$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/432598a9-e2a5-3d7c-834d-d2ad640b5396.roa File: 432598a9-e2a5-3d7c-834d-d2ad640b5396.roa (raw, json) Hash identifier: mg/KL9Ed+ix/SDtAOZdvdYveRLVS/mZzRhPGCVV2Xs8= Subject key identifier: 75:41:B4:7E:B0:78:74:E2:72:1C:85:85:E5:C4:E4:D7:94:93:7D:29 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F00DCC0C357F91B06455F5CC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/432598a9-e2a5-3d7c-834d-d2ad640b5396.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 0 IP address blocks: 38.87.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c0:c3:57:f9:1b:06:45:5f:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=a7d7ad1c-68e8-484e-a1fe-fb5dc4f97f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:c3:5e:fb:9e:d9:b2:e6:73:20:d3:86:ad: 3d:b8:3c:b4:8d:a1:2c:02:54:e4:83:c5:5b:82:04: 7e:31:21:77:53:b7:ed:ac:cf:ad:f8:ce:f6:3e:a8: e1:12:a7:29:35:43:59:a6:45:56:60:df:00:2a:bb: 72:8e:2b:d6:2f:eb:13:eb:63:3a:75:01:54:b4:6e: e2:c8:c3:c3:66:fb:6e:de:b8:04:04:bf:9c:ad:e7: 45:7d:2f:3c:ee:08:fb:54:2d:a4:6b:da:34:be:f9: d6:83:86:ee:67:94:cf:30:75:b5:1d:eb:00:a3:b3: 49:14:9f:fa:32:c7:e9:77:94:7f:fc:5d:fd:bc:ee: c7:cf:c3:85:a9:18:59:3a:cf:c3:1a:41:38:57:63: e4:67:75:74:cf:6d:5f:71:a7:99:4e:42:01:96:87: b3:cb:f1:28:68:c7:a9:30:e5:a6:e8:04:4a:15:6e: 1b:9b:de:1a:1b:80:5e:53:0a:e5:27:99:cd:b7:56: 60:49:bb:cd:07:a6:6f:96:07:5d:f5:6f:b2:35:17: 45:57:00:35:dd:0d:69:25:1a:ec:c1:e5:38:59:95: c8:a2:8a:09:69:c9:d2:d6:7a:4c:fd:c8:9b:e0:22: 29:0d:c1:75:0f:48:98:6e:c1:de:30:40:c8:b8:cd: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:41:B4:7E:B0:78:74:E2:72:1C:85:85:E5:C4:E4:D7:94:93:7D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/432598a9-e2a5-3d7c-834d-d2ad640b5396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.87.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:45:05:22:22:3a:3d:5d:aa:5b:34:9b:39:b0:89:d5:6a:94: d4:42:87:34:16:62:91:b9:0c:39:1e:45:39:78:1a:93:a5:ed: 4a:44:73:b3:b6:50:89:46:12:eb:84:4b:de:db:64:21:88:b9: a5:5c:e6:11:d6:67:5a:19:13:8c:4c:97:48:b0:2a:24:d5:22: aa:89:68:07:f2:15:ab:26:6e:c0:76:28:ed:e0:02:47:b3:ea: 88:55:1b:fb:60:d2:8b:b4:3b:ff:ea:6e:b7:4e:3d:2a:e2:ef: 9b:19:c1:68:3b:1f:1a:72:ef:e8:90:d3:e9:d7:82:19:b0:ea: 76:8c:d9:b4:a9:96:be:a2:b5:dc:59:13:5f:7c:81:7f:a4:da: 61:6a:3f:c1:39:fb:07:47:17:1f:34:69:21:65:0f:d6:c5:62: e3:da:c1:5f:f9:93:10:48:d2:da:d5:96:ff:49:21:e6:6f:62: 2e:39:f1:9f:d6:08:73:ed:a5:a9:6d:c3:3b:12:a2:a2:00:8d: 97:df:6a:d8:03:e8:cd:7a:90:ec:6c:03:5e:f3:39:ef:9c:58: db:e9:fc:f4:ff:48:a4:36:87:5b:0b:02:a3:1b:20:4c:0d:97: 54:ff:ce:69:82:fd:75:54:da:09:9c:9c:41:b0:5e:0f:68:8f: 4d:fe:28:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MDDV/kbBkVfXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk YTdkN2FkMWMtNjhlOC00ODRlLWExZmUtZmI1ZGM0Zjk3ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliTDXvue2bLmcyDThq09uDy0jaEsAlTkg8Vb ggR+MSF3U7ftrM+t+M72PqjhEqcpNUNZpkVWYN8AKrtyjivWL+sT62M6dQFUtG7i yMPDZvtu3rgEBL+credFfS887gj7VC2ka9o0vvnWg4buZ5TPMHW1HesAo7NJFJ/6 Msfpd5R//F39vO7Hz8OFqRhZOs/DGkE4V2PkZ3V0z21fcaeZTkIBloezy/EoaMep MOWm6ARKFW4bm94aG4BeUwrlJ5nNt1ZgSbvNB6Zvlgdd9W+yNRdFVwA13Q1pJRrs weU4WZXIoooJacnS1npM/cib4CIpDcF1D0iYbsHeMEDIuM3QnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVBtH6weHTichyFheXE5NeUk30pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDMyNTk4YTktZTJhNS0z ZDdjLTgzNGQtZDJhZDY0MGI1Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJFBSIiOj1dqls0mzmwidVqlNRChzQWYpG5DDkeRTl4GpOl7UpEc7O2 UIlGEuuES97bZCGIuaVc5hHWZ1oZE4xMl0iwKiTVIqqJaAfyFasmbsB2KO3gAkez 6ohVG/tg0ou0O//qbrdOPSri75sZwWg7Hxpy7+iQ0+nXghmw6naM2bSplr6itdxZ E198gX+k2mFqP8E5+wdHFx80aSFlD9bFYuPawV/5kxBI0trVlv9JIeZvYi458Z/W CHPtpaltwzsSoqIAjZffatgD6M16kOxsA17zOe+cWNvp/PT/SKQ2h1sLAqMbIEwN l1T/zmmC/XVU2gmcnEGwXg9oj03+KIE= -----END CERTIFICATE-----Generated at Sun Sep 20 22:02:00 2026 by rpki-client