$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa File: 3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa (raw, json) Hash identifier: b6Q4zy+iEPNJEYnfjdu8hKb48HF8USGJ8OnXGYSrYOQ= Subject key identifier: A9:D2:A2:5D:54:DC:92:C1:79:68:48:D4:EC:08:EF:CF:A8:50:55:51 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498B55DB13F70C378CDFE180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 274170 IP address blocks: 38.255.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:55:db:13:f7:0c:37:8c:df:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=43dc6306-c50e-4410-916a-6ddf6de7387b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a4:9c:5d:4d:1b:ea:9f:47:d9:54:18:ab:41: ee:4f:3f:5c:81:65:b8:64:6e:19:f0:fa:55:61:2e: 92:c4:04:19:c9:bd:b6:4d:45:6a:84:03:30:d4:b8: 4f:38:b2:0a:e6:65:be:9b:68:49:81:29:a0:88:c2: 65:aa:f6:54:e3:66:76:31:59:b2:f0:4a:e9:8f:88: c5:5b:2d:56:be:d9:6c:b5:c6:04:4d:88:21:f5:d9: 84:2e:ed:2f:97:98:ea:82:31:82:2a:f0:14:43:98: 1e:cb:62:69:ed:43:41:bf:d1:bb:5d:77:93:97:cf: b5:bd:e5:4a:d2:57:5d:01:1c:cf:39:4c:b0:c6:d2: 51:dd:7c:00:00:f6:eb:f5:8c:0c:50:a5:ce:51:37: 33:96:ff:72:be:5e:6c:9b:cc:81:fe:94:4e:5c:fc: 13:e8:34:0b:96:a3:23:3e:72:e2:4d:9e:a7:3c:ef: 9f:02:a0:2d:ae:ee:21:9e:09:7c:1f:3e:ee:28:3e: 0f:4a:6b:b5:e4:c3:e3:17:bc:51:39:b3:98:de:4e: f9:8a:dd:65:2f:f9:71:64:3b:dd:4a:76:f7:b1:eb: 16:17:91:7d:c8:8f:3a:fc:52:9e:6b:44:63:d8:7f: ee:e6:c7:59:0a:8d:ff:70:52:bc:b8:fd:7f:7e:0f: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:A2:5D:54:DC:92:C1:79:68:48:D4:EC:08:EF:CF:A8:50:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:98:8b:13:ff:1d:54:56:3c:d8:c8:df:e3:ca:02:3c:44:1f: 35:c0:79:6b:6e:69:91:7b:00:eb:0c:69:3f:c4:fb:3c:f7:79: cf:0b:03:39:80:b6:3b:9d:61:fc:9f:03:ef:f5:e2:3d:ab:5f: b6:a5:eb:f6:f6:52:b9:e6:1c:57:82:53:b1:21:61:47:13:4c: 31:fe:b6:5d:a5:2c:61:50:87:30:52:6b:3d:d4:1e:9b:af:d6: c3:3a:dc:ef:75:9e:b7:7f:01:46:43:dd:b8:a9:23:07:ee:0b: 0c:d0:70:b4:0a:1d:73:e6:75:52:f3:97:3e:08:ca:e0:e2:ad: 54:af:ed:c7:a1:e7:61:4d:c3:29:8b:58:79:77:2c:64:e6:97: 0f:ce:44:65:ac:de:bf:23:d4:7c:c0:54:51:6d:88:76:e1:1f: f6:29:1b:39:9c:f8:d4:98:3a:49:81:4c:f1:0b:97:90:3f:1a: 07:6a:a6:5c:27:77:3e:00:79:5c:e1:ec:a4:0a:83:da:d5:6d: 68:c3:cf:0d:a6:6e:ee:c5:5a:07:37:61:f4:d2:87:7a:23:3f: bb:14:f2:89:5f:2c:a0:71:33:7b:f1:96:05:78:3e:ed:99:72: 43:4e:de:fe:72:b3:df:82:d0:d0:de:d1:d4:df:0a:59:24:8e: c5:be:4b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji1XbE/cMN4zf4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDNkYzYzMDYtYzUwZS00NDEwLTkxNmEtNmRkZjZkZTczODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aScXU0b6p9H2VQYq0HuTz9cgWW4ZG4Z8PpV YS6SxAQZyb22TUVqhAMw1LhPOLIK5mW+m2hJgSmgiMJlqvZU42Z2MVmy8Erpj4jF Wy1WvtlstcYETYgh9dmELu0vl5jqgjGCKvAUQ5gey2Jp7UNBv9G7XXeTl8+1veVK 0lddARzPOUywxtJR3XwAAPbr9YwMUKXOUTczlv9yvl5sm8yB/pROXPwT6DQLlqMj PnLiTZ6nPO+fAqAtru4hngl8Hz7uKD4PSmu15MPjF7xRObOY3k75it1lL/lxZDvd Snb3sesWF5F9yI86/FKea0Rj2H/u5sdZCo3/cFK8uP1/fg8BLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnSol1U3JLBeWhI1OwI78+oUFVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzQ0OWU1NTAtYTQ0Zi0z N2EyLWJkNDQtYzdiMWU1NTIwZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGYixP/HVRWPNjI3+PKAjxEHzXAeWtuaZF7AOsMaT/E+zz3ec8LAzmA tjudYfyfA+/14j2rX7al6/b2UrnmHFeCU7EhYUcTTDH+tl2lLGFQhzBSaz3UHpuv 1sM63O91nrd/AUZD3bipIwfuCwzQcLQKHXPmdVLzlz4IyuDirVSv7ceh52FNwymL WHl3LGTmlw/ORGWs3r8j1HzAVFFtiHbhH/YpGzmc+NSYOkmBTPELl5A/Ggdqplwn dz4AeVzh7KQKg9rVbWjDzw2mbu7FWgc3YfTSh3ojP7sU8olfLKBxM3vxlgV4Pu2Z ckNO3v5ys9+C0NDe0dTfClkkjsW+S30= -----END CERTIFICATE-----Generated at Fri Sep 25 10:02:55 2026 by rpki-client