$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43a83080-2b0c-303e-91ee-7bf37143a860.roa File: 43a83080-2b0c-303e-91ee-7bf37143a860.roa (raw, json) Hash identifier: nuA1xi3aNbjHmLYyrjtCVv2B8DzDbF8zLpo5k9vA02w= Subject key identifier: BA:3F:85:67:86:08:5F:7B:59:5A:9E:E3:5E:26:D9:6B:94:39:80:12 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498B364488CE6BF3D3DF0BA0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43a83080-2b0c-303e-91ee-7bf37143a860.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 273139 IP address blocks: 38.196.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:36:44:88:ce:6b:f3:d3:df:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba46934c-1f77-41d2-aad8-3636190a9aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:9e:4b:00:e9:fb:ce:9c:dc:88:b8:90:f3: c3:40:ec:9f:f3:ac:7a:5d:6f:f7:df:34:3a:b9:11: bd:ea:96:69:b5:36:b4:7f:d2:83:d2:f2:64:9d:ce: d6:bf:18:ba:af:02:06:30:de:0e:d3:fd:c7:4f:49: fa:72:3b:ef:42:e4:e6:94:ae:aa:04:49:c1:55:80: fe:74:8f:d2:de:eb:4b:c4:cd:3b:24:2d:c0:af:c7: 0f:c1:b3:23:44:6e:af:51:9d:1a:97:03:8e:70:b1: d7:39:bb:05:22:f1:78:39:33:d2:2a:7b:09:d1:8d: a6:68:c6:e1:92:a6:19:05:c3:36:25:ba:e6:13:a5: cb:06:a2:05:16:98:15:ee:49:68:01:d8:47:8a:65: 7e:f5:f3:28:d0:c8:f7:91:e4:30:56:e4:7e:37:9e: cd:93:3b:48:c4:4d:31:51:18:c4:66:83:cc:d7:0f: 5c:5b:d5:2f:45:ac:dc:67:65:2e:ec:48:b2:13:e0: e4:8f:ab:5b:68:c6:fa:79:64:17:98:f8:32:4c:64: 4b:3f:f8:ba:7c:38:e6:3b:ec:94:fb:2d:4c:c7:ee: 1a:fd:1c:8a:aa:24:ce:1c:dc:c0:b8:2f:dc:d9:8b: ad:77:5f:1b:9d:7b:5b:6c:c8:b8:2f:2b:78:6a:ef: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3F:85:67:86:08:5F:7B:59:5A:9E:E3:5E:26:D9:6B:94:39:80:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43a83080-2b0c-303e-91ee-7bf37143a860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:a5:d6:b2:12:c0:94:3c:59:d4:ad:3f:f3:d0:36:11:a1:2b: 1f:e6:71:02:ce:a7:ca:eb:eb:96:ae:01:d5:b6:59:1a:8a:96: a6:3e:7f:db:03:de:c0:a6:6c:5f:69:0d:8c:23:4b:ed:eb:e6: 01:25:18:36:91:86:1c:62:2e:78:5d:c8:a1:06:f1:6d:9b:90: b6:91:ad:64:b6:5b:0f:f7:94:ca:06:55:21:93:23:9f:61:26: 23:46:03:4b:0d:85:0f:15:1e:80:c1:ba:1a:3c:e9:9d:a5:35: c1:61:ed:d0:e4:68:b2:f0:cb:9b:0d:01:9d:01:68:d6:c4:3a: be:57:d3:3b:a7:7a:4f:54:49:97:f3:21:bd:1d:25:55:3f:13: cd:5a:52:fd:ad:de:2e:2c:f7:f4:33:21:6e:e0:4c:7b:10:73: b0:ff:f9:cc:1d:1a:fa:55:85:a0:0f:7d:0e:ba:2c:99:aa:b0: e0:62:22:fd:8d:79:ba:c6:da:2b:ce:a5:4d:c1:cf:ba:dc:e0: 29:36:fb:b0:92:a8:84:a6:3b:70:6c:00:1e:2b:83:01:f0:1c: e2:b2:f1:9a:34:bb:c7:33:80:37:d5:5a:6d:5e:60:67:8b:33: 30:e9:a6:19:15:ac:de:b7:c3:db:ed:c5:9d:ec:62:e0:9b:f7: 68:24:08:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JizZEiM5r89PfC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE0NjkzNGMtMWY3Ny00MWQyLWFhZDgtMzYzNjE5MGE5YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUKeSwDp+86c3Ii4kPPDQOyf86x6XW/33zQ6 uRG96pZptTa0f9KD0vJknc7Wvxi6rwIGMN4O0/3HT0n6cjvvQuTmlK6qBEnBVYD+ dI/S3utLxM07JC3Ar8cPwbMjRG6vUZ0alwOOcLHXObsFIvF4OTPSKnsJ0Y2maMbh kqYZBcM2JbrmE6XLBqIFFpgV7kloAdhHimV+9fMo0Mj3keQwVuR+N57NkztIxE0x URjEZoPM1w9cW9UvRazcZ2Uu7EiyE+Dkj6tbaMb6eWQXmPgyTGRLP/i6fDjmO+yU +y1Mx+4a/RyKqiTOHNzAuC/c2Yutd18bnXtbbMi4Lyt4au+WcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo/hWeGCF97WVqe414m2WuUOYASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDNhODMwODAtMmIwYy0z MDNlLTkxZWUtN2JmMzcxNDNhODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJsSWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMul1rISwJQ8WdStP/PQNhGhKx/mcQLOp8rr65auAdW2WRqKlqY+f9sD 3sCmbF9pDYwjS+3r5gElGDaRhhxiLnhdyKEG8W2bkLaRrWS2Ww/3lMoGVSGTI59h JiNGA0sNhQ8VHoDBuho86Z2lNcFh7dDkaLLwy5sNAZ0BaNbEOr5X0zunek9USZfz Ib0dJVU/E81aUv2t3i4s9/QzIW7gTHsQc7D/+cwdGvpVhaAPfQ66LJmqsOBiIv2N ebrG2ivOpU3Bz7rc4Ck2+7CSqISmO3BsAB4rgwHwHOKy8Zo0u8czgDfVWm1eYGeL MzDpphkVrN63w9vtxZ3sYuCb92gkCM8= -----END CERTIFICATE-----Generated at Sun Sep 27 00:50:41 2026 by rpki-client