$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa File: 9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa (raw, json) Hash identifier: DloMGBsVLmR0hGxM5KN283cKjCMJnEGguqkX28Rht84= Subject key identifier: E6:D9:65:09:E5:43:93:15:7A:A5:AA:34:4D:12:0E:40:63:0B:70:63 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4989A6F9F470F7B3CA2ECCC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36105 IP address blocks: 38.224.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:a6:f9:f4:70:f7:b3:ca:2e:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae323ae8-3ccd-40ba-b9ab-e643d0549948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:62:e5:98:ec:7a:a7:25:96:c2:61:3e:8e:34: fc:3d:7d:10:d2:06:c4:f5:81:e4:dc:28:b5:43:8c: cc:17:72:58:78:4a:92:53:2d:12:7e:ab:d0:f8:75: b9:2d:c4:71:a9:49:1f:e6:0a:e2:e6:ad:1a:38:d1: f5:43:f5:31:cc:c2:79:78:5d:c0:30:9c:c0:d1:3c: 4a:44:74:f7:0d:71:65:f2:88:89:6a:cf:db:63:9a: bc:7c:84:6b:17:6d:7e:1c:f2:a9:a0:d9:b3:1d:9a: 6f:0b:93:f4:b8:c2:a2:af:89:22:6b:f2:8c:c1:cc: c4:00:b4:6f:b2:90:be:39:9f:d1:89:39:cf:ed:9d: ef:dc:c4:cf:91:eb:ed:be:bb:0a:58:bd:72:3b:61: e7:37:7d:88:f8:90:5c:b3:fe:4d:08:51:a0:8e:21: 80:27:5f:6f:66:fc:79:ba:b2:47:2c:f8:05:10:24: 55:d4:3e:9c:9c:2a:f1:6a:9d:b5:e0:d3:95:18:10: b7:34:66:67:2a:e8:de:ed:31:97:47:6d:0f:f3:81: 32:be:5b:ed:60:20:87:fd:62:6c:cb:c0:42:96:7a: 7d:4e:7e:8e:cd:85:4a:b8:c0:8f:90:b8:d9:1c:f6: d4:22:13:51:b0:61:10:04:6a:db:7b:2a:e1:e4:f2: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D9:65:09:E5:43:93:15:7A:A5:AA:34:4D:12:0E:40:63:0B:70:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:73:48:15:8d:2f:59:7d:ef:bb:21:18:c5:ac:53:13:79:9e: c8:fb:c3:8b:b6:6e:ef:4d:25:48:13:2e:90:dc:36:9a:d1:79: e6:65:04:90:cd:28:54:d9:99:a0:9b:cc:40:d6:75:28:a7:d1: 33:ed:07:a9:30:72:e3:29:28:88:53:25:68:82:33:36:aa:bb: 26:e2:1b:84:9b:8e:0a:b2:9f:13:5a:eb:81:99:4d:6e:0c:f5: fa:4e:52:6b:1a:ae:09:e9:b0:f4:fc:e4:61:d4:0e:43:66:44: 74:f5:c7:a5:23:43:2a:e3:9a:74:da:00:68:61:fb:1b:28:60: d7:5f:55:47:94:8f:3d:99:1c:79:cd:41:f3:62:55:8d:5f:b7: dd:cb:67:4f:9a:87:89:14:75:40:c1:06:59:95:39:3f:13:c1: ee:33:f6:c1:47:37:f8:d0:a9:2e:75:48:f7:ab:4e:d9:c9:ac: 49:32:64:6f:51:c1:6b:8a:68:20:6f:9b:73:fe:da:b5:38:f9: a0:8d:27:77:c6:59:04:5e:46:2e:48:65:45:af:02:13:13:28: a0:0d:5c:a2:6c:5a:9e:6f:ca:16:94:5c:2a:94:94:d7:00:26: 7e:c5:e9:07:a2:19:59:da:04:da:b8:b1:13:09:5f:74:e0:7b: 62:2f:9f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiab59HD3s8ouzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWUzMjNhZTgtM2NjZC00MGJhLWI5YWItZTY0M2QwNTQ5OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGLlmOx6pyWWwmE+jjT8PX0Q0gbE9YHk3Ci1 Q4zMF3JYeEqSUy0SfqvQ+HW5LcRxqUkf5gri5q0aONH1Q/UxzMJ5eF3AMJzA0TxK RHT3DXFl8oiJas/bY5q8fIRrF21+HPKpoNmzHZpvC5P0uMKir4kia/KMwczEALRv spC+OZ/RiTnP7Z3v3MTPkevtvrsKWL1yO2HnN32I+JBcs/5NCFGgjiGAJ19vZvx5 urJHLPgFECRV1D6cnCrxap214NOVGBC3NGZnKuje7TGXR20P84EyvlvtYCCH/WJs y8BClnp9Tn6OzYVKuMCPkLjZHPbUIhNRsGEQBGrbeyrh5PKCYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObZZQnlQ5MVeqWqNE0SDkBjC3BjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTk5N2RhYjktZTRmOS0z ZTFlLWE2MGYtMGU2NDBlMzJkOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJuAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNzSBWNL1l977shGMWsUxN5nsj7w4u2bu9NJUgTLpDcNprReeZlBJDN KFTZmaCbzEDWdSin0TPtB6kwcuMpKIhTJWiCMzaquybiG4SbjgqynxNa64GZTW4M 9fpOUmsargnpsPT85GHUDkNmRHT1x6UjQyrjmnTaAGhh+xsoYNdfVUeUjz2ZHHnN QfNiVY1ft93LZ0+ah4kUdUDBBlmVOT8Twe4z9sFHN/jQqS51SPerTtnJrEkyZG9R wWuKaCBvm3P+2rU4+aCNJ3fGWQReRi5IZUWvAhMTKKANXKJsWp5vyhaUXCqUlNcA Jn7F6QeiGVnaBNq4sRMJX3Tge2Ivn2I= -----END CERTIFICATE-----Generated at Fri Sep 25 13:05:10 2026 by rpki-client