$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b7cb201-6088-32f4-8e7d-b8b4d1e127d2.roa File: 2b7cb201-6088-32f4-8e7d-b8b4d1e127d2.roa (raw, json) Hash identifier: 2OEKc34N4yjxjtHYZSZCeNKDBCOENO+6V/1R1D7raPU= Subject key identifier: 9E:74:90:D8:DC:94:80:86:A3:40:89:54:AE:1A:BC:FF:80:F9:B4:CD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F27F25BE2AC527CBCEB455140 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b7cb201-6088-32f4-8e7d-b8b4d1e127d2.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 61884 IP address blocks: 38.43.104.0/22 maxlen: 24 38.250.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5b:e2:ac:52:7c:bc:eb:45:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=4ac5c917-d521-4665-9f38-6098d8bdc448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:68:4c:7a:a7:06:af:e6:2d:e0:61:e1:eb: 4d:00:dc:63:c0:3d:4a:d5:4a:84:df:1e:2b:50:56: 4e:03:85:5a:73:f6:27:ca:f6:31:0f:ed:4a:ff:3a: b1:40:7c:0c:47:a3:25:94:9f:3e:e8:8a:5b:07:de: 06:9b:7c:26:d8:13:31:89:63:bb:54:7e:70:c8:1e: 6a:97:ef:2e:df:eb:0d:78:d6:f4:80:bd:8a:ca:d0: 6b:2f:f8:82:c4:4f:b8:2a:92:82:73:14:d3:bf:f6: 0a:5f:28:f6:8b:03:66:4c:a1:76:04:98:83:4b:e4: 71:b3:10:84:6e:bc:ae:01:2c:57:bb:9f:c8:87:23: 3a:47:00:a7:68:d6:97:71:c5:72:96:bb:3b:02:d9: 2a:79:f7:aa:b0:84:80:8d:45:18:fa:0b:8f:92:4a: f1:aa:56:af:da:de:e4:64:a2:81:22:a7:94:64:90: ab:f8:47:99:6c:84:77:64:99:58:79:f9:6f:a5:6d: d2:27:22:f9:e6:d8:f0:90:f1:0f:e0:d1:93:ca:6a: 40:c0:ae:00:70:76:07:f8:b0:0d:66:d9:b3:30:cb: 19:88:f6:51:f0:af:06:1e:f2:62:59:07:89:98:33: 36:9f:55:a4:81:f7:f9:72:9d:2b:77:06:6c:45:09: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:90:D8:DC:94:80:86:A3:40:89:54:AE:1A:BC:FF:80:F9:B4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b7cb201-6088-32f4-8e7d-b8b4d1e127d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.104.0/22 38.250.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:5e:19:f9:04:9e:8c:a9:95:63:e3:17:0b:4b:98:30:1a:dc: ba:c1:50:57:e8:13:f5:64:24:dd:a3:d1:13:01:ee:c0:e5:85: ab:8b:8e:3c:b7:81:46:45:5c:2a:26:4d:40:65:9f:ff:7e:6a: 0b:10:dd:d0:e3:53:78:e8:e0:57:c8:1a:78:f8:e2:03:85:25: 38:cb:be:72:78:a9:56:8f:6a:39:c0:c4:d6:3a:64:ae:b9:74: 9f:dd:98:8c:57:51:e9:2e:5c:09:0c:ed:f1:6c:75:ea:33:cd: 28:3a:df:72:df:2f:98:8b:bf:a1:81:4c:f5:ed:d4:f6:21:e4: 8c:ea:ee:f7:99:63:4f:0d:70:22:bb:ab:65:15:13:73:28:b2: 77:4f:d4:48:4f:93:a4:6d:d5:68:8f:68:17:46:02:22:0d:e0: b2:bb:4f:5c:0f:29:41:3b:91:86:d2:8b:ae:3d:3e:ef:4f:b1: 31:24:a4:95:db:85:bd:db:ea:c3:e0:88:3f:fe:bc:26:a3:74: 22:18:32:19:9b:2b:a9:34:73:7e:8c:7c:1e:7c:57:98:f7:5b: da:1f:e2:51:a8:f9:e3:ed:00:5f:bf:8c:5d:26:a9:28:37:98: 02:54:b0:79:a3:fd:21:a4:b8:e2:03:91:cf:89:dc:91:f8:2d: bd:e2:f0:b6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8n8lvirFJ8vOtFUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk NGFjNWM5MTctZDUyMS00NjY1LTlmMzgtNjA5OGQ4YmRjNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT5oTHqnBq/mLeBh4etNANxjwD1K1UqE3x4r UFZOA4Vac/YnyvYxD+1K/zqxQHwMR6MllJ8+6IpbB94Gm3wm2BMxiWO7VH5wyB5q l+8u3+sNeNb0gL2KytBrL/iCxE+4KpKCcxTTv/YKXyj2iwNmTKF2BJiDS+RxsxCE bryuASxXu5/IhyM6RwCnaNaXccVylrs7AtkqefeqsISAjUUY+guPkkrxqlav2t7k ZKKBIqeUZJCr+EeZbIR3ZJlYeflvpW3SJyL55tjwkPEP4NGTympAwK4AcHYH+LAN ZtmzMMsZiPZR8K8GHvJiWQeJmDM2n1Wkgff5cp0rdwZsRQnUEQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ50kNjclICGo0CJVK4avP+A+bTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmI3Y2IyMDEtNjA4OC0z MmY0LThlN2QtYjhiNGQxZTEyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJitoAwQC JvrAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMVeGfkEnoyplWPjFwtLmDAa3LrBUFfoE/VkJN2j0RMB7sDl hauLjjy3gUZFXComTUBln/9+agsQ3dDjU3jo4FfIGnj44gOFJTjLvnJ4qVaPajnA xNY6ZK65dJ/dmIxXUekuXAkM7fFsdeozzSg633LfL5iLv6GBTPXt1PYh5Izq7veZ Y08NcCK7q2UVE3MosndP1EhPk6Rt1WiPaBdGAiIN4LK7T1wPKUE7kYbSi649Pu9P sTEkpJXbhb3b6sPgiD/+vCajdCIYMhmbK6k0c36MfB58V5j3W9of4lGo+ePtAF+/ jF0mqSg3mAJUsHmj/SGkuOIDkc+J3JH4Lb3i8LY= -----END CERTIFICATE-----Generated at Fri Sep 25 06:05:39 2026 by rpki-client