$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff0b3ab-c84c-3ebd-81c2-9adf2b5afb9c.roa File: 2ff0b3ab-c84c-3ebd-81c2-9adf2b5afb9c.roa (raw, json) Hash identifier: vCJ5T6ii6S35MeL5AlSPMNqKrVxfQyjzXHunaxCTKsI= Subject key identifier: 35:9C:F2:56:59:C3:51:D7:05:7E:5B:7A:22:09:14:81:BE:F0:40:18 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3773FB5BE04BD3CC01729E40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff0b3ab-c84c-3ebd-81c2-9adf2b5afb9c.roa Signing time: Fri 18 Sep 2026 14:18:36 +0000 ROA not before: Fri 18 Sep 2026 14:18:36 +0000 ROA not after: Thu 17 Dec 2026 15:18:36 +0000 asID: 152491 IP address blocks: 38.158.246.0/24 maxlen: 24 154.21.112.0/24 maxlen: 24 154.21.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:73:fb:5b:e0:4b:d3:cc:01:72:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 18 14:18:36 2026 GMT Not After : Dec 17 15:18:36 2026 GMT Subject: CN=75d71979-3c28-4ef8-a593-d7bd36d1d6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:94:41:dd:a5:9a:cb:10:b2:d8:84:40:20: 3c:76:62:71:7c:0e:ec:85:d3:aa:ce:95:f1:a0:73: 19:ce:77:72:0b:86:26:e8:ce:dd:13:3f:8b:e3:4e: 34:1b:fe:db:28:bd:6c:df:33:a4:c0:0c:bf:ab:e6: 6e:00:97:66:eb:b5:17:b0:4f:b1:68:0c:97:40:52: 27:10:fd:85:c7:94:0a:94:a7:38:85:ca:2d:cd:0d: cd:f7:b4:34:3f:9f:88:ee:80:01:c5:7c:4b:21:d1: 80:c3:b8:35:e1:43:4f:42:c6:56:1b:94:3e:f8:d3: 05:7a:7b:d9:fe:c8:d1:6f:c9:7d:52:84:f8:7d:b3: 89:33:25:63:ae:8f:84:92:f3:45:21:3c:7e:38:9c: bb:6a:5c:3c:79:8a:87:d1:c6:2f:14:58:52:4e:47: 56:23:6b:2c:4e:b8:51:18:07:e6:f6:5b:25:be:d9: e0:2b:a9:41:9b:be:fe:61:62:e7:01:8b:69:79:b9: 93:23:25:b4:a2:a5:b9:9f:fd:19:b5:70:7e:15:ea: e4:80:51:2f:a0:56:8e:6b:80:90:42:25:de:b8:3b: b6:49:67:15:7d:3a:82:9c:1b:3c:4d:3a:d8:79:22: 6c:da:90:09:ac:60:79:5b:2d:88:df:4a:0d:60:34: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9C:F2:56:59:C3:51:D7:05:7E:5B:7A:22:09:14:81:BE:F0:40:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff0b3ab-c84c-3ebd-81c2-9adf2b5afb9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.246.0/24 154.21.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e0:14:43:c9:3c:23:26:9e:ad:84:f9:f1:9f:2b:57:20:c4: ca:88:d2:51:37:09:a3:20:25:11:9a:57:55:f1:c0:91:37:96: 96:1e:3c:9c:e4:30:21:e5:d8:85:e0:52:9a:84:62:6b:83:80: 63:01:9a:ba:3b:6e:54:93:a6:77:4a:9a:c8:51:5c:9c:9d:dd: 07:53:2e:db:e8:9a:42:82:92:50:03:eb:d0:bc:66:46:10:da: f2:e2:8b:45:3d:ce:bf:1e:2f:5d:b2:07:3f:14:dd:c2:4f:dc: f4:10:ec:ed:b6:4f:81:79:32:18:f5:60:c2:38:37:9c:10:01: b0:60:7c:7f:01:50:c5:38:74:45:4c:ee:fe:79:c5:f0:e2:cc: 5b:40:24:a9:b3:dc:05:fb:3e:c8:39:08:1f:d5:e5:df:af:3b: 70:fc:af:84:d6:25:d0:0c:e1:78:5e:ed:2d:98:40:fa:2a:7e: aa:1f:d0:f7:e4:18:49:03:c1:dd:c1:77:c8:d7:22:b2:6f:a6: ee:7c:ef:45:ca:c9:4c:2b:19:e0:50:9e:e0:2d:50:a1:dd:d4: 97:ac:1c:81:73:0f:e2:01:b3:88:c0:d8:da:99:0b:83:4c:2b: 01:6b:f0:b2:51:2e:67:64:41:6f:ae:d9:53:58:c7:1c:d7:03: ec:38:14:2e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE83c/tb4EvTzAFynkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxODE0MTgzNloXDTI2MTIxNzE1MTgzNlowLzEtMCsGA1UEAxMk NzVkNzE5NzktM2MyOC00ZWY4LWE1OTMtZDdiZDM2ZDFkNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI2UQd2lmssQstiEQCA8dmJxfA7shdOqzpXx oHMZzndyC4Ym6M7dEz+L4040G/7bKL1s3zOkwAy/q+ZuAJdm67UXsE+xaAyXQFIn EP2Fx5QKlKc4hcotzQ3N97Q0P5+I7oABxXxLIdGAw7g14UNPQsZWG5Q++NMFenvZ /sjRb8l9UoT4fbOJMyVjro+EkvNFITx+OJy7alw8eYqH0cYvFFhSTkdWI2ssTrhR GAfm9lslvtngK6lBm77+YWLnAYtpebmTIyW0oqW5n/0ZtXB+FerkgFEvoFaOa4CQ QiXeuDu2SWcVfTqCnBs8TTrYeSJs2pAJrGB5Wy2I30oNYDTr2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDWc8lZZw1HXBX5beiIJFIG+8EAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmZmMGIzYWItYzg0Yy0z ZWJkLTgxYzItOWFkZjJiNWFmYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJp72AwQB mhVwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJfgFEPJPCMmnq2E+fGfK1cgxMqI0lE3CaMgJRGaV1XxwJE3 lpYePJzkMCHl2IXgUpqEYmuDgGMBmro7blSTpndKmshRXJyd3QdTLtvomkKCklAD 69C8ZkYQ2vLii0U9zr8eL12yBz8U3cJP3PQQ7O22T4F5Mhj1YMI4N5wQAbBgfH8B UMU4dEVM7v55xfDizFtAJKmz3AX7Psg5CB/V5d+vO3D8r4TWJdAM4Xhe7S2YQPoq fqof0PfkGEkDwd3Bd8jXIrJvpu5870XKyUwrGeBQnuAtUKHd1JesHIFzD+IBs4jA 2NqZC4NMKwFr8LJRLmdkQW+u2VNYxxzXA+w4FC4= -----END CERTIFICATE-----Generated at Sun Sep 20 17:54:24 2026 by rpki-client