$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa File: f98e473e-c87d-32f1-bdf9-de6df3252819.roa (raw, json) Hash identifier: pIqF+3FU+BVyEsvvLI5adP4+RqFTe0Ipdf058dVBTOg= Subject key identifier: 07:77:AB:B0:BC:A9:CA:11:30:79:9D:9C:45:14:70:5E:B4:40:82:E6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3A17CBEB88A3B3B60D977880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 272464 IP address blocks: 38.19.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cb:eb:88:a3:b3:b6:0d:97:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=0810e6ab-3a02-4374-bac8-4fd7f1f502b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:7b:af:70:b4:e9:20:07:78:a0:ba:cb:f6: 44:34:ba:81:1c:c8:92:85:b6:6b:42:44:93:1e:a4: aa:a4:1d:44:88:fd:ec:23:68:77:0c:77:b2:2a:fb: 1d:77:a9:d8:98:08:cf:2a:1a:79:90:bb:49:95:4c: 04:49:61:d7:5c:49:70:18:0d:83:3b:90:d2:8f:84: 8c:85:d3:78:7f:1a:5a:bb:e5:5c:96:95:5b:a4:24: 48:29:c2:0b:9f:4d:62:b5:6e:ba:b8:ab:65:80:19: 87:7a:a7:59:96:0e:f3:83:83:73:f7:68:22:45:9f: cb:f0:88:5e:87:cc:d5:51:6e:8e:f6:08:33:cb:12: f2:ee:2f:6e:b0:ed:78:61:bd:62:f7:55:8c:5b:b3: 67:34:b3:d4:cd:a4:8c:f6:b8:b7:f2:a2:20:6b:37: c9:5d:37:c6:0e:13:d3:38:47:35:6b:19:cc:e4:bb: e5:1b:75:b9:ce:d6:a0:4f:e0:7f:0d:c0:c0:49:6b: 13:e0:58:b9:20:ef:09:75:8e:83:66:64:64:9e:10: 63:6e:73:2e:53:44:e0:1e:2a:29:68:1b:80:d4:50: 08:1f:9a:cb:42:a6:78:7d:3e:6f:0a:5f:0b:08:00: 3e:62:92:98:51:f9:af:78:b2:15:ca:fe:6b:a7:e5: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:77:AB:B0:BC:A9:CA:11:30:79:9D:9C:45:14:70:5E:B4:40:82:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4f:05:7e:a5:11:ee:df:14:d4:10:92:f0:5f:df:b5:6d:4f: 75:92:34:5b:84:90:67:41:0c:7a:9a:f9:7c:2c:2a:09:78:03: af:9f:71:ec:f5:7d:35:0f:22:34:bd:a9:2a:0e:45:9d:8e:44: 2e:64:cd:81:fe:c0:ef:a8:7c:22:2a:2e:b4:4c:38:50:87:2e: 7f:78:0a:db:ee:41:8a:e9:22:df:0c:e6:3e:d3:18:e9:f4:dc: 41:23:e5:55:51:98:6d:e6:26:9f:3c:73:d3:16:0f:79:3f:c9: e8:1e:d4:b9:94:89:e6:fc:82:57:6d:e5:40:20:a8:0e:cc:29: e0:31:ef:cc:e4:d2:70:51:ae:20:9c:bf:1b:4c:e0:d1:62:5c: 1a:3b:2b:86:9b:bd:21:19:dc:aa:b3:0f:9b:3d:5e:bb:91:e5: 21:28:1e:0d:04:cd:9f:2b:00:8a:c9:a1:a4:08:be:d0:4d:11: cf:fc:68:a4:8a:89:3a:44:bd:a6:c4:13:8c:66:6a:03:ea:16: ea:92:1e:65:29:cd:73:ae:e1:28:91:af:ca:5b:31:1a:ea:3d: 9d:de:45:df:16:e2:dc:70:14:84:08:a7:30:b3:8e:58:af:2e: e4:9f:30:a4:83:27:24:f8:86:94:87:0c:f6:f4:3f:52:0a:01: 6d:b1:0a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8vriKOztg2XeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MDgxMGU2YWItM2EwMi00Mzc0LWJhYzgtNGZkN2YxZjUwMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3l7r3C06SAHeKC6y/ZENLqBHMiShbZrQkST HqSqpB1EiP3sI2h3DHeyKvsdd6nYmAjPKhp5kLtJlUwESWHXXElwGA2DO5DSj4SM hdN4fxpau+VclpVbpCRIKcILn01itW66uKtlgBmHeqdZlg7zg4Nz92giRZ/L8Ihe h8zVUW6O9ggzyxLy7i9usO14Yb1i91WMW7NnNLPUzaSM9ri38qIgazfJXTfGDhPT OEc1axnM5LvlG3W5ztagT+B/DcDASWsT4Fi5IO8JdY6DZmRknhBjbnMuU0TgHiop aBuA1FAIH5rLQqZ4fT5vCl8LCAA+YpKYUfmveLIVyv5rp+W5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAd3q7C8qcoRMHmdnEUUcF60QILmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjk4ZTQ3M2UtYzg3ZC0z MmYxLWJkZjktZGU2ZGYzMjUyODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhNlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9PBX6lEe7fFNQQkvBf37VtT3WSNFuEkGdBDHqa+XwsKgl4A6+fcez1 fTUPIjS9qSoORZ2ORC5kzYH+wO+ofCIqLrRMOFCHLn94CtvuQYrpIt8M5j7TGOn0 3EEj5VVRmG3mJp88c9MWD3k/yege1LmUieb8gldt5UAgqA7MKeAx78zk0nBRriCc vxtM4NFiXBo7K4abvSEZ3KqzD5s9XruR5SEoHg0EzZ8rAIrJoaQIvtBNEc/8aKSK iTpEvabEE4xmagPqFuqSHmUpzXOu4SiRr8pbMRrqPZ3eRd8W4txwFIQIpzCzjliv LuSfMKSDJyT4hpSHDPb0P1IKAW2xCpQ= -----END CERTIFICATE-----Generated at Fri Sep 25 14:43:35 2026 by rpki-client