$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87f1437b-697e-3322-948a-6e6ab77d1297.roa File: 87f1437b-697e-3322-948a-6e6ab77d1297.roa (raw, json) Hash identifier: L8N+dyfJkhirBs7pcyAQj9DZA296AcNmxfUo1caF7bQ= Subject key identifier: 07:D6:B5:BA:FF:30:F9:3C:29:9F:54:F2:E9:14:A0:98:09:F7:6A:6B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3052892DD2604329F1EA7D40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87f1437b-697e-3322-948a-6e6ab77d1297.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 273950 IP address blocks: 38.56.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:89:2d:d2:60:43:29:f1:ea:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=859fda6b-6658-4be3-8567-b515628415c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:0f:a0:2f:1a:e4:aa:0d:40:b8:bc:75:f2: 00:28:a8:48:45:39:8f:ea:f6:71:7f:c2:ff:75:8c: 5f:7b:e9:2f:b4:55:81:9d:c1:a1:bc:23:a7:df:da: cf:fb:e6:7f:de:8e:44:2e:c1:18:ce:f2:e3:be:11: f4:aa:5a:b6:73:c2:6a:ef:48:51:13:a3:0c:6f:c5: 9e:0a:ca:b0:ec:ca:07:60:f6:60:07:d1:bc:c6:e6: ca:0e:fb:ae:59:19:6d:33:20:17:f4:ea:60:33:aa: 44:84:96:ad:c8:74:67:2e:12:75:b0:45:58:26:77: d9:90:5f:a5:7f:da:06:52:9e:ae:7d:ca:a2:2f:0f: 6b:58:df:31:b3:73:92:e5:45:05:cc:37:6e:72:d2: be:f9:38:89:7f:cd:d0:57:22:83:8c:38:bf:d6:b3: d2:93:6a:f8:79:6a:71:b4:b1:2a:38:d6:1d:8f:91: 07:81:ac:0b:51:ae:f5:ce:4f:11:b0:5f:82:2f:4b: d6:48:a0:fa:55:dc:21:42:45:8b:0b:5e:41:c5:13: 88:4e:9e:c3:20:df:be:a7:4a:35:3e:76:b2:09:0c: 1f:d3:6b:15:00:72:aa:24:13:04:b3:f4:ef:08:49: 86:dd:d9:a0:40:74:1c:58:8b:3a:44:b8:e0:a9:8a: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:B5:BA:FF:30:F9:3C:29:9F:54:F2:E9:14:A0:98:09:F7:6A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87f1437b-697e-3322-948a-6e6ab77d1297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b6:89:0b:b2:63:de:12:d2:9f:27:b5:15:8d:ed:0e:26:a7: 2b:ef:3a:91:7b:78:91:c8:b9:c3:80:a2:87:58:cf:6e:5e:6a: 1f:9a:83:36:38:12:57:e9:56:ad:7b:50:2a:34:5c:a7:98:0e: 5a:54:43:af:00:1e:64:90:a9:2b:7c:bc:cd:bf:15:a2:a5:8e: 95:f7:c1:34:5e:e8:f0:77:68:eb:58:b8:0d:d1:75:af:a6:cd: fa:cd:3c:6f:7e:e3:ba:d2:af:e9:ac:93:00:29:a3:54:e5:73: ed:19:5e:42:cc:d5:55:35:8e:ba:e8:2a:3e:84:54:38:9c:34: 6d:7a:1c:ab:75:4b:4c:cd:e3:d6:d1:90:25:04:47:f0:eb:ff: 51:5b:98:08:a5:63:02:e6:c8:eb:43:5d:b6:66:ae:7b:23:55: 0d:1a:10:d0:c2:c2:7c:19:a3:9c:d8:5e:1b:99:75:15:a2:7d: 89:a8:0a:f1:61:b0:70:50:d3:04:c8:1c:04:21:56:9e:86:77: aa:28:13:7b:a6:05:b0:2d:c8:8a:60:c8:da:8a:92:df:f0:60: ba:65:58:ec:9c:5a:c4:ed:2b:7f:1e:6f:77:b8:96:03:fe:36: 1d:2e:31:2d:8d:ff:38:a3:d6:57:5d:ea:e1:25:ec:dd:84:ed: b3:29:68:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUokt0mBDKfHqfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ODU5ZmRhNmItNjY1OC00YmUzLTg1NjctYjUxNTYyODQxNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLMPoC8a5KoNQLi8dfIAKKhIRTmP6vZxf8L/ dYxfe+kvtFWBncGhvCOn39rP++Z/3o5ELsEYzvLjvhH0qlq2c8Jq70hRE6MMb8We Csqw7MoHYPZgB9G8xubKDvuuWRltMyAX9OpgM6pEhJatyHRnLhJ1sEVYJnfZkF+l f9oGUp6ufcqiLw9rWN8xs3OS5UUFzDductK++TiJf83QVyKDjDi/1rPSk2r4eWpx tLEqONYdj5EHgawLUa71zk8RsF+CL0vWSKD6VdwhQkWLC15BxROITp7DIN++p0o1 PnayCQwf02sVAHKqJBMEs/TvCEmG3dmgQHQcWIs6RLjgqYpGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfWtbr/MPk8KZ9U8ukUoJgJ92prMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdmMTQzN2ItNjk3ZS0z MzIyLTk0OGEtNmU2YWI3N2QxMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF22iQuyY94S0p8ntRWN7Q4mpyvvOpF7eJHIucOAoodYz25eah+agzY4 ElfpVq17UCo0XKeYDlpUQ68AHmSQqSt8vM2/FaKljpX3wTRe6PB3aOtYuA3Rda+m zfrNPG9+47rSr+mskwApo1Tlc+0ZXkLM1VU1jrroKj6EVDicNG16HKt1S0zN49bR kCUER/Dr/1FbmAilYwLmyOtDXbZmrnsjVQ0aENDCwnwZo5zYXhuZdRWifYmoCvFh sHBQ0wTIHAQhVp6Gd6ooE3umBbAtyIpgyNqKkt/wYLplWOycWsTtK38eb3e4lgP+ Nh0uMS2N/zij1ldd6uEl7N2E7bMpaOA= -----END CERTIFICATE-----Generated at Sun Oct 4 15:25:37 2026 by rpki-client