$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa File: 35f8cbc4-68be-3123-b822-aef3426ff483.roa (raw, json) Hash identifier: S+8/QO7xWvfGjpLbLJD4n05VLrz2cMgwI1GplpdJJbI= Subject key identifier: C9:D1:6A:A7:CE:31:FE:90:CA:72:97:B1:0E:B7:69:AA:CB:3C:52:8A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F2957D18A7F51AFE8A2DBC780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 265693 IP address blocks: 38.253.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:d1:8a:7f:51:af:e8:a2:db:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=0cca335d-2022-47dd-af86-6ada22c5f07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:db:39:0c:e7:30:48:31:81:be:00:b1:a7: 42:58:e3:82:4b:d8:8e:47:17:6c:72:cc:d2:8a:ec: f5:39:d1:15:ba:56:60:15:60:e2:c4:0f:14:cd:c1: 22:04:34:07:58:3a:5b:3e:43:1a:de:d8:3c:0f:5a: 2b:61:b3:e8:60:73:e1:63:f9:85:6c:c3:6e:9b:d5: b8:a8:5d:c9:b0:43:fb:3a:37:38:97:c5:75:15:81: 00:40:1b:b7:f3:c2:9e:cc:94:14:d7:3a:20:c0:3a: d7:35:8a:1e:92:8b:0e:08:15:45:26:a4:c1:57:79: 2c:2e:79:62:c8:9d:93:7e:4d:69:c6:d0:df:ea:44: 3b:66:e4:d9:16:c7:07:cc:e7:17:96:52:c9:5d:5c: e1:a5:51:fe:01:cf:d8:fb:ce:e9:8e:39:19:1e:fd: 08:41:a1:4a:a7:e1:80:92:de:af:11:e3:90:18:05: 27:e9:fb:d1:57:d3:32:cc:19:cb:51:0d:6a:5a:b8: 89:1f:67:ea:cd:f3:21:a7:9a:3c:83:61:68:72:cf: 36:64:f8:55:90:34:83:3f:ae:43:2f:40:61:b1:aa: 54:fb:09:da:d1:f9:bc:15:ce:ea:fa:d8:14:97:f3: 10:8d:f4:b0:5f:b8:89:ce:fd:02:42:33:bd:36:3f: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:6A:A7:CE:31:FE:90:CA:72:97:B1:0E:B7:69:AA:CB:3C:52:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:c5:be:93:d5:de:ca:06:4a:16:67:ce:4f:5e:ef:6f:4a:44: 83:41:3d:ce:04:3d:ee:2d:35:d7:39:df:eb:7c:a1:5e:52:52: fc:7a:0a:6d:f4:b4:c4:5c:dc:e7:47:62:00:b6:dd:b2:0c:30: 2c:75:44:4f:16:7a:df:a5:ae:f4:94:c8:fa:c1:62:72:cb:ad: 63:1d:62:4c:95:33:8c:53:07:5d:83:b3:ff:57:a4:9a:52:19: bb:b3:6c:6f:0f:53:82:a6:dc:f4:3f:36:0b:f4:7c:a1:84:38: 29:c4:73:af:c4:32:78:38:78:5b:e0:3c:56:59:6f:17:88:17: 00:a0:94:12:e4:03:0f:83:77:70:c6:ac:24:12:ce:74:17:c7: 64:99:c4:94:17:86:be:fe:25:39:4d:e3:72:7a:0e:a3:c9:67: 03:28:a2:8a:4c:22:e7:2a:62:dd:3d:0c:11:7d:31:e4:2f:d5: 9e:bd:86:29:5e:17:7a:cf:b0:54:80:eb:15:26:8d:84:64:46: ee:06:12:dc:ca:eb:7d:db:e7:90:db:88:9e:d5:23:ce:2b:e1: 61:57:8b:31:80:9b:74:0c:70:15:04:b9:8a:3b:7b:57:a1:2d: 78:2e:98:9f:e7:91:9f:e7:b1:a6:52:88:37:58:b5:b4:0b:36: 11:74:a1:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV9GKf1Gv6KLbx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MGNjYTMzNWQtMjAyMi00N2RkLWFmODYtNmFkYTIyYzVmMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwbbOQznMEgxgb4AsadCWOOCS9iORxdscszS iuz1OdEVulZgFWDixA8UzcEiBDQHWDpbPkMa3tg8D1orYbPoYHPhY/mFbMNum9W4 qF3JsEP7Ojc4l8V1FYEAQBu388KezJQU1zogwDrXNYoekosOCBVFJqTBV3ksLnli yJ2Tfk1pxtDf6kQ7ZuTZFscHzOcXllLJXVzhpVH+Ac/Y+87pjjkZHv0IQaFKp+GA kt6vEeOQGAUn6fvRV9MyzBnLUQ1qWriJH2fqzfMhp5o8g2Focs82ZPhVkDSDP65D L0BhsapU+wna0fm8Fc7q+tgUl/MQjfSwX7iJzv0CQjO9Nj+5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnRaqfOMf6QynKXsQ63aarLPFKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzVmOGNiYzQtNjhiZS0z MTIzLWI4MjItYWVmMzQyNmZmNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv1MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDFvpPV3soGShZnzk9e729KRINBPc4EPe4tNdc53+t8oV5SUvx6Cm30 tMRc3OdHYgC23bIMMCx1RE8Wet+lrvSUyPrBYnLLrWMdYkyVM4xTB12Ds/9XpJpS GbuzbG8PU4Km3PQ/Ngv0fKGEOCnEc6/EMng4eFvgPFZZbxeIFwCglBLkAw+Dd3DG rCQSznQXx2SZxJQXhr7+JTlN43J6DqPJZwMooopMIucqYt09DBF9MeQv1Z69hile F3rPsFSA6xUmjYRkRu4GEtzK633b55DbiJ7VI84r4WFXizGAm3QMcBUEuYo7e1eh LXgumJ/nkZ/nsaZSiDdYtbQLNhF0oeY= -----END CERTIFICATE-----Generated at Sun Sep 27 01:42:04 2026 by rpki-client