cd-c716810f6752.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 270075 IP address blocks: 38.19.40.0/22 maxlen: 24 38.253.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d5:42:5b:23:39:21:e6:d5:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=528bdc93-5a23-462e-bd3f-c9b5eb3a7dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:4d:18:8e:c5:19:4b:d8:63:71:41:e5:85: 8c:32:c0:32:26:cd:b8:6a:d4:03:fa:26:fb:4d:08: 88:42:f6:b2:0d:cd:aa:ea:01:d7:ef:eb:80:cc:89: a6:7a:8d:6a:4b:e2:13:d4:61:25:64:c7:e3:07:86: 23:a4:9e:ec:41:e3:11:5d:8b:b7:b7:71:7a:19:80: 74:c4:61:c2:d4:ee:4e:1d:91:8d:e5:e8:96:bd:b7: 48:f1:67:e7:82:96:63:3a:1b:37:cc:fb:e2:0e:99: b9:f1:91:26:6f:00:a7:4c:03:82:96:97:e1:91:af: 44:ca:59:9c:45:f4:d7:a6:d7:fc:2e:fd:97:bf:d6: 07:b4:62:db:10:6c:33:f7:07:da:e8:b5:ca:e5:e5: 7e:87:09:10:9d:0d:87:d5:b5:4b:d3:3b:37:4e:90: 74:34:e1:fa:80:eb:73:6c:1f:62:2a:f8:c7:a3:cb: 56:9f:e1:2a:c1:c1:eb:a2:6c:a4:44:68:3b:fb:0f: a7:13:62:b6:ce:80:e8:77:5e:30:d0:fd:e5:d1:4e: a6:d4:39:39:f6:de:40:a0:d4:2a:61:b8:22:6b:b8: 9f:e2:92:cb:45:6a:0a:62:ba:e4:dc:32:b9:ee:00: 68:8b:e7:12:8e:91:3b:5f:37:d9:08:01:36:7f:d4: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:02:9B:39:24:27:C5:CA:15:C2:98:27:56:21:1F:9F:FA:9A:49:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7ca7702c-391d-3c4e-82cd-c716810f6752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.40.0/22 38.253.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d0:6d:d8:ea:b4:42:b0:c8:1e:01:c9:02:5b:ae:a2:4f:ad: f5:54:9e:57:f5:bc:e9:57:c8:70:db:bc:86:d4:4d:be:d9:cf: 02:7a:85:ce:95:03:0c:7a:1b:da:d0:e9:e3:00:a6:24:0e:77: 10:22:4a:38:08:f0:a8:52:82:c1:10:89:d5:84:be:96:af:07: 58:11:6e:af:5c:f2:96:d5:b2:6c:07:28:51:bf:87:b9:5b:e0: fe:9c:ed:38:c4:6d:82:16:b8:91:65:53:d0:db:12:7e:60:2e: 01:67:4a:fd:7b:aa:95:a9:ae:2b:89:a5:f3:93:2b:46:99:e8: f5:71:72:ec:69:3a:17:47:8c:99:71:ed:62:2d:cd:16:e0:2f: ca:7a:96:d2:b4:83:cc:c8:c4:6a:20:6f:c8:c7:99:73:73:80: 57:f2:9b:b0:59:fe:99:19:91:e9:f7:2f:10:e7:5b:25:e5:bb: 6f:5a:a5:6f:92:1b:4b:ba:8a:41:8b:e4:77:ef:f4:70:14:66: 29:f9:49:e6:69:d7:ab:53:08:82:3a:5f:7c:08:63:70:ed:80: e8:00:8d:2a:66:ca:ae:d0:ec:ea:40:1e:b7:d2:7b:d5:b1:c0: 10:00:5e:a6:d9:23:f2:3b:04:b3:ee:81:aa:1e:98:4d:d4:75: ed:fb:db:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JitVCWyM5IebVD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTI4YmRjOTMtNWEyMy00NjJlLWJkM2YtYzliNWViM2E3ZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcpNGI7FGUvYY3FB5YWMMsAyJs24atQD+ib7 TQiIQvayDc2q6gHX7+uAzImmeo1qS+IT1GElZMfjB4YjpJ7sQeMRXYu3t3F6GYB0 xGHC1O5OHZGN5eiWvbdI8WfngpZjOhs3zPviDpm58ZEmbwCnTAOClpfhka9Eylmc RfTXptf8Lv2Xv9YHtGLbEGwz9wfa6LXK5eV+hwkQnQ2H1bVL0zs3TpB0NOH6gOtz bB9iKvjHo8tWn+EqwcHromykRGg7+w+nE2K2zoDod14w0P3l0U6m1Dk59t5AoNQq Ybgia7if4pLLRWoKYrrk3DK57gBoi+cSjpE7XzfZCAE2f9RQkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHYCmzkkJ8XKFcKYJ1YhH5/6mknFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2NhNzcwMmMtMzkxZC0z YzRlLTgyY2QtYzcxNjgxMGY2NzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJhMoAwQC Jv10MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADrQbdjqtEKwyB4ByQJbrqJPrfVUnlf1vOlXyHDbvIbUTb7Z zwJ6hc6VAwx6G9rQ6eMApiQOdxAiSjgI8KhSgsEQidWEvpavB1gRbq9c8pbVsmwH KFG/h7lb4P6c7TjEbYIWuJFlU9DbEn5gLgFnSv17qpWpriuJpfOTK0aZ6PVxcuxp OhdHjJlx7WItzRbgL8p6ltK0g8zIxGogb8jHmXNzgFfym7BZ/pkZken3LxDnWyXl u29apW+SG0u6ikGL5Hfv9HAUZin5SeZp16tTCII6X3wIY3DtgOgAjSpmyq7Q7OpA HrfSe9WxwBAAXqbZI/I7BLPugaoemE3Ude3728M= -----END CERTIFICATE-----Generated at Sat Sep 26 16:32:06 2026 by rpki-client