$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/353c0d87-d68a-346e-96c9-2ad287f26589.roa File: 353c0d87-d68a-346e-96c9-2ad287f26589.roa (raw, json) Hash identifier: kp2k631y7Ecc+vSDqNtymWnKsOpHY1+6TP6siEKvXBU= Subject key identifier: 1E:2D:91:A6:0D:66:3C:94:89:B9:6D:DB:83:64:EF:74:02:9B:93:A5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F455C877AD5DC9145B9397580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/353c0d87-d68a-346e-96c9-2ad287f26589.roa Signing time: Wed 23 Sep 2026 13:52:40 +0000 ROA not before: Wed 23 Sep 2026 13:52:40 +0000 ROA not after: Tue 22 Dec 2026 14:52:40 +0000 asID: 1299 IP address blocks: 38.7.152.0/22 maxlen: 24 38.51.144.0/22 maxlen: 24 38.110.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:5c:87:7a:d5:dc:91:45:b9:39:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 23 13:52:40 2026 GMT Not After : Dec 22 14:52:40 2026 GMT Subject: CN=324df254-0cd8-4a2a-ac84-df5fc9803ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:f1:4b:e9:56:d6:85:3d:aa:a5:b6:dc:ec: 70:2a:c1:01:99:cb:ec:6b:af:fd:f4:a9:f7:bd:10: 8b:c1:fd:35:1c:e4:0b:b8:70:de:51:c3:b3:96:c4: 95:95:6f:21:07:01:ec:75:a4:a1:68:a5:50:2d:a1: 2c:ce:4c:a4:82:23:52:c7:ca:8f:a9:2b:40:70:8c: 82:eb:25:b3:03:5e:c0:23:a0:db:b3:4a:8d:14:8b: a5:f3:9c:99:40:7e:91:22:a8:1b:1a:4c:5c:a1:70: 04:8b:96:19:40:b5:aa:09:97:ad:6e:23:fa:13:f7: 1a:f0:fa:d9:31:10:7c:ee:16:de:11:6b:d2:56:76: 0c:1c:ff:b7:b8:61:33:d1:41:75:82:8f:19:f3:91: d9:aa:05:4c:96:0a:9a:2f:00:88:60:e5:f5:28:64: 63:86:19:ff:b5:3d:65:79:96:d4:b7:18:3a:da:72: 02:59:0c:83:7a:e2:31:b1:4a:35:46:19:6b:e4:2a: a1:85:cf:d6:3f:ab:12:05:ac:2f:f0:da:64:57:f1: ef:3d:71:5f:51:56:2e:a8:d7:2c:1b:d6:7c:a6:90: 7a:dd:a7:6a:eb:6b:69:a9:12:2d:be:d5:a9:22:25: 75:03:ba:ef:12:09:17:17:56:fd:f3:ad:7e:fe:7b: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2D:91:A6:0D:66:3C:94:89:B9:6D:DB:83:64:EF:74:02:9B:93:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/353c0d87-d68a-346e-96c9-2ad287f26589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.7.152.0/22 38.51.144.0/22 38.110.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:78:5c:94:ca:04:19:75:69:8c:bc:e0:5a:72:b9:d8:fc:9e: bf:96:cc:9b:80:b8:93:a9:f9:a1:74:74:da:a2:8a:da:d8:39: 90:4e:91:68:8a:98:e7:0e:c5:c6:89:6b:32:f6:8a:5e:fd:e2: 7e:37:f8:63:8c:41:ba:96:93:d2:7b:fb:1d:e2:18:88:cc:ae: 9d:5f:25:47:bb:c9:f6:c2:96:0e:a0:2e:63:67:7a:c0:34:1e: 1e:7c:91:f7:1d:19:d1:d9:97:56:2a:60:cf:1c:b3:da:a6:a7: f8:d9:47:84:70:d8:3a:39:fe:b2:72:ea:b0:d6:66:dc:b2:97: b3:af:27:1e:da:12:2f:02:68:a4:6b:5a:68:31:68:6b:06:34: df:7e:c9:86:1f:da:44:a5:58:18:b8:44:87:ee:93:8e:af:42: 08:1e:b8:83:63:3b:cb:38:af:78:b2:3e:32:91:e5:f7:77:13: 0b:c9:97:93:e2:d4:de:f7:0a:93:48:b7:2b:3a:28:f5:3b:e7: dd:79:fd:e5:7a:1c:a4:24:03:b5:8b:aa:2e:af:fd:06:54:3c: 47:1f:92:a6:99:34:62:20:41:3e:8e:e6:04:b1:20:ad:6a:b7: e2:9a:81:f2:b8:75:0f:59:1c:68:31:8a:8f:32:da:a7:bb:09: 4c:a3:2f:75 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9FXId61dyRRbk5dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMzEzNTI0MFoXDTI2MTIyMjE0NTI0MFowLzEtMCsGA1UEAxMk MzI0ZGYyNTQtMGNkOC00YTJhLWFjODQtZGY1ZmM5ODAzYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP7xS+lW1oU9qqW23OxwKsEBmcvsa6/99Kn3 vRCLwf01HOQLuHDeUcOzlsSVlW8hBwHsdaShaKVQLaEszkykgiNSx8qPqStAcIyC 6yWzA17AI6Dbs0qNFIul85yZQH6RIqgbGkxcoXAEi5YZQLWqCZetbiP6E/ca8PrZ MRB87hbeEWvSVnYMHP+3uGEz0UF1go8Z85HZqgVMlgqaLwCIYOX1KGRjhhn/tT1l eZbUtxg62nICWQyDeuIxsUo1Rhlr5Cqhhc/WP6sSBawv8NpkV/HvPXFfUVYuqNcs G9Z8ppB63adq62tpqRItvtWpIiV1A7rvEgkXF1b9861+/ns3rwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFB4tkaYNZjyUiblt24Nk73QCm5OlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzUzYzBkODctZDY4YS0z NDZlLTk2YzktMmFkMjg3ZjI2NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJgeYAwQC JjOQAwQEJm7wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAJ4XJTKBBl1aYy84Fpyudj8nr+WzJuAuJOp+aF0 dNqiitrYOZBOkWiKmOcOxcaJazL2il794n43+GOMQbqWk9J7+x3iGIjMrp1fJUe7 yfbClg6gLmNnesA0Hh58kfcdGdHZl1YqYM8cs9qmp/jZR4Rw2Do5/rJy6rDWZtyy l7OvJx7aEi8CaKRrWmgxaGsGNN9+yYYf2kSlWBi4RIfuk46vQggeuINjO8s4r3iy PjKR5fd3EwvJl5Pi1N73CpNItys6KPU75915/eV6HKQkA7WLqi6v/QZUPEcfkqaZ NGIgQT6O5gSxIK1qt+KagfK4dQ9ZHGgxio8y2qe7CUyjL3U= -----END CERTIFICATE-----Generated at Sat Sep 26 22:45:52 2026 by rpki-client