$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3dbc60a5-38bd-3f6a-84cb-2e16058e790c.roa File: 3dbc60a5-38bd-3f6a-84cb-2e16058e790c.roa (raw, json) Hash identifier: wDt3H5LC2zp/D2SZ6O4z0TXuARD33IBpTpMyE+1Ui4g= Subject key identifier: 5B:86:3E:15:F3:0A:9D:9E:C4:7D:48:72:22:8F:0B:60:DF:77:E2:F7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F49878ABE3F661BD3C0E31180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3dbc60a5-38bd-3f6a-84cb-2e16058e790c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 138959 IP address blocks: 38.80.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:8a:be:3f:66:1b:d3:c0:e3:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a66c2160-f8e2-40a6-80ae-e3ba14ca0e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:b3:86:5a:85:67:6d:c5:da:a6:3e:2b:4b: e9:6a:bf:ff:9e:83:3c:31:83:d7:fb:fe:19:45:8b: bc:4d:7c:61:22:f7:b5:d9:16:39:97:80:21:63:3e: 38:8e:72:b8:df:e3:48:44:ca:1e:c4:d3:86:aa:d3: dd:45:08:99:70:69:9c:14:ac:57:07:37:a0:24:17: 70:5c:38:53:ef:92:c3:51:b7:32:86:d5:b7:55:b3: d1:71:e5:61:04:3b:31:30:7b:f9:c7:09:ef:54:22: d7:6f:55:ca:61:31:b9:17:ec:d1:6f:f7:c0:55:bd: 81:55:90:b1:ab:fe:60:75:1b:9c:1f:0c:2c:18:f5: f4:07:ac:cd:de:1c:35:16:08:ba:c6:48:74:2d:38: 5b:bb:34:82:67:81:97:05:7f:6e:4c:a3:04:cb:f5: b0:4c:a9:45:c0:34:08:86:8d:54:8b:0a:ff:98:76: c6:58:d4:8e:77:a2:e1:3f:64:0d:26:5a:71:e3:f7: 4b:2f:e7:8f:ef:59:e8:b0:3a:34:0c:d4:9d:d2:d3: a1:a5:06:ec:ae:7d:2d:8a:37:c8:ef:e7:ba:ed:0e: 79:46:3c:8d:97:73:81:67:b8:1c:e5:3c:74:9f:60: 89:6e:96:08:06:c9:15:2b:da:53:f3:d9:d0:f6:cb: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:3E:15:F3:0A:9D:9E:C4:7D:48:72:22:8F:0B:60:DF:77:E2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3dbc60a5-38bd-3f6a-84cb-2e16058e790c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.80.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:17:52:e3:30:b3:99:9e:75:cc:52:77:f8:e7:28:92:61:92: 5d:c9:56:e2:ae:46:18:25:bb:88:8c:3e:2b:c7:c3:fc:55:a3: 24:9e:48:c6:df:93:c6:d0:67:b6:5f:ec:a2:0d:54:a7:fa:54: 99:66:4a:b1:98:61:31:cf:7b:cd:55:80:1f:a4:e7:b3:e7:8a: e0:8b:9b:4f:6e:f7:86:9e:69:37:18:7c:28:e6:28:d3:eb:a6: aa:e9:3a:b7:6d:b9:4a:6b:cc:a0:90:f0:7c:a6:2f:4d:28:af: ce:a0:cf:73:a5:cf:40:c5:5f:99:f3:2b:9d:78:3e:cc:ba:8e: 92:cc:97:53:38:b3:87:15:a4:a5:15:07:6d:ec:f9:3e:72:fe: 05:b7:55:48:7e:73:52:e4:61:29:1c:f3:67:66:99:2f:33:b4: 99:76:6a:f1:fd:8e:e7:a8:8a:d1:f1:be:bd:d5:bf:6d:f8:4c: 24:83:da:70:a0:a4:bc:11:c7:d9:2f:0d:6b:66:c3:de:74:88: 25:0e:b0:c0:d3:a6:52:e3:dc:e9:60:4b:e5:c6:7e:0d:86:03: 47:22:d6:00:d2:87:c6:03:1b:da:64:98:ef:a1:ba:3f:d7:21: cd:2b:b9:b6:3f:a5:f5:34:70:f6:1b:dc:29:73:10:6c:1a:9e: a2:fa:bd:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4q+P2Yb08DjEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTY2YzIxNjAtZjhlMi00MGE2LTgwYWUtZTNiYTE0Y2EwZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihuzhlqFZ23F2qY+K0vpar//noM8MYPX+/4Z RYu8TXxhIve12RY5l4AhYz44jnK43+NIRMoexNOGqtPdRQiZcGmcFKxXBzegJBdw XDhT75LDUbcyhtW3VbPRceVhBDsxMHv5xwnvVCLXb1XKYTG5F+zRb/fAVb2BVZCx q/5gdRucHwwsGPX0B6zN3hw1Fgi6xkh0LThbuzSCZ4GXBX9uTKMEy/WwTKlFwDQI ho1Uiwr/mHbGWNSOd6LhP2QNJlpx4/dLL+eP71nosDo0DNSd0tOhpQbsrn0tijfI 7+e67Q55RjyNl3OBZ7gc5Tx0n2CJbpYIBskVK9pT89nQ9suiSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuGPhXzCp2exH1IciKPC2Dfd+L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2RiYzYwYTUtMzhiZC0z ZjZhLTg0Y2ItMmUxNjA1OGU3OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMXUuMws5medcxSd/jnKJJhkl3JVuKuRhglu4iMPivHw/xVoySeSMbf k8bQZ7Zf7KINVKf6VJlmSrGYYTHPe81VgB+k57PniuCLm09u94aeaTcYfCjmKNPr pqrpOrdtuUprzKCQ8HymL00or86gz3Olz0DFX5nzK514Psy6jpLMl1M4s4cVpKUV B23s+T5y/gW3VUh+c1LkYSkc82dmmS8ztJl2avH9jueoitHxvr3Vv234TCSD2nCg pLwRx9kvDWtmw950iCUOsMDTplLj3OlgS+XGfg2GA0ci1gDSh8YDG9pkmO+huj/X Ic0rubY/pfU0cPYb3ClzEGwanqL6vdY= -----END CERTIFICATE-----Generated at Fri Sep 25 15:08:59 2026 by rpki-client