$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b673bde-f474-39f9-a269-0204aa38f182.roa File: 9b673bde-f474-39f9-a269-0204aa38f182.roa (raw, json) Hash identifier: oFN0q/VvufR5W+7plh+epYXKRJGkvkJg2WM8b/0NvVA= Subject key identifier: 4C:D2:9A:DE:9C:A7:BF:4D:2F:83:C1:32:B5:98:AB:43:91:59:36:EA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F2ABD2DD72CDC42CA5EB16940 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b673bde-f474-39f9-a269-0204aa38f182.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16276 IP address blocks: 38.199.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2d:d7:2c:dc:42:ca:5e:b1:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=46aaae68-fe8d-41dc-afe0-e81bc10947f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:32:37:d5:6e:bb:79:03:fd:89:5b:c0:ee: 32:ff:54:a7:b3:1a:20:c4:94:6a:a3:2f:ea:b3:25: de:b3:9a:64:c2:70:22:f1:cb:89:00:67:fc:52:fb: ef:00:45:a4:4c:80:0d:25:ad:0a:64:51:1b:f6:a8: 0e:77:23:25:99:67:5c:d0:fd:45:89:28:a8:bc:d4: 8d:1f:e6:2f:d2:78:86:70:0e:49:d2:b3:eb:48:96: e9:b1:a8:47:8c:04:23:e0:a8:62:59:38:50:34:84: ea:a0:88:3f:e9:1c:c8:02:56:1c:91:69:11:3f:9a: 18:32:b6:6f:74:ed:49:f4:ef:20:20:e1:c9:39:80: b8:cc:39:eb:a5:23:d9:41:0a:7f:a2:ef:c6:dd:0e: 69:7c:64:99:e6:f9:26:e4:59:b4:2d:2e:47:e6:30: 89:1b:bc:a6:db:b1:26:07:03:21:7f:23:5a:8b:ad: 31:d1:80:c4:4c:6c:28:bf:0b:41:04:cd:33:8e:c0: 81:6b:a8:e4:37:79:cd:12:52:3c:d6:d7:d3:00:0b: 0f:02:aa:07:57:92:d1:1f:f5:eb:5a:37:73:44:db: 6f:75:bb:20:e6:3d:40:a0:b2:40:bd:9b:83:d0:f3: 3d:7e:d0:33:f3:4c:ee:2a:96:1c:0d:2f:39:e9:18: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D2:9A:DE:9C:A7:BF:4D:2F:83:C1:32:B5:98:AB:43:91:59:36:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b673bde-f474-39f9-a269-0204aa38f182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:96:a8:9c:6a:6e:88:d5:96:58:1d:44:2a:4e:bb:1b:b9:12: 37:9a:2f:eb:c8:64:05:37:78:dc:db:b0:20:cf:8c:85:a8:31: e5:37:ff:56:80:e3:b3:a7:35:44:15:92:97:dd:26:b3:62:07: b5:29:1f:95:34:92:05:c0:34:7b:9a:0e:1a:6d:40:45:68:d9: 47:99:e4:40:91:4f:ab:e9:bf:4a:82:e0:df:a5:c5:fe:b4:cf: 28:3d:ac:f3:d9:17:4a:1c:ff:15:a9:82:79:2f:f1:99:f9:45: 1a:18:a2:22:cb:66:1f:af:b7:b9:96:b1:72:5d:1e:0d:4d:a4: b8:64:4b:2d:c0:2f:b4:2e:3f:b5:57:86:8c:ab:0e:9b:29:6e: 83:2e:fe:fa:30:90:8c:c4:f8:f0:87:ac:2a:bd:72:8d:d2:64: 8b:98:f7:81:b1:47:b3:53:c3:c5:45:79:2d:b3:b9:f1:3a:05: fb:b7:ac:75:07:d6:7b:aa:0d:96:62:b3:77:15:4b:50:a1:27: 31:ff:9d:69:db:b3:d6:06:f6:cc:ed:0a:d9:f4:57:1e:cd:a1: 75:a5:ce:fa:da:f5:24:cd:42:4d:7c:e5:fb:e4:8d:4f:2a:70: f4:19:c8:e1:81:6f:db:b2:78:c4:5f:2b:49:4f:df:10:77:68: 11:2b:f3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS3XLNxCyl6xaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDZhYWFlNjgtZmU4ZC00MWRjLWFmZTAtZTgxYmMxMDk0N2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fAyN9Vuu3kD/YlbwO4y/1SnsxogxJRqoy/q syXes5pkwnAi8cuJAGf8UvvvAEWkTIANJa0KZFEb9qgOdyMlmWdc0P1FiSiovNSN H+Yv0niGcA5J0rPrSJbpsahHjAQj4KhiWThQNITqoIg/6RzIAlYckWkRP5oYMrZv dO1J9O8gIOHJOYC4zDnrpSPZQQp/ou/G3Q5pfGSZ5vkm5Fm0LS5H5jCJG7ym27Em BwMhfyNai60x0YDETGwovwtBBM0zjsCBa6jkN3nNElI81tfTAAsPAqoHV5LRH/Xr WjdzRNtvdbsg5j1AoLJAvZuD0PM9ftAz80zuKpYcDS856Ri3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzSmt6cp79NL4PBMrWYq0ORWTbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWI2NzNiZGUtZjQ3NC0z OWY5LWEyNjktMDIwNGFhMzhmMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKWqJxqbojVllgdRCpOuxu5EjeaL+vIZAU3eNzbsCDPjIWoMeU3/1aA 47OnNUQVkpfdJrNiB7UpH5U0kgXANHuaDhptQEVo2UeZ5ECRT6vpv0qC4N+lxf60 zyg9rPPZF0oc/xWpgnkv8Zn5RRoYoiLLZh+vt7mWsXJdHg1NpLhkSy3AL7QuP7VX hoyrDpspboMu/vowkIzE+PCHrCq9co3SZIuY94GxR7NTw8VFeS2zufE6Bfu3rHUH 1nuqDZZis3cVS1ChJzH/nWnbs9YG9sztCtn0Vx7NoXWlzvra9STNQk185fvkjU8q cPQZyOGBb9uyeMRfK0lP3xB3aBEr83A= -----END CERTIFICATE-----Generated at Mon Sep 28 10:10:47 2026 by rpki-client