$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0d212a0-dd63-309c-9805-db87de688c34.roa File: a0d212a0-dd63-309c-9805-db87de688c34.roa (raw, json) Hash identifier: yBIV9G6HSEKmmZAM8typy7Ygug9yPu6FX0KDkCJ6xuI= Subject key identifier: 07:A9:81:2A:E5:A1:B1:CB:E7:49:77:77:8D:BA:93:AA:14:46:C9:6B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F2C225D7586D4B0A351CCC940 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0d212a0-dd63-309c-9805-db87de688c34.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 138842 IP address blocks: 38.20.156.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5d:75:86:d4:b0:a3:51:cc:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=50a559fe-1637-4040-80c4-8680fa337193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:ed:98:f6:cf:64:d1:9a:6c:08:dc:93:63: b9:9a:86:94:99:08:48:d1:86:4f:c9:8b:14:a6:01: 36:84:7c:0b:fb:d1:80:ee:08:ef:04:5b:52:41:4a: af:c4:a2:06:8a:8b:a2:f0:11:ca:e0:f1:04:17:1d: fc:8c:e6:05:4b:25:5a:75:84:4b:59:fa:cc:28:87: 65:fd:61:b8:ea:ec:05:48:54:da:42:77:29:21:6a: be:88:f2:9d:fd:51:9d:ff:b4:93:2e:d2:ad:6b:98: f9:81:58:76:d9:80:16:ed:76:3e:3d:c0:d8:2f:c2: 02:e0:93:7b:6e:55:98:89:78:1d:40:f7:3b:d2:48: 42:59:9f:cf:f2:ff:c5:e6:fa:f4:ad:5a:1b:c3:03: d0:73:4d:ad:a4:00:5e:0f:bc:9f:ad:fb:0c:a4:32: 59:84:3e:c0:bd:a7:97:a3:3a:64:db:4c:46:03:f5: f4:82:c8:14:c0:fc:76:3f:da:db:41:04:9c:33:02: 6e:49:e8:9f:4d:8c:58:13:49:c1:a4:b4:96:fd:c6: 07:74:e0:ec:2d:76:3b:05:39:34:c6:28:fb:63:4f: 0b:81:db:9f:f3:c6:11:f8:27:d3:45:06:e0:27:24: 92:c9:6c:32:11:fa:8a:84:91:be:db:a1:0f:7b:a6: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A9:81:2A:E5:A1:B1:CB:E7:49:77:77:8D:BA:93:AA:14:46:C9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0d212a0-dd63-309c-9805-db87de688c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:49:e0:f1:09:46:b6:bf:37:eb:e9:60:38:bf:2c:ed:48:e0: 8b:54:ed:6b:8c:49:87:05:6f:9f:fa:c4:23:7e:5d:ff:53:2d: c2:9c:69:82:f3:a6:e3:93:d1:6c:07:35:92:42:2c:3f:6b:67: 35:8d:b1:3d:ec:8f:ec:a5:17:a0:d3:53:f6:de:72:bd:8c:63: de:59:e4:20:dc:56:29:8f:22:ce:9b:49:31:5b:3e:52:b3:da: c0:67:65:23:3a:10:47:60:7f:bb:30:8c:85:f4:d8:4e:cc:79: 01:84:34:c8:4c:53:fc:ec:52:33:b6:3b:76:55:55:92:1d:ba: 7d:4b:f4:bb:2c:13:e0:f9:be:98:e0:3f:83:3b:5a:b9:9b:be: db:a6:fa:ed:7d:46:a5:2b:62:5e:4b:e7:8c:bf:18:0a:58:7e: 89:1e:19:0c:23:a0:41:ed:79:10:b4:32:5d:ee:70:be:28:23: 3d:09:fe:b9:7b:48:d6:7e:2a:14:27:75:f0:e9:33:9d:14:f1: c9:87:61:8e:4f:80:e5:e2:be:9c:e5:a5:80:83:26:c5:bb:c7: 09:d7:6d:34:10:0e:9a:2f:28:fd:71:f0:1d:88:9b:23:4f:9d: 54:d5:c8:93:60:52:1b:f0:26:b8:77:7f:2d:9d:ad:56:e0:f5: 0e:df:23:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIl11htSwo1HMyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NTBhNTU5ZmUtMTYzNy00MDQwLTgwYzQtODY4MGZhMzM3MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXztmPbPZNGabAjck2O5moaUmQhI0YZPyYsU pgE2hHwL+9GA7gjvBFtSQUqvxKIGioui8BHK4PEEFx38jOYFSyVadYRLWfrMKIdl /WG46uwFSFTaQncpIWq+iPKd/VGd/7STLtKta5j5gVh22YAW7XY+PcDYL8IC4JN7 blWYiXgdQPc70khCWZ/P8v/F5vr0rVobwwPQc02tpABeD7yfrfsMpDJZhD7AvaeX ozpk20xGA/X0gsgUwPx2P9rbQQScMwJuSeifTYxYE0nBpLSW/cYHdODsLXY7BTk0 xij7Y08Lgduf88YR+CfTRQbgJySSyWwyEfqKhJG+26EPe6Y4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAepgSrlobHL50l3d426k6oURslrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTBkMjEyYTAtZGQ2My0z MDljLTk4MDUtZGI4N2RlNjg4YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9J4PEJRra/N+vpYDi/LO1I4ItU7WuMSYcFb5/6xCN+Xf9TLcKcaYLz puOT0WwHNZJCLD9rZzWNsT3sj+ylF6DTU/becr2MY95Z5CDcVimPIs6bSTFbPlKz 2sBnZSM6EEdgf7swjIX02E7MeQGENMhMU/zsUjO2O3ZVVZIdun1L9LssE+D5vpjg P4M7Wrmbvtum+u19RqUrYl5L54y/GApYfokeGQwjoEHteRC0Ml3ucL4oIz0J/rl7 SNZ+KhQndfDpM50U8cmHYY5PgOXivpzlpYCDJsW7xwnXbTQQDpovKP1x8B2ImyNP nVTVyJNgUhvwJrh3fy2drVbg9Q7fI+0= -----END CERTIFICATE-----Generated at Sun Sep 27 05:39:14 2026 by rpki-client