$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2499c957-1a9c-37ca-9b89-cf88f61ee915.roa File: 2499c957-1a9c-37ca-9b89-cf88f61ee915.roa (raw, json) Hash identifier: lSTDhkbtmhXmTDa0tST04v56jAO5zUI69ssd0ERe6IY= Subject key identifier: ED:3A:BB:5A:88:DD:18:33:AA:1F:AB:7F:FB:49:30:74:BF:6F:33:C4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F497463CA4DE47E1E1523F2C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2499c957-1a9c-37ca-9b89-cf88f61ee915.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398576 IP address blocks: 38.57.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:63:ca:4d:e4:7e:1e:15:23:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4422d7d-de05-471f-ab77-185dcaed0e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:ef:95:7d:32:9e:27:c9:23:56:75:1d:40: 19:4a:14:23:4d:11:1b:e8:a8:7c:16:2c:74:85:5a: 3f:7c:9f:7c:d8:45:d6:7c:96:da:88:b8:9b:71:8e: 33:32:83:85:3a:42:fb:f5:e9:3b:5a:70:74:a3:1c: 34:fe:54:0b:02:6f:46:69:a2:51:cd:52:d4:16:68: 17:4e:7d:da:77:10:ef:f1:3e:ea:59:86:aa:42:5a: 5f:4b:2b:b1:70:6e:d6:44:da:62:41:d3:a4:d6:5c: 88:95:84:1e:45:5e:3c:6f:96:08:77:39:58:75:55: 5d:04:e1:1e:90:5e:67:91:01:68:97:4b:2e:49:f5: 77:b1:c9:78:aa:33:25:cf:cf:f4:75:43:c9:73:22: 01:65:8f:1d:14:ed:f2:1e:31:c4:eb:43:42:c8:66: d3:7f:09:20:2a:09:3b:cd:62:79:0f:ac:fb:7f:96: 3c:fe:c3:be:31:49:15:f4:c7:28:3a:d6:15:98:2e: c5:7f:ca:75:f6:43:50:28:5e:07:c7:ac:77:6e:8f: 1d:7c:96:4c:ca:59:80:d6:b6:b2:df:f0:9d:c8:de: 5a:a3:ae:25:cf:b3:fc:8e:a5:96:f2:19:7f:a0:60: 15:9e:20:a7:74:bd:4f:8e:c9:6b:09:37:03:a0:e3: fa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3A:BB:5A:88:DD:18:33:AA:1F:AB:7F:FB:49:30:74:BF:6F:33:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2499c957-1a9c-37ca-9b89-cf88f61ee915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1a:a9:7c:2d:10:e9:d5:de:42:c5:9c:43:bf:55:46:0c:18: b2:bb:27:97:cc:38:20:58:51:8f:73:f8:4b:ee:42:67:34:df: 77:b3:ef:d5:46:e2:22:b2:c9:c4:09:be:64:2b:ac:43:ac:70: 1f:48:bf:1f:04:a5:67:df:68:76:aa:d9:dd:35:7a:ae:b4:c0: 2e:8f:71:b2:84:3d:6b:4a:bb:9b:6b:25:55:e2:7a:27:b8:89: 9a:94:5f:35:31:0f:63:56:a0:7c:78:5d:df:64:67:38:f3:2b: 96:51:3e:dd:7a:8e:d8:e4:a6:d3:ec:1b:d8:48:cb:f1:94:4e: 2b:84:c8:cc:b1:08:77:c3:39:bf:b1:bd:3a:5b:e7:60:a1:8c: 84:62:9c:f3:76:46:9c:7d:a5:a4:76:e7:87:99:09:2f:21:24: 80:a3:62:d5:23:eb:d3:2c:af:a0:3d:07:67:60:16:e4:41:6e: 20:9a:ce:4b:68:7a:a8:f8:9d:7e:4c:df:d6:cd:2f:1b:94:b9: a9:bb:ab:ea:dc:3c:56:f7:29:12:1d:e6:0b:6e:a8:bc:6f:6a: ea:30:e7:ad:d9:1e:58:c0:48:c1:00:0c:26:ac:17:35:46:38: 62:6c:77:b1:b7:50:98:49:2c:9c:71:69:52:20:b1:60:a5:37: a0:9b:fa:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGPKTeR+HhUj8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ0MjJkN2QtZGUwNS00NzFmLWFiNzctMTg1ZGNhZWQwZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaTvlX0ynifJI1Z1HUAZShQjTREb6Kh8Fix0 hVo/fJ982EXWfJbaiLibcY4zMoOFOkL79ek7WnB0oxw0/lQLAm9GaaJRzVLUFmgX Tn3adxDv8T7qWYaqQlpfSyuxcG7WRNpiQdOk1lyIlYQeRV48b5YIdzlYdVVdBOEe kF5nkQFol0suSfV3scl4qjMlz8/0dUPJcyIBZY8dFO3yHjHE60NCyGbTfwkgKgk7 zWJ5D6z7f5Y8/sO+MUkV9McoOtYVmC7Ff8p19kNQKF4Hx6x3bo8dfJZMylmA1ray 3/CdyN5ao64lz7P8jqWW8hl/oGAVniCndL1PjslrCTcDoOP62QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO06u1qI3Rgzqh+rf/tJMHS/bzPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjQ5OWM5NTctMWE5Yy0z N2NhLTliODktY2Y4OGY2MWVlOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgaqXwtEOnV3kLFnEO/VUYMGLK7J5fMOCBYUY9z+EvuQmc033ez79VG 4iKyycQJvmQrrEOscB9Ivx8EpWffaHaq2d01eq60wC6PcbKEPWtKu5trJVXieie4 iZqUXzUxD2NWoHx4Xd9kZzjzK5ZRPt16jtjkptPsG9hIy/GUTiuEyMyxCHfDOb+x vTpb52ChjIRinPN2Rpx9paR254eZCS8hJICjYtUj69Msr6A9B2dgFuRBbiCazkto eqj4nX5M39bNLxuUuam7q+rcPFb3KRId5gtuqLxvauow563ZHljASMEADCasFzVG OGJsd7G3UJhJLJxxaVIgsWClN6Cb+lM= -----END CERTIFICATE-----Generated at Mon Sep 28 04:33:11 2026 by rpki-client