$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9ceb3aa0-bb79-3ad1-ad3c-144a6a195885.roa File: 9ceb3aa0-bb79-3ad1-ad3c-144a6a195885.roa (raw, json) Hash identifier: a8oSnNT2tCfkG4fhL+ZXZYaaN0f5kZu6NGqx2v8DGl4= Subject key identifier: 25:C0:05:AF:AA:29:18:D7:60:9D:68:88:53:B0:CB:07:16:75:FF:73 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4989F84EF7790D25AC1A7720 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9ceb3aa0-bb79-3ad1-ad3c-144a6a195885.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395167 IP address blocks: 38.44.24.0/21 maxlen: 24 38.89.144.0/21 maxlen: 24 154.28.20.0/22 maxlen: 24 154.38.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f8:4e:f7:79:0d:25:ac:1a:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d0d5927-c3ee-45c0-8fab-1810ee5ade23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:1f:37:ab:f7:db:a5:40:bd:56:e4:1c:b8: e3:f3:97:a6:54:33:98:a3:c4:c7:47:04:69:21:e5: ff:54:56:e8:f8:aa:a9:78:72:17:9f:ea:57:8f:88: 62:26:29:ab:f3:93:36:d8:a9:fb:d4:81:61:05:f2: 31:50:3f:37:a6:cb:6e:fe:5a:ba:fa:c2:39:b8:2b: 67:9b:5d:ff:2b:05:6d:f5:f4:ff:81:45:0b:e2:8f: 54:56:36:a8:49:08:14:9a:d9:a6:b9:59:6a:0f:ba: 67:95:75:60:07:59:fe:98:ae:61:86:01:ec:52:6b: 3a:37:ed:83:f1:d0:ed:a1:2d:3c:71:1b:22:55:30: 8a:67:6e:5f:0e:e8:fc:5a:fe:92:09:21:7e:54:5c: 29:cc:fd:c0:43:1d:18:4a:59:e2:8d:f1:ff:34:07: f9:5e:d7:08:80:ba:cb:b9:9a:fe:2c:2f:b2:67:d7: e8:0e:32:f2:c7:de:39:fa:45:7c:4d:41:f9:20:7d: 39:e5:dd:1d:68:d5:c5:6e:03:c2:4c:61:3e:f3:6d: 2b:d0:70:6c:62:4c:f5:24:94:d5:d4:40:53:54:a4: 20:cc:c4:b8:eb:b1:93:3d:98:df:49:d0:39:17:be: c0:9c:98:ae:51:e2:9a:59:a6:38:2f:e3:84:f8:0c: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C0:05:AF:AA:29:18:D7:60:9D:68:88:53:B0:CB:07:16:75:FF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9ceb3aa0-bb79-3ad1-ad3c-144a6a195885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.44.24.0/21 38.89.144.0/21 154.28.20.0/22 154.38.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8b:c9:49:7f:66:4a:1d:79:e4:6f:65:f9:45:c5:bd:1b:67: 49:d0:1c:f1:5e:de:5d:10:9b:a8:c7:bc:22:1a:92:71:72:c6: 68:28:98:90:38:dc:41:94:ea:47:81:04:ee:d0:1b:4c:79:9a: 61:29:12:e6:69:c1:e7:98:d8:d1:1a:8b:d9:b7:f0:ba:65:5b: 6b:d0:c8:e2:a7:06:17:ac:45:46:29:d9:5a:00:87:99:e8:b7: 0e:cf:94:fb:e8:dc:8a:18:bc:9f:5c:fb:cf:6c:a6:14:b8:4b: 07:f5:ea:f0:7a:fa:86:31:14:5e:ce:0d:a9:4d:97:83:f8:be: 09:39:25:e8:b7:c2:4e:f5:39:b3:5a:34:c7:05:1f:f5:d6:65: ae:e2:70:48:d4:a7:4b:f0:07:7d:1f:bf:12:a7:09:f9:17:df: 6d:14:db:ec:80:79:20:0d:e9:96:46:7b:72:00:6c:ce:dc:e9: 32:26:3e:e5:50:15:e7:94:a0:60:1a:98:f5:47:85:2e:76:49: e6:6d:bd:74:b3:6d:03:5f:cd:5e:bd:14:b2:3e:cf:de:d7:1f: 61:b1:2f:87:a0:86:91:6d:e9:d2:73:38:ec:13:c6:b7:dc:4a: 3f:ec:12:9c:ac:c5:bf:35:f4:48:6b:54:58:75:34:2d:02:fa: 68:0d:2c:37 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9JifhO93kNJawadyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQwZDU5MjctYzNlZS00NWMwLThmYWItMTgxMGVlNWFkZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DwfN6v326VAvVbkHLjj85emVDOYo8THRwRp IeX/VFbo+KqpeHIXn+pXj4hiJimr85M22Kn71IFhBfIxUD83pstu/lq6+sI5uCtn m13/KwVt9fT/gUUL4o9UVjaoSQgUmtmmuVlqD7pnlXVgB1n+mK5hhgHsUms6N+2D 8dDtoS08cRsiVTCKZ25fDuj8Wv6SCSF+VFwpzP3AQx0YSlnijfH/NAf5XtcIgLrL uZr+LC+yZ9foDjLyx945+kV8TUH5IH055d0daNXFbgPCTGE+820r0HBsYkz1JJTV 1EBTVKQgzMS467GTPZjfSdA5F77AnJiuUeKaWaY4L+OE+AxNOQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFCXABa+qKRjXYJ1oiFOwywcWdf9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWNlYjNhYTAtYmI3OS0z YWQxLWFkM2MtMTQ0YTZhMTk1ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJiwYAwQD JlmQAwQCmhwUAwQCmiYQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFGLyUl/ZkodeeRvZflFxb0bZ0nQHPFe 3l0Qm6jHvCIaknFyxmgomJA43EGU6keBBO7QG0x5mmEpEuZpweeY2NEai9m38Lpl W2vQyOKnBhesRUYp2VoAh5notw7PlPvo3IoYvJ9c+89sphS4Swf16vB6+oYxFF7O DalNl4P4vgk5Jei3wk71ObNaNMcFH/XWZa7icEjUp0vwB30fvxKnCfkX320U2+yA eSAN6ZZGe3IAbM7c6TImPuVQFeeUoGAamPVHhS52SeZtvXSzbQNfzV69FLI+z97X H2GxL4eghpFt6dJzOOwTxrfcSj/sEpysxb819EhrVFh1NC0C+mgNLDc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:33:57 2026 by rpki-client