$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd543ad9-21e6-3e52-8364-6ba4e4867011.roa File: fd543ad9-21e6-3e52-8364-6ba4e4867011.roa (raw, json) Hash identifier: YrZP7N6tpcl7SoRca80huYgF3fkTpeCLf7kPQXoRQiY= Subject key identifier: C2:05:B7:DA:94:44:71:57:F5:45:4E:64:2E:FB:D2:5F:78:49:E8:06 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4988DD900ACF1706CDA9B700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd543ad9-21e6-3e52-8364-6ba4e4867011.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397473 IP address blocks: 38.70.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:dd:90:0a:cf:17:06:cd:a9:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55192945-8dda-489d-90d9-2500e5481ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:c3:a0:23:bb:fa:6c:c6:3a:44:f0:53:16: 7e:d6:48:e4:06:6e:73:f9:3c:3e:98:08:0c:74:90: 79:22:d6:d7:16:c9:82:ee:10:df:29:be:4a:9c:51: 12:51:5d:db:21:e3:c0:09:87:30:01:49:5a:6f:48: 22:fe:d2:33:fc:d1:87:2e:70:69:10:e3:0d:fc:95: 71:61:48:26:f5:27:a2:05:be:0b:ca:29:f7:af:4f: b4:0c:18:c7:49:22:e7:b6:03:4d:cf:ef:c8:93:a3: 5b:a9:ea:ce:b3:ac:e9:bc:b4:78:aa:11:96:2c:5c: 55:76:da:b3:66:21:d0:0e:db:68:83:31:40:8f:90: a8:91:00:31:9f:68:ed:55:e1:82:df:97:0e:b5:e3: 50:d0:9e:45:a9:56:7f:c5:85:59:3c:51:ed:b5:e4: 67:d4:94:5c:2a:72:14:83:06:16:55:08:b9:62:c8: cc:c9:76:39:49:dd:95:b7:9c:b9:26:ae:b8:74:d4: a0:fd:5d:d4:e8:89:04:46:19:8d:8f:80:82:56:f4: 93:e3:5e:eb:78:bb:0d:b2:be:81:b4:ea:74:4b:1e: f8:2d:e2:df:f3:8c:80:08:64:72:8b:ae:ce:03:78: fa:08:44:41:0e:35:17:ef:d2:e1:8e:23:98:ee:cd: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:B7:DA:94:44:71:57:F5:45:4E:64:2E:FB:D2:5F:78:49:E8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd543ad9-21e6-3e52-8364-6ba4e4867011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ae:cb:2a:04:86:e3:60:aa:47:2a:a0:45:ff:b5:63:b7:36: 82:20:b6:15:f1:a6:c5:5f:ee:8d:7d:b1:63:a2:77:ef:4f:0b: e8:8a:84:8e:5d:a9:7e:c8:fc:8f:5c:ea:2d:04:ef:95:07:e7: 46:ca:2a:19:a0:28:75:00:c3:b5:1a:5a:c3:c9:a5:77:25:ec: bc:52:5c:ee:cb:0a:c3:17:f2:0a:13:e0:c6:a8:cc:ba:d0:38: f7:6e:57:ac:30:d2:03:b0:fa:27:25:ed:f0:5f:ab:dd:57:26: 0d:a1:82:0c:50:03:af:09:5e:df:f9:e6:50:61:b6:e2:17:fe: 6a:98:f6:db:a0:f4:53:3e:27:a8:5d:a9:98:6d:2d:40:b4:c1: 0f:21:75:9c:f3:6d:4f:ad:ea:5e:16:46:bf:b6:1f:c2:72:2c: 65:22:e7:d5:8f:98:3b:20:ef:3d:73:b9:55:59:76:da:ab:29: b3:57:c0:87:cf:98:4c:6e:77:59:9c:e4:24:99:0b:fa:8c:06: 64:00:58:02:a7:52:56:5a:55:b9:26:44:be:86:20:43:06:4d: d6:eb:bc:1c:5d:e0:15:92:53:a7:18:a2:a5:6b:c5:96:42:d0: 89:8e:7c:9a:1f:55:bb:ca:15:38:22:5f:f6:c3:02:db:24:3e: a4:1f:26:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiN2QCs8XBs2ptwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUxOTI5NDUtOGRkYS00ODlkLTkwZDktMjUwMGU1NDgxZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCbDoCO7+mzGOkTwUxZ+1kjkBm5z+Tw+mAgM dJB5ItbXFsmC7hDfKb5KnFESUV3bIePACYcwAUlab0gi/tIz/NGHLnBpEOMN/JVx YUgm9SeiBb4Lyin3r0+0DBjHSSLntgNNz+/Ik6NbqerOs6zpvLR4qhGWLFxVdtqz ZiHQDttogzFAj5CokQAxn2jtVeGC35cOteNQ0J5FqVZ/xYVZPFHtteRn1JRcKnIU gwYWVQi5YsjMyXY5Sd2Vt5y5Jq64dNSg/V3U6IkERhmNj4CCVvST417reLsNsr6B tOp0Sx74LeLf84yACGRyi67OA3j6CERBDjUX79LhjiOY7s2LLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIFt9qURHFX9UVOZC770l94SegGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmQ1NDNhZDktMjFlNi0z ZTUyLTgzNjQtNmJhNGU0ODY3MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6uyyoEhuNgqkcqoEX/tWO3NoIgthXxpsVf7o19sWOid+9PC+iKhI5d qX7I/I9c6i0E75UH50bKKhmgKHUAw7UaWsPJpXcl7LxSXO7LCsMX8goT4MaozLrQ OPduV6ww0gOw+icl7fBfq91XJg2hggxQA68JXt/55lBhtuIX/mqY9tug9FM+J6hd qZhtLUC0wQ8hdZzzbU+t6l4WRr+2H8JyLGUi59WPmDsg7z1zuVVZdtqrKbNXwIfP mExud1mc5CSZC/qMBmQAWAKnUlZaVbkmRL6GIEMGTdbrvBxd4BWSU6cYoqVrxZZC 0ImOfJofVbvKFTgiX/bDAtskPqQfJuQ= -----END CERTIFICATE-----Generated at Fri Sep 25 07:19:24 2026 by rpki-client