$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa File: 3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa (raw, json) Hash identifier: R3exhH2Wu3hLiQlCPMNDYLriVLoj4gmLWC4tt0kx3T8= Subject key identifier: BC:2E:6D:86:52:20:73:53:79:54:9B:30:C2:35:80:69:3B:33:5F:95 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF87CB49B84494D72F5467F40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 273683 IP address blocks: 38.3.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b4:9b:84:49:4d:72:f5:46:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=511907be-3438-4b00-9ab5-c9499303af21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:f4:dd:85:96:7d:2f:c8:ea:ec:20:e5:5b: f9:4a:58:11:db:db:e2:89:67:1a:95:a0:1a:ad:86: 73:75:27:8e:f6:0f:f4:cc:4b:02:ab:52:0e:b1:40: 9a:36:d6:27:d3:74:5d:a8:8f:0f:ce:87:55:11:8a: 0c:20:c8:37:05:67:09:d6:96:88:a3:58:24:ee:c8: 0b:81:12:f0:13:79:c6:ed:27:52:a8:33:b4:8e:ff: 76:fc:49:0a:57:82:84:17:65:f9:b0:03:8d:ed:3b: 8a:63:9c:33:f2:5c:44:d6:60:f5:45:a2:df:af:00: 32:31:a9:b5:60:47:6a:a7:c7:04:f3:d9:b4:e9:8e: 18:bd:23:14:b7:95:19:0b:77:80:fe:38:36:03:e5: 32:aa:19:94:18:71:90:ee:f4:46:32:d2:99:6b:12: 4a:c6:04:7d:39:32:a0:99:ff:fe:c0:78:ed:ce:dd: 8e:9e:14:d3:db:ec:94:45:8f:25:5c:3c:ed:fd:2a: b2:f7:21:81:95:c1:eb:8a:7f:e2:30:6a:00:fc:e5: 42:dd:a9:93:6c:91:a1:f8:66:20:1d:d7:db:15:01: 4a:ad:e2:83:64:2c:df:d7:d8:62:ae:ce:7c:96:97: 4a:fa:fd:75:9e:e8:a3:ae:a1:e8:5e:53:39:5d:59: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2E:6D:86:52:20:73:53:79:54:9B:30:C2:35:80:69:3B:33:5F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e6:bf:38:2d:fc:7b:b6:26:e0:d4:e1:dd:1a:9f:98:86:0a: a4:8a:b5:aa:b5:ea:cd:41:ad:f6:65:5e:d6:cf:0d:9e:fc:a2: ea:ea:66:40:70:b5:08:0d:cc:81:d8:2b:35:41:b5:0d:e8:5c: 25:32:5c:3b:63:db:ec:2d:d4:95:15:33:a9:dd:7c:64:2c:b6: c8:36:12:e2:cd:cf:f3:32:21:ec:c6:7d:19:c0:3b:e0:28:38: 2a:db:3b:97:2d:64:ca:fb:94:13:68:93:98:03:fe:f6:cf:c4: 45:ec:80:9e:7a:b1:0e:62:29:ac:9f:cf:36:36:4f:b5:2c:a0: 37:8c:32:2c:de:c0:39:96:b9:a2:a4:51:4a:fe:a7:31:59:f9: b4:4c:ae:c7:29:3b:2f:b7:0b:e6:1b:b9:6f:23:01:22:b8:ae: 47:33:a5:90:9b:2e:b3:be:4b:17:4d:75:8c:2c:2e:3a:79:5d: de:b3:61:31:6b:43:44:26:f5:a0:40:4f:e1:ee:dd:af:0c:17: c0:43:df:14:b4:20:60:d1:55:76:dd:a6:76:f0:97:eb:dd:05: 9c:66:dd:98:14:3e:25:1b:39:e7:91:03:dc:7c:9e:ad:97:09: c3:47:c7:e4:97:38:64:eb:9f:9d:62:4e:ba:74:1a:3b:c3:29: 9d:ac:ed:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLSbhElNcvVGf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NTExOTA3YmUtMzQzOC00YjAwLTlhYjUtYzk0OTkzMDNhZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh703YWWfS/I6uwg5Vv5SlgR29viiWcalaAa rYZzdSeO9g/0zEsCq1IOsUCaNtYn03RdqI8PzodVEYoMIMg3BWcJ1paIo1gk7sgL gRLwE3nG7SdSqDO0jv92/EkKV4KEF2X5sAON7TuKY5wz8lxE1mD1RaLfrwAyMam1 YEdqp8cE89m06Y4YvSMUt5UZC3eA/jg2A+UyqhmUGHGQ7vRGMtKZaxJKxgR9OTKg mf/+wHjtzt2OnhTT2+yURY8lXDzt/Sqy9yGBlcHrin/iMGoA/OVC3amTbJGh+GYg HdfbFQFKreKDZCzf19hirs58lpdK+v11nuijrqHoXlM5XVlJYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwubYZSIHNTeVSbMMI1gGk7M1+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2NkZDA5MWUtMDJlZC0z ZGMzLTk1NDgtYjBmZmFjODhjMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvmvzgt/Hu2JuDU4d0an5iGCqSKtaq16s1BrfZlXtbPDZ78ourqZkBw tQgNzIHYKzVBtQ3oXCUyXDtj2+wt1JUVM6ndfGQstsg2EuLNz/MyIezGfRnAO+Ao OCrbO5ctZMr7lBNok5gD/vbPxEXsgJ56sQ5iKayfzzY2T7UsoDeMMizewDmWuaKk UUr+pzFZ+bRMrscpOy+3C+YbuW8jASK4rkczpZCbLrO+SxdNdYwsLjp5Xd6zYTFr Q0Qm9aBAT+Hu3a8MF8BD3xS0IGDRVXbdpnbwl+vdBZxm3ZgUPiUbOeeRA9x8nq2X CcNHx+SXOGTrn51iTrp0GjvDKZ2s7Wo= -----END CERTIFICATE-----Generated at Sat Sep 26 00:23:15 2026 by rpki-client