$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e1788d9-e186-3848-a7d8-be83945bd8ec.roa File: 3e1788d9-e186-3848-a7d8-be83945bd8ec.roa (raw, json) Hash identifier: IGXfsf3V8fSUOq6qtLYe3BEH4gfdG9gYsXzTIeNvUX0= Subject key identifier: E5:6F:FA:80:CF:7B:D8:6B:92:41:C0:58:B4:9A:B6:A2:38:CC:CE:0C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F19FCFE89F55B10D51A8034C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e1788d9-e186-3848-a7d8-be83945bd8ec.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 153952 IP address blocks: 38.57.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fe:89:f5:5b:10:d5:1a:80:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=28fd65cc-d3f3-41f6-8c44-2582b181a90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:19:bb:b5:09:b1:1b:0a:aa:4e:1c:62:b1: 10:96:37:9a:3a:7b:6b:8d:f5:05:ba:1a:c1:bb:b9: 97:c4:65:a5:49:49:0f:b3:69:da:a4:28:72:fa:16: e1:9c:31:fd:77:c8:ac:cf:ae:ae:52:b8:35:55:54: f8:94:be:f5:96:37:07:d4:51:10:a2:69:0d:9c:8f: ed:53:53:a5:6b:77:28:c7:84:b6:95:90:cd:a2:44: d8:8c:43:dc:b0:6a:b1:6c:e5:4a:00:d6:a9:7d:55: b4:d2:05:d6:af:b5:3d:88:f1:b4:f3:2d:0e:d6:28: 76:5e:c3:ea:c4:a4:8e:1d:1d:96:f4:77:0e:d5:9e: 8e:cb:94:bb:17:aa:22:56:fc:1c:3b:2b:5a:f4:25: 42:6f:c1:4c:ac:21:b3:9b:a1:83:65:78:9f:ae:50: e1:d6:db:c5:2b:5b:d4:09:76:a0:49:f0:31:ed:8e: 75:e2:00:8c:b2:6b:f7:ad:13:8c:54:b9:7f:5a:47: 3f:74:f4:38:17:de:3f:56:65:7c:4b:3f:db:5c:72: 6f:24:89:73:91:53:56:7e:e9:e7:89:94:64:a4:62: f4:05:6c:29:ac:33:35:90:c2:49:6a:4d:70:63:ad: dc:1f:e3:18:dd:50:04:60:c9:56:43:7c:9e:44:ff: ce:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6F:FA:80:CF:7B:D8:6B:92:41:C0:58:B4:9A:B6:A2:38:CC:CE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e1788d9-e186-3848-a7d8-be83945bd8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:03:1c:25:5f:bf:07:0b:aa:ee:0c:6d:5f:96:5e:43:a8:4a: c8:77:23:81:21:5c:ca:4b:ba:1c:3b:38:5e:6a:a6:f7:b4:c4: 6f:6e:21:88:ba:5f:53:5c:67:9b:0f:38:58:31:7e:3e:76:08: 4c:a0:83:fa:4d:8a:aa:f0:96:58:0f:66:c1:68:fb:73:b5:77: a2:a3:6f:8c:87:b7:fc:31:8d:07:ae:6f:80:91:a0:8d:00:21: 29:53:5e:02:93:18:f5:de:d4:ce:ed:c1:d6:80:29:3b:db:4b: 22:24:2b:44:a1:a1:99:24:b6:11:c0:42:82:49:ba:d4:eb:43: 0a:39:fb:80:01:3a:ac:5a:0b:63:1c:ff:06:4d:b0:60:70:f3: f7:8d:24:ee:4b:5a:d1:a2:0b:71:a9:e7:73:47:62:63:d5:a8: 50:83:e4:95:d8:d3:f5:da:a6:72:a6:92:da:ac:a1:6f:28:64: f3:a4:3b:2a:8a:f2:40:93:0d:30:20:3f:64:15:eb:1b:18:d3: 79:8d:96:33:eb:14:d5:dc:b7:06:5f:fe:81:f5:f2:3a:70:05: 2b:92:31:56:a2:31:6c:24:ff:37:7c:c8:d9:46:dc:46:f7:71: 51:ff:27:7e:58:d3:63:05:d8:b8:0b:42:3e:2f:e4:42:63:3a: ce:80:68:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P6J9VsQ1RqANMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MjhmZDY1Y2MtZDNmMy00MWY2LThjNDQtMjU4MmIxODFhOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMZu7UJsRsKqk4cYrEQljeaOntrjfUFuhrB u7mXxGWlSUkPs2napChy+hbhnDH9d8isz66uUrg1VVT4lL71ljcH1FEQomkNnI/t U1Ola3cox4S2lZDNokTYjEPcsGqxbOVKANapfVW00gXWr7U9iPG08y0O1ih2XsPq xKSOHR2W9HcO1Z6Oy5S7F6oiVvwcOyta9CVCb8FMrCGzm6GDZXifrlDh1tvFK1vU CXagSfAx7Y514gCMsmv3rROMVLl/Wkc/dPQ4F94/VmV8Sz/bXHJvJIlzkVNWfunn iZRkpGL0BWwprDM1kMJJak1wY63cH+MY3VAEYMlWQ3yeRP/OtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVv+oDPe9hrkkHAWLSatqI4zM4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2UxNzg4ZDktZTE4Ni0z ODQ4LWE3ZDgtYmU4Mzk0NWJkOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJjkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4DHCVfvwcLqu4MbV+WXkOoSsh3I4EhXMpLuhw7OF5qpve0xG9uIYi6 X1NcZ5sPOFgxfj52CEygg/pNiqrwllgPZsFo+3O1d6Kjb4yHt/wxjQeub4CRoI0A ISlTXgKTGPXe1M7twdaAKTvbSyIkK0ShoZkkthHAQoJJutTrQwo5+4ABOqxaC2Mc /wZNsGBw8/eNJO5LWtGiC3Gp53NHYmPVqFCD5JXY0/XapnKmktqsoW8oZPOkOyqK 8kCTDTAgP2QV6xsY03mNljPrFNXctwZf/oH18jpwBSuSMVaiMWwk/zd8yNlG3Eb3 cVH/J35Y02MF2LgLQj4v5EJjOs6AaAI= -----END CERTIFICATE-----Generated at Sun Sep 20 19:48:52 2026 by rpki-client