$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7c32c87-06e2-3562-838d-6ae44e409a70.roa File: d7c32c87-06e2-3562-838d-6ae44e409a70.roa (raw, json) Hash identifier: O8rPMXxwEgK47dnaVUgAuDHIQJ8EuT8VZYSapyPbsd0= Subject key identifier: 27:40:F2:05:2E:EE:47:AD:CB:29:33:71:AF:11:2F:9C:0B:25:3D:3F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F49899995B943B657A8AEE040 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7c32c87-06e2-3562-838d-6ae44e409a70.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 270677 IP address blocks: 38.236.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:99:95:b9:43:b6:57:a8:ae:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8f1e6488-801b-4ff2-b238-f698394b20ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d0:72:ed:fc:f1:2b:a2:7e:74:4c:8d:54:a3: 37:09:0a:e1:e7:de:18:12:4b:ca:d5:c4:09:47:2e: 0a:e0:b9:43:6b:b7:50:52:e1:3a:92:dd:ed:69:c5: 0d:fb:94:1a:92:4e:87:d4:30:a7:e9:03:30:32:0f: 88:35:ed:4e:ed:6a:72:aa:e0:c2:98:c4:e5:e2:7b: 0e:a8:96:e2:99:9f:d6:61:a6:fb:c3:59:6a:05:87: 9f:ec:18:73:c4:31:9d:ba:d5:6f:c4:5d:91:29:4e: 53:f9:8f:2e:72:94:14:86:de:2e:d9:be:c2:bb:a5: f5:4b:74:e1:a0:ed:b4:4b:7a:6f:f7:eb:cd:73:92: e2:08:41:29:e5:00:41:5f:40:7c:2f:a6:84:a0:e6: 0e:9f:2c:f9:44:9c:22:e6:95:b6:03:2c:48:f9:27: b2:2c:55:f5:d2:7d:e0:49:18:a2:22:40:58:61:26: 32:50:6a:be:e6:3e:f1:93:23:34:ed:80:13:ac:f0: ba:e2:9a:f5:35:cd:27:69:9e:b9:ad:3d:fb:92:67: 99:be:0c:57:1f:8b:23:a8:03:de:9c:0e:93:a6:4a: a1:a2:13:d6:e8:c8:84:9b:58:61:99:51:33:67:07: 5c:50:2d:cc:02:14:ab:8c:89:a9:98:2e:53:b4:6c: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:40:F2:05:2E:EE:47:AD:CB:29:33:71:AF:11:2F:9C:0B:25:3D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7c32c87-06e2-3562-838d-6ae44e409a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:19:b9:62:86:b4:9d:e6:d5:b6:3a:e2:26:a7:51:64:1a:eb: f7:25:1b:fc:8b:e6:69:e6:2e:f5:26:cc:60:2c:59:6c:fe:ea: 10:e4:16:7d:80:c7:07:4b:1e:eb:2a:bd:6b:9d:73:61:31:16: a6:60:1f:d9:78:f9:bc:44:1d:0c:82:9d:70:f4:53:2c:79:ec: f4:38:6b:8d:49:76:fa:cf:b0:03:90:08:84:f3:b6:dc:0a:8f: a4:40:8a:05:3b:43:dd:ed:41:5a:ac:7d:6d:cd:9c:fb:7c:77: 1e:a8:ac:4a:e1:26:1a:03:dd:ca:15:7f:22:d3:ed:a1:79:e8: 3c:a3:f4:ce:3a:17:5b:d4:79:3c:ac:70:93:83:ec:07:cf:06: f9:2e:a7:6c:2e:93:8c:c6:6e:c2:ba:d0:2e:81:a3:e0:a9:68: 47:54:6d:c3:4b:64:05:12:92:47:3c:d7:2e:33:3b:4f:dc:68: 4b:24:57:51:4b:c2:9e:d3:82:2f:e6:51:8c:8a:26:a3:da:13: 60:8c:11:c5:43:af:3c:e4:70:48:d7:c4:2f:2a:87:fd:55:d7: 9c:09:c3:61:cc:fa:01:0b:b9:b3:33:12:9a:c7:e7:98:f9:58: e4:c0:d2:55:26:41:f4:77:c6:7d:d8:0a:ab:63:9a:de:bd:b4: 84:be:6d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZmVuUO2V6iu4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGYxZTY0ODgtODAxYi00ZmYyLWIyMzgtZjY5ODM5NGIyMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdBy7fzxK6J+dEyNVKM3CQrh594YEkvK1cQJ Ry4K4LlDa7dQUuE6kt3tacUN+5Qakk6H1DCn6QMwMg+INe1O7WpyquDCmMTl4nsO qJbimZ/WYab7w1lqBYef7BhzxDGdutVvxF2RKU5T+Y8ucpQUht4u2b7Cu6X1S3Th oO20S3pv9+vNc5LiCEEp5QBBX0B8L6aEoOYOnyz5RJwi5pW2AyxI+SeyLFX10n3g SRiiIkBYYSYyUGq+5j7xkyM07YATrPC64pr1Nc0naZ65rT37kmeZvgxXH4sjqAPe nA6TpkqhohPW6MiEm1hhmVEzZwdcUC3MAhSrjImpmC5TtGxaWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdA8gUu7ketyykzca8RL5wLJT0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDdjMzJjODctMDZlMi0z NTYyLTgzOGQtNmFlNDRlNDA5YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMZuWKGtJ3m1bY64ianUWQa6/clG/yL5mnmLvUmzGAsWWz+6hDkFn2A xwdLHusqvWudc2ExFqZgH9l4+bxEHQyCnXD0Uyx57PQ4a41JdvrPsAOQCITzttwK j6RAigU7Q93tQVqsfW3NnPt8dx6orErhJhoD3coVfyLT7aF56Dyj9M46F1vUeTys cJOD7AfPBvkup2wuk4zGbsK60C6Bo+CpaEdUbcNLZAUSkkc81y4zO0/caEskV1FL wp7Tgi/mUYyKJqPaE2CMEcVDrzzkcEjXxC8qh/1V15wJw2HM+gELubMzEprH55j5 WOTA0lUmQfR3xn3YCqtjmt69tIS+bW4= -----END CERTIFICATE-----Generated at Fri Sep 25 07:24:50 2026 by rpki-client