$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa File: 11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa (raw, json) Hash identifier: fN3wHS/bM3dGKgP2TsjIuU2VArufsX6A1IWCKweMtPo= Subject key identifier: FF:D0:9D:43:32:9B:84:C4:0D:5A:4F:7D:18:B3:B4:CA:2F:1E:0B:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498AE2EFCFA7A8E2F9730F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398721 IP address blocks: 38.3.64.0/20 maxlen: 20 38.3.96.0/19 maxlen: 20 38.9.64.0/19 maxlen: 19 38.17.47.0/24 maxlen: 24 38.18.128.0/21 maxlen: 21 38.21.48.0/21 maxlen: 21 38.23.160.0/19 maxlen: 19 38.23.224.0/19 maxlen: 19 38.29.128.0/20 maxlen: 20 38.30.128.0/19 maxlen: 19 38.35.192.0/19 maxlen: 19 38.39.136.0/21 maxlen: 21 38.40.96.0/20 maxlen: 20 38.40.112.0/20 maxlen: 20 38.49.160.0/19 maxlen: 19 38.55.64.0/21 maxlen: 21 38.59.160.0/20 maxlen: 20 38.61.48.0/20 maxlen: 20 38.61.64.0/19 maxlen: 19 38.74.32.0/20 maxlen: 20 38.80.94.0/23 maxlen: 23 38.80.96.0/20 maxlen: 20 38.85.160.0/19 maxlen: 19 38.86.0.0/19 maxlen: 19 38.108.78.0/24 maxlen: 24 38.108.82.0/24 maxlen: 24 38.131.64.0/19 maxlen: 19 38.133.32.0/20 maxlen: 20 38.141.128.0/19 maxlen: 19 38.141.170.0/23 maxlen: 23 38.141.172.0/23 maxlen: 23 38.141.174.0/24 maxlen: 24 38.141.192.0/19 maxlen: 19 38.143.192.0/19 maxlen: 19 38.145.85.0/24 maxlen: 24 38.147.240.0/20 maxlen: 20 38.175.128.0/19 maxlen: 19 38.240.192.0/19 maxlen: 19 149.115.32.0/20 maxlen: 20 149.115.64.0/19 maxlen: 20 149.115.192.0/20 maxlen: 20 154.22.96.0/19 maxlen: 19 154.27.32.0/19 maxlen: 19 207.60.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e2:ef:cf:a7:a8:e2:f9:73:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=470e32b0-a663-4039-bbd8-45aa588a9c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:1f:6f:29:9b:84:78:8a:e2:4e:ea:e0:e2: 4f:1d:00:80:12:e8:3c:8c:4f:09:d6:ab:52:b6:14: 73:bf:3e:b4:6b:52:92:aa:07:c7:d0:45:cd:98:fb: a1:8f:41:1f:2b:cf:8d:0e:5a:36:b1:7f:ab:0e:9a: 97:1e:a3:5e:da:89:ee:ea:5c:19:93:64:42:27:9c: ea:22:33:78:93:3f:0b:ef:e3:81:1d:ef:c4:1c:ff: 09:81:75:23:4b:cb:3f:7b:04:b9:98:34:92:92:c6: 31:8f:8a:ab:aa:a2:ce:2d:db:71:f2:63:75:e5:88: 97:67:de:84:ef:d9:6c:cb:d3:f5:f7:a6:b8:20:a7: 94:f9:57:7a:e3:e8:15:50:c2:5b:0c:17:13:77:4a: 52:61:42:74:22:37:d1:40:a8:6b:8d:f0:66:a5:63: ba:7f:ff:fd:61:2e:07:46:08:82:68:0a:c3:2e:35: 0d:35:1f:32:0c:c4:8c:80:93:16:2d:23:34:3d:30: 85:92:8b:06:90:56:c0:a7:5e:82:7c:38:91:29:2c: 73:a1:60:14:1d:b1:94:df:d0:1c:0a:66:27:ad:c5: 07:ea:14:1b:72:3e:72:4d:e3:c5:23:88:b1:dd:42: 48:4b:c0:51:83:b7:a3:79:3b:7c:b6:10:b3:31:21: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:9D:43:32:9B:84:C4:0D:5A:4F:7D:18:B3:B4:CA:2F:1E:0B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.64.0/20 38.3.96.0/19 38.9.64.0/19 38.17.47.0/24 38.18.128.0/21 38.21.48.0/21 38.23.160.0/19 38.23.224.0/19 38.29.128.0/20 38.30.128.0/19 38.35.192.0/19 38.39.136.0/21 38.40.96.0/19 38.49.160.0/19 38.55.64.0/21 38.59.160.0/20 38.61.48.0-38.61.95.255 38.74.32.0/20 38.80.94.0-38.80.111.255 38.85.160.0/19 38.86.0.0/19 38.108.78.0/24 38.108.82.0/24 38.131.64.0/19 38.133.32.0/20 38.141.128.0/19 38.141.170.0-38.141.174.255 38.141.192.0/19 38.143.192.0/19 38.145.85.0/24 38.147.240.0/20 38.175.128.0/19 38.240.192.0/19 149.115.32.0/20 149.115.64.0/19 149.115.192.0/20 154.22.96.0/19 154.27.32.0/19 207.60.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a3:d3:c5:38:58:fd:b7:91:7b:4f:85:6b:7c:5b:6a:eb:b5: 7e:18:bf:d8:40:ce:ea:fe:a3:b0:7c:60:0b:cd:00:9e:8f:60: fd:1b:7a:26:2a:8f:27:29:d9:26:9a:33:ef:09:55:98:58:9e: 99:ae:61:e2:2f:f6:2b:58:7e:fa:ab:9e:be:97:d5:b4:9b:da: 3c:df:e5:da:a8:40:ec:86:e1:b9:f6:9c:b1:4c:34:07:e4:01: e2:ce:14:7a:bd:60:a9:a5:8f:b8:f1:6a:fc:bf:c2:94:7d:fa: 15:76:e0:7c:db:96:02:8d:d7:79:54:d4:17:ae:58:2a:f7:f9: a1:99:05:29:49:12:c7:92:ca:46:e7:0c:92:6f:81:56:0d:90: 7e:e0:f9:ba:41:54:2b:2e:62:93:75:2f:a0:cd:a7:f5:e2:21: 2b:ef:9b:a8:b6:c5:a8:a6:4b:96:21:dd:8e:77:46:42:ee:f8: e8:65:f0:62:34:8a:87:a7:64:18:d0:33:78:b2:af:44:43:7f: 67:df:4d:17:3e:8f:6d:b9:53:0a:dc:ed:7f:62:90:c8:b3:9d: 4c:e8:f5:42:53:1f:2f:92:76:0d:1a:e4:dc:23:38:66:2a:6f: b6:f6:f3:68:6e:62:06:91:1a:83:df:a1:8a:a5:7d:0a:a5:20: 7c:07:95:a8 -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWE9JiuLvz6eo4vlzDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDcwZTMyYjAtYTY2My00MDM5LWJiZDgtNDVhYTU4OGE5YzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+QfbymbhHiK4k7q4OJPHQCAEug8jE8J1qtS thRzvz60a1KSqgfH0EXNmPuhj0EfK8+NDlo2sX+rDpqXHqNe2onu6lwZk2RCJ5zq IjN4kz8L7+OBHe/EHP8JgXUjS8s/ewS5mDSSksYxj4qrqqLOLdtx8mN15YiXZ96E 79lsy9P196a4IKeU+Vd64+gVUMJbDBcTd0pSYUJ0IjfRQKhrjfBmpWO6f//9YS4H RgiCaArDLjUNNR8yDMSMgJMWLSM0PTCFkosGkFbAp16CfDiRKSxzoWAUHbGU39Ac CmYnrcUH6hQbcj5yTePFI4ix3UJIS8BRg7ejeTt8thCzMSGsfQIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFP/QnUMym4TEDVpPfRiztMovHgvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTFmZjZiNGUtMmJiNi0z YTU4LTkzZDQtYmRiOTY1YzM0YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEBCYDQAMEBSYDYAMEBSYJQAMEACYRLwMEAyYSgAMEAyYVMAMEBSYXoAMEBSYX 4AMEBCYdgAMEBSYegAMEBSYjwAMEAyYniAMEBSYoYAMEBSYxoAMEAyY3QAMEBCY7 oDAMAwQEJj0wAwQFJj1AAwQEJkogMAwDBAEmUF4DBAQmUGADBAUmVaADBAUmVgAD BAAmbE4DBAAmbFIDBAUmg0ADBAQmhSADBAUmjYAwDAMEASaNqgMEACaNrgMEBSaN wAMEBSaPwAMEACaRVQMEBCaT8AMEBSavgAMEBSbwwAMEBJVzIAMEBZVzQAMEBJVz wAMEBZoWYAMEBZobIAMEBc88QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbo9PFOFj9t5F7T4VrfFtq67V+ GL/YQM7q/qOwfGALzQCej2D9G3omKo8nKdkmmjPvCVWYWJ6ZrmHiL/YrWH76q56+ l9W0m9o83+XaqEDshuG59pyxTDQH5AHizhR6vWCppY+48Wr8v8KUffoVduB825YC jdd5VNQXrlgq9/mhmQUpSRLHkspG5wySb4FWDZB+4Pm6QVQrLmKTdS+gzaf14iEr 75uotsWopkuWId2Od0ZC7vjoZfBiNIqHp2QY0DN4sq9EQ39n300XPo9tuVMK3O1/ YpDIs51M6PVCUx8vknYNGuTcIzhmKm+29vNobmIGkRqD36GKpX0KpSB8B5Wo -----END CERTIFICATE-----Generated at Fri Sep 25 14:37:50 2026 by rpki-client