$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bc5cf28-2b96-3a63-8873-4e1f468e7904.roa File: 1bc5cf28-2b96-3a63-8873-4e1f468e7904.roa (raw, json) Hash identifier: HzM03obSAmldlvA0Ra3HUaTx6MnTSnU2ngnLKI9riwA= Subject key identifier: E3:BD:7E:B7:29:F0:A9:06:4D:6A:19:8C:48:43:CC:AF:12:57:12:AA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0C0779F0DD6BABBDE62FD2C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bc5cf28-2b96-3a63-8873-4e1f468e7904.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 273174 IP address blocks: 38.191.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:79:f0:dd:6b:ab:bd:e6:2f:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=d9269f6d-f517-40f2-8253-3d189acf407e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:58:39:54:69:7c:01:e7:68:48:8e:9b:bd:c2: d1:27:57:aa:e3:97:ee:b5:34:0e:37:fb:03:34:2a: 72:38:80:48:8a:43:81:4e:17:be:d6:fa:85:e2:25: 03:99:3c:e2:59:1d:f2:30:03:0d:0e:81:39:83:17: e2:11:ca:db:7a:e5:3d:11:15:8e:bf:be:fb:b8:21: 24:3e:ee:d1:ad:16:09:ac:1c:b8:eb:78:1b:ea:bc: c3:cb:65:dd:ae:fe:91:a9:2a:8e:c1:4f:8b:14:d2: ea:d0:9c:37:12:ae:ce:56:ac:6a:0d:9d:29:48:1a: f4:e3:75:4f:36:b6:54:37:bf:24:84:12:de:6f:a6: a7:18:d4:0f:95:95:8f:7e:2d:f2:56:d5:1c:83:d4: 3d:57:a6:44:a0:5e:06:33:ed:1e:ae:b4:bf:a1:cf: 8a:74:33:04:57:e9:0e:14:ad:b0:d7:8b:23:5e:18: 2e:6b:ac:80:6a:87:9d:e3:a1:9b:ac:07:e9:a5:ae: 84:6a:19:7a:db:66:0a:0c:6f:09:80:c0:64:a0:be: 64:1b:05:27:9b:a5:50:3f:9c:cb:23:67:8a:ca:39: 71:ce:fb:8d:77:d1:c9:85:00:4e:8c:19:04:9d:a4: 3c:43:08:94:0c:eb:8a:25:2a:02:ed:08:d2:d7:30: e9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:7E:B7:29:F0:A9:06:4D:6A:19:8C:48:43:CC:AF:12:57:12:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bc5cf28-2b96-3a63-8873-4e1f468e7904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.191.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:22:e5:31:53:84:b8:14:ba:b1:76:0b:d9:5b:3b:80:78:b1: d9:d2:16:db:29:9c:88:d6:da:87:ad:ee:b0:86:ad:fb:39:44: 9d:90:d5:79:0d:51:16:9a:84:e1:32:93:ac:61:72:70:3c:b4: 0a:f4:f4:40:05:af:4d:d8:44:ee:76:6f:66:ba:03:b2:e0:b5: 99:26:61:6a:79:05:c1:3a:28:fd:ab:d5:20:6b:9b:ea:d7:1b: 96:98:eb:b6:83:52:7e:57:8e:3d:9d:e3:81:54:53:07:98:94: e5:0f:c6:7e:7c:6c:32:df:09:2a:a6:46:77:02:6f:20:97:e4: d3:a4:3c:53:fe:94:33:25:1f:db:51:15:a6:aa:b1:20:f7:1e: b4:19:ed:46:4a:af:5a:f1:94:eb:a3:83:f8:df:c6:ee:d2:1b: e4:2d:60:b8:75:69:e4:ad:60:d0:b4:57:c3:4a:57:5c:d2:f7: 22:2a:3b:82:73:3f:ff:61:12:99:7e:61:e7:43:b5:3d:6e:5d: 86:d4:47:d8:af:a1:a6:52:66:e9:bc:90:5f:e3:a7:24:72:94: 6c:c2:51:a4:38:09:36:01:0c:d4:82:44:37:54:bf:76:e2:09: c4:4c:9d:5f:90:62:45:d2:39:44:ff:40:f9:7d:2f:73:f9:7c: 4b:70:96:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB3nw3WurveYv0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDkyNjlmNmQtZjUxNy00MGYyLTgyNTMtM2QxODlhY2Y0MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1g5VGl8AedoSI6bvcLRJ1eq45futTQON/sD NCpyOIBIikOBThe+1vqF4iUDmTziWR3yMAMNDoE5gxfiEcrbeuU9ERWOv777uCEk Pu7RrRYJrBy463gb6rzDy2Xdrv6RqSqOwU+LFNLq0Jw3Eq7OVqxqDZ0pSBr043VP NrZUN78khBLeb6anGNQPlZWPfi3yVtUcg9Q9V6ZEoF4GM+0errS/oc+KdDMEV+kO FK2w14sjXhgua6yAaoed46GbrAfppa6Eahl622YKDG8JgMBkoL5kGwUnm6VQP5zL I2eKyjlxzvuNd9HJhQBOjBkEnaQ8QwiUDOuKJSoC7QjS1zDpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO9frcp8KkGTWoZjEhDzK8SVxKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWJjNWNmMjgtMmI5Ni0z YTYzLTg4NzMtNGUxZjQ2OGU3OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJr++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsi5TFThLgUurF2C9lbO4B4sdnSFtspnIjW2oet7rCGrfs5RJ2Q1XkN URaahOEyk6xhcnA8tAr09EAFr03YRO52b2a6A7LgtZkmYWp5BcE6KP2r1SBrm+rX G5aY67aDUn5Xjj2d44FUUweYlOUPxn58bDLfCSqmRncCbyCX5NOkPFP+lDMlH9tR FaaqsSD3HrQZ7UZKr1rxlOujg/jfxu7SG+QtYLh1aeStYNC0V8NKV1zS9yIqO4Jz P/9hEpl+YedDtT1uXYbUR9ivoaZSZum8kF/jpyRylGzCUaQ4CTYBDNSCRDdUv3bi CcRMnV+QYkXSOUT/QPl9L3P5fEtwlvQ= -----END CERTIFICATE-----Generated at Mon Sep 21 10:29:38 2026 by rpki-client