$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa File: a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa (raw, json) Hash identifier: WILSfHmlIcB7aYLlihzdU77krIh7UdTq/P/rDyV2iJA= Subject key identifier: F8:62:47:CF:0D:4F:01:9B:08:82:A3:6D:58:85:A7:C6:E6:85:11:01 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F41129EC56366259202CE1AC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 270169 IP address blocks: 38.19.96.0/22 maxlen: 22 38.20.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9e:c5:63:66:25:92:02:ce:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=523f78c9-719b-40e0-a426-13b3f87908ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:b3:76:69:a2:9b:ff:38:f6:65:e2:d6:b6: 9e:75:21:08:3d:c1:b4:86:e8:35:5b:1e:67:96:6c: 68:07:d5:67:cf:c4:bd:74:16:b4:13:75:b8:d5:0e: 89:61:86:60:64:2c:55:b6:79:ff:f4:8e:88:84:c2: 06:50:82:7a:9d:4f:7d:de:74:31:ac:11:61:ce:f1: 62:fe:f7:02:6d:35:91:e9:ca:08:c3:13:54:c7:c0: b3:fd:c8:f1:64:bf:4a:f1:2b:48:d8:ca:c7:4e:94: 22:49:4d:69:93:ca:7a:67:b8:02:56:4d:66:ff:cb: 40:66:21:b7:68:05:51:11:5a:b5:dc:32:07:d8:5e: 7d:3e:ea:a6:26:85:30:da:22:69:23:61:81:b2:4e: 71:7d:ba:13:b7:9d:55:ab:c4:5a:4f:2b:b2:56:6c: 17:95:de:61:c4:c7:6a:0f:3d:80:27:f6:21:fd:44: 8f:bb:be:0d:2a:93:25:f8:f5:04:26:1a:51:40:de: db:e6:a7:1c:cd:47:b7:1b:e3:47:0f:82:71:a6:08: e6:02:e0:b8:07:bd:2f:6c:fb:b6:fc:43:c5:aa:ec: f0:c3:62:d7:e8:f6:8f:a4:6e:a4:c9:a2:26:ec:24: e4:2a:18:00:4f:de:5b:9b:f5:f1:9b:8e:72:b5:8a: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:47:CF:0D:4F:01:9B:08:82:A3:6D:58:85:A7:C6:E6:85:11:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.96.0/22 38.20.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:70:24:b0:c6:84:ff:67:45:74:d0:f3:e5:fb:f3:71:36:2a: e6:54:59:64:4a:4e:4d:f1:2b:66:b9:29:be:40:db:be:dc:37: 8c:1f:93:df:2e:a6:ad:27:d5:f0:81:2e:82:bd:07:f0:af:d0: 60:82:ad:41:4d:a7:5d:86:67:c6:46:76:93:dc:50:0d:ce:2d: bd:f0:3b:99:a2:e5:78:26:c4:b2:d0:8a:c3:09:2e:cc:93:5d: 32:c4:19:1d:ac:2e:eb:ff:5a:e8:e4:97:e9:bc:8d:e5:b1:d0: 65:c0:7b:8c:95:70:9a:ed:87:57:1b:46:3d:35:69:8d:24:ed: 17:b1:1c:0a:bc:79:39:47:06:2d:c8:fc:9a:ef:72:95:cb:1a: dc:a2:9b:8b:d2:a6:04:a4:b5:33:3d:87:a5:ba:81:8f:b3:bf: 0e:80:9b:66:3f:3e:e4:ea:41:c4:29:7b:42:b3:4e:8c:e4:dd: 19:c8:29:62:50:af:ea:1f:6a:b1:19:3d:8e:2a:18:dc:e5:f6: 37:fd:b6:15:ff:2e:a7:23:8a:81:5f:60:87:a5:df:b9:9b:5f: 5b:69:7b:de:22:d8:1b:f2:63:1e:01:05:0e:a6:30:d5:70:1e: a6:ca:bc:da:19:bb:9e:2c:55:34:91:39:c4:fd:71:46:69:0b: d7:48:56:a4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9BEp7FY2YlkgLOGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTIzZjc4YzktNzE5Yi00MGUwLWE0MjYtMTNiM2Y4NzkwOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXqzdmmim/849mXi1raedSEIPcG0hug1Wx5n lmxoB9Vnz8S9dBa0E3W41Q6JYYZgZCxVtnn/9I6IhMIGUIJ6nU993nQxrBFhzvFi /vcCbTWR6coIwxNUx8Cz/cjxZL9K8StI2MrHTpQiSU1pk8p6Z7gCVk1m/8tAZiG3 aAVREVq13DIH2F59PuqmJoUw2iJpI2GBsk5xfboTt51Vq8RaTyuyVmwXld5hxMdq Dz2AJ/Yh/USPu74NKpMl+PUEJhpRQN7b5qcczUe3G+NHD4JxpgjmAuC4B70vbPu2 /EPFquzww2LX6PaPpG6kyaIm7CTkKhgAT95bm/Xxm45ytYpw9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPhiR88NTwGbCIKjbViFp8bmhREBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTBiOTcwOWYtMGUyNy0z ZTYzLTkyODAtYmU3ZGFmZGFjYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJhNgAwQA JhQDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIxwJLDGhP9nRXTQ8+X783E2KuZUWWRKTk3xK2a5Kb5A277c N4wfk98upq0n1fCBLoK9B/Cv0GCCrUFNp12GZ8ZGdpPcUA3OLb3wO5mi5XgmxLLQ isMJLsyTXTLEGR2sLuv/Wujkl+m8jeWx0GXAe4yVcJrth1cbRj01aY0k7RexHAq8 eTlHBi3I/JrvcpXLGtyim4vSpgSktTM9h6W6gY+zvw6Am2Y/PuTqQcQpe0KzTozk 3RnIKWJQr+ofarEZPY4qGNzl9jf9thX/LqcjioFfYIel37mbX1tpe94i2BvyYx4B BQ6mMNVwHqbKvNoZu54sVTSROcT9cUZpC9dIVqQ= -----END CERTIFICATE-----Generated at Fri Sep 25 16:37:56 2026 by rpki-client