$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa File: a24f0558-18cf-3fa7-9320-05ac0449745d.roa (raw, json) Hash identifier: rwQjoI0Eususv6OdFOngleRBFjTWeGGRb104Mo6MHuk= Subject key identifier: 0B:5F:D3:4C:3D:46:9B:A0:1A:04:CF:9C:96:8D:B5:3C:CD:2F:23:F6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4973538F6A187ED185409C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 273245 IP address blocks: 38.58.170.0/23 maxlen: 23 38.210.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:53:8f:6a:18:7e:d1:85:40:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c70b27fe-be88-4f50-ac94-7de75dc6b22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:41:0d:4d:e7:80:c5:e6:68:88:b1:6b:94: 18:ed:1d:80:71:12:97:b7:af:9b:ea:af:90:ab:f6: 5b:f9:ef:e4:02:89:67:b7:fa:9d:c8:9f:20:27:bf: f0:4d:9a:b1:8e:a9:97:95:07:79:1f:9b:52:7a:ea: 99:18:40:59:b6:d9:8d:a5:ce:63:49:47:ce:67:b1: d4:f0:b2:bd:57:65:6a:14:5b:81:de:23:b9:fb:ac: 4c:d6:53:8b:00:c5:a0:63:6b:3b:b6:7b:3f:30:d6: e7:87:b4:25:e9:9c:f7:25:8d:f1:1c:52:e0:06:a8: 4b:ce:c3:a6:6f:2a:30:f5:ab:05:8d:b1:8d:28:cf: 8c:aa:f4:36:15:b0:a2:6a:cc:63:38:6f:af:3a:9b: 97:e1:47:cd:e9:9d:1b:ae:b1:66:3f:f1:cb:ce:7c: 5a:fb:67:68:ab:7e:e4:96:6b:02:c4:ae:dd:1f:a6: 89:d5:15:10:0e:91:58:0a:0f:80:5b:45:96:3a:fa: ce:cd:80:25:48:4b:e6:f1:54:02:7d:76:e8:d7:05: 68:30:10:c5:51:7b:55:46:69:4f:53:e1:6f:01:c2: cd:85:df:92:f0:b9:ab:be:91:1f:2b:0c:08:d8:9e: 05:86:2e:43:78:2f:b9:fc:82:4c:a4:28:6a:ff:16: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:D3:4C:3D:46:9B:A0:1A:04:CF:9C:96:8D:B5:3C:CD:2F:23:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.170.0/23 38.210.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b1:d3:3d:3b:73:3c:49:59:5b:6d:a9:85:33:40:cb:4c:9b: 0f:3d:e0:7f:50:07:45:4d:35:eb:bf:49:6b:3d:05:b1:71:6b: 12:fb:4e:b4:db:c8:36:2a:b7:fa:7d:9f:54:31:2a:15:3e:2d: de:89:8c:8e:90:d2:6a:b4:40:83:b4:0f:a9:17:1b:5d:94:27: 32:1e:44:ad:9e:75:47:de:62:dc:cc:72:f0:4e:28:e9:22:95: 8c:fe:06:a5:fe:e6:49:e7:ee:3c:5a:2c:b7:76:66:5c:9e:a0: f1:78:e4:a6:1a:ff:fe:27:7d:24:40:6f:0a:e7:83:ad:10:b8: 65:f3:66:96:48:dd:35:37:d7:72:a8:4d:78:b5:ae:79:5b:b3: 96:ce:34:6f:1b:61:14:82:56:ba:b9:9a:89:77:9d:47:29:2a: e0:5e:ba:22:cf:9e:fb:c0:e1:0e:6f:8f:24:c9:74:93:9a:54: 87:40:6b:0b:c2:0e:30:53:63:bb:e6:5c:53:04:33:fb:05:45: e8:fd:7e:ab:32:0f:7a:99:18:0e:4b:68:85:0d:22:ea:2c:c2: ed:1b:93:36:ec:07:e8:42:e5:b0:a6:b5:aa:5c:04:b0:0d:b7: db:96:07:cf:9b:f5:a5:fa:36:24:7c:11:57:f7:b6:0f:11:4b: c6:66:41:f7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc1OPahh+0YVAnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzcwYjI3ZmUtYmU4OC00ZjUwLWFjOTQtN2RlNzVkYzZiMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIdBDU3ngMXmaIixa5QY7R2AcRKXt6+b6q+Q q/Zb+e/kAolnt/qdyJ8gJ7/wTZqxjqmXlQd5H5tSeuqZGEBZttmNpc5jSUfOZ7HU 8LK9V2VqFFuB3iO5+6xM1lOLAMWgY2s7tns/MNbnh7Ql6Zz3JY3xHFLgBqhLzsOm byow9asFjbGNKM+MqvQ2FbCiasxjOG+vOpuX4UfN6Z0brrFmP/HLznxa+2doq37k lmsCxK7dH6aJ1RUQDpFYCg+AW0WWOvrOzYAlSEvm8VQCfXbo1wVoMBDFUXtVRmlP U+FvAcLNhd+S8LmrvpEfKwwI2J4Fhi5DeC+5/IJMpChq/xZuzQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAtf00w9RpugGgTPnJaNtTzNLyP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTI0ZjA1NTgtMThjZi0z ZmE3LTkzMjAtMDVhYzA0NDk3NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJjqqAwQB JtL8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALCx0z07czxJWVttqYUzQMtMmw894H9QB0VNNeu/SWs9BbFx axL7TrTbyDYqt/p9n1QxKhU+Ld6JjI6Q0mq0QIO0D6kXG12UJzIeRK2edUfeYtzM cvBOKOkilYz+BqX+5knn7jxaLLd2ZlyeoPF45KYa//4nfSRAbwrng60QuGXzZpZI 3TU313KoTXi1rnlbs5bONG8bYRSCVrq5mol3nUcpKuBeuiLPnvvA4Q5vjyTJdJOa VIdAawvCDjBTY7vmXFMEM/sFRej9fqsyD3qZGA5LaIUNIuoswu0bkzbsB+hC5bCm tapcBLANt9uWB8+b9aX6NiR8EVf3tg8RS8ZmQfc= -----END CERTIFICATE-----Generated at Sat Sep 26 09:04:06 2026 by rpki-client