$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b4204ea-1646-3e18-b369-959b900c2280.roa File: 8b4204ea-1646-3e18-b369-959b900c2280.roa (raw, json) Hash identifier: KbGc3iPRhEcrhFJGFz8e/71JQYnCRDTGu14x3geLJO4= Subject key identifier: 1F:9E:A6:A1:6B:CC:0F:F5:6D:64:D8:60:2C:BD:F9:B5:F2:4D:54:83 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4112C0963188F699F642D480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b4204ea-1646-3e18-b369-959b900c2280.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 38.131.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:c0:96:31:88:f6:99:f6:42:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=db28279d-3b71-40c3-869e-dc6d68de1ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:bc:fa:a6:33:f9:d1:1f:c6:62:86:49:28: 16:75:6b:6b:84:f0:8f:24:e4:ee:b2:3b:3b:f2:0d: 80:9b:8b:dd:5a:f5:17:9f:15:fe:66:49:7d:2e:de: 85:9b:81:a9:9f:9d:6f:b6:9c:e3:2f:4f:a1:33:3f: 22:ed:de:51:29:26:cb:20:49:71:d4:d7:3d:d4:58: 12:97:b0:70:06:94:47:b4:10:7d:96:39:ef:67:54: 06:9d:d2:07:98:68:78:a1:a3:46:21:ad:32:a3:1b: d5:e6:7f:fb:4e:74:ee:0b:6f:75:70:03:69:21:16: 1d:56:e4:20:53:8f:31:96:3d:a0:4a:95:4a:f4:7b: c6:18:11:3a:42:29:66:f4:b3:3f:b3:00:98:78:5c: 90:ce:13:2f:e9:61:9c:42:85:d8:4e:b5:3a:5c:80: 5e:79:cc:ca:54:e8:e6:76:1f:2e:31:5a:cd:b9:02: da:b5:9f:31:26:fd:c1:99:23:a7:bf:8c:90:a4:74: db:d2:5d:c0:c9:26:ae:ff:fc:60:49:9a:07:94:b8: 08:da:ec:ea:f7:7a:8e:9c:67:57:3a:e7:7d:8f:f2: 0d:39:7f:8d:d9:07:a1:42:f1:55:56:77:6e:97:e7: 7a:2e:cb:63:7f:79:63:8f:55:dc:5c:9b:d6:af:b0: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:A6:A1:6B:CC:0F:F5:6D:64:D8:60:2C:BD:F9:B5:F2:4D:54:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b4204ea-1646-3e18-b369-959b900c2280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.131.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:73:38:bf:35:c1:dd:df:ae:8a:34:9b:65:88:80:3b:72:9a: 27:1c:12:99:1f:33:fa:ab:a5:72:af:34:01:e5:ac:be:5e:48: d2:1c:b7:d1:69:f5:fc:eb:96:bb:44:78:35:5a:1c:72:aa:f4: d7:35:98:d5:45:01:d4:2e:f1:ea:c8:29:f2:ad:8f:7a:9c:b4: af:a8:39:b8:9d:d0:71:d6:66:de:5e:fe:6a:98:5d:90:43:ff: 0a:81:d5:d1:8d:44:46:1f:a6:2f:e7:9c:c3:11:51:25:30:66: 49:eb:99:f8:28:e7:83:c2:43:6c:f9:bc:68:fa:7d:e8:2c:8e: 2c:bf:f8:5d:a3:88:93:b5:09:5d:7a:9d:4f:e9:5a:aa:b8:1b: bb:36:c1:aa:c9:fd:19:4e:09:87:6f:53:0f:a8:37:6c:db:08: 08:18:98:55:93:61:d7:42:12:d8:9c:4f:8f:99:07:f3:a9:43: c0:f6:09:b4:53:d8:a0:54:97:76:74:ee:74:f6:ec:a2:fa:00: 87:7d:69:6b:64:11:21:3c:2e:e4:55:12:94:c0:a5:11:d1:14: 70:14:12:1d:d7:db:88:e3:b6:0a:46:e6:d0:49:65:55:69:41: 3a:fc:37:85:30:05:93:0d:18:d4:2b:e6:73:bf:4e:06:4f:4d: 4c:4f:90:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsCWMYj2mfZC1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZGIyODI3OWQtM2I3MS00MGMzLTg2OWUtZGM2ZDY4ZGUxYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksi8+qYz+dEfxmKGSSgWdWtrhPCPJOTusjs7 8g2Am4vdWvUXnxX+Zkl9Lt6Fm4Gpn51vtpzjL0+hMz8i7d5RKSbLIElx1Nc91FgS l7BwBpRHtBB9ljnvZ1QGndIHmGh4oaNGIa0yoxvV5n/7TnTuC291cANpIRYdVuQg U48xlj2gSpVK9HvGGBE6Qilm9LM/swCYeFyQzhMv6WGcQoXYTrU6XIBeeczKVOjm dh8uMVrNuQLatZ8xJv3BmSOnv4yQpHTb0l3AySau//xgSZoHlLgI2uzq93qOnGdX Oud9j/INOX+N2QehQvFVVndul+d6Lstjf3ljj1XcXJvWr7D8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+epqFrzA/1bWTYYCy9+bXyTVSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGI0MjA0ZWEtMTY0Ni0z ZTE4LWIzNjktOTU5YjkwMGMyMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJoOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFzOL81wd3froo0m2WIgDtymiccEpkfM/qrpXKvNAHlrL5eSNIct9Fp 9fzrlrtEeDVaHHKq9Nc1mNVFAdQu8erIKfKtj3qctK+oObid0HHWZt5e/mqYXZBD /wqB1dGNREYfpi/nnMMRUSUwZknrmfgo54PCQ2z5vGj6fegsjiy/+F2jiJO1CV16 nU/pWqq4G7s2warJ/RlOCYdvUw+oN2zbCAgYmFWTYddCEticT4+ZB/OpQ8D2CbRT 2KBUl3Z07nT27KL6AId9aWtkESE8LuRVEpTApRHRFHAUEh3X24jjtgpG5tBJZVVp QTr8N4UwBZMNGNQr5nO/TgZPTUxPkH8= -----END CERTIFICATE-----Generated at Sat Oct 3 17:45:20 2026 by rpki-client