$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa File: 43caa540-de27-3074-970d-0f7f826011e6.roa (raw, json) Hash identifier: mk2F8ketoD3+yesQuQg3+XCGE7RhauHuGhuIr6eAGI4= Subject key identifier: D1:DC:C1:53:FD:B8:96:42:82:D8:BA:B3:EF:89:F0:C4:B9:73:FE:C9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5768076C8893974E77E41180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 151719 IP address blocks: 38.196.156.0/23 maxlen: 24 154.59.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:07:6c:88:93:97:4e:77:e4:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=0c41a6ff-7dca-482a-a16a-91f6f4bb2c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:9b:e0:c9:cf:2f:51:5c:a1:a0:bd:82:62: f3:f4:95:b0:0e:88:c8:36:5e:8b:93:be:0a:4c:18: 0c:10:82:2d:16:74:6d:c8:2a:37:e6:cc:4e:e5:1d: db:b0:d5:24:2e:ba:1a:1c:35:9e:7e:7c:b9:93:70: 60:84:71:41:dc:e1:1f:db:9d:b1:ac:ca:69:dc:89: 49:e1:36:c8:ce:71:29:59:7b:6a:4c:77:16:85:5f: 88:8d:5d:0e:10:9f:ed:48:aa:24:e4:19:88:3a:a7: 3d:b9:80:e0:68:70:70:37:af:83:b3:77:5f:ed:b2: 08:b6:15:54:52:ab:f6:df:a5:97:fa:e0:9c:16:14: a5:69:55:0c:39:05:cc:95:36:ae:20:3e:78:df:3b: b3:2b:c0:e8:d4:63:bc:68:b4:fb:bd:d0:77:40:ce: 81:76:f3:99:21:f6:c6:73:4c:77:f7:ca:1a:99:a8: 84:a6:01:44:41:ce:fe:f0:eb:6b:02:49:ac:13:35: 57:30:a7:09:ff:32:11:a0:4b:dd:ec:ab:32:3f:9c: 71:d1:ae:40:54:0d:aa:55:f1:e1:79:5f:ed:8e:71: 6d:49:33:3d:69:ea:6a:c8:a4:f3:6b:83:32:a4:71: 39:80:5a:6b:a7:d4:43:79:88:81:66:98:16:83:d4: a9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DC:C1:53:FD:B8:96:42:82:D8:BA:B3:EF:89:F0:C4:B9:73:FE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.156.0/23 154.59.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:04:54:89:d1:93:39:5d:23:e8:b3:77:e0:31:d4:fb:31:26: e4:06:5e:64:89:6e:99:b4:04:32:30:0c:f0:92:9b:59:20:0c: 4f:4b:e3:e8:7e:2d:98:4a:f1:6c:09:39:d4:2f:d5:af:4b:5e: e4:67:da:02:d1:db:4b:7e:2a:0b:0e:77:31:0c:f6:1a:18:2a: 24:71:16:41:13:10:6c:e0:a1:ac:48:83:2f:b2:99:f3:f2:37: 19:43:68:da:6e:8a:9d:cb:c0:4d:18:69:a1:96:9d:6c:e3:1c: 41:72:65:1c:a3:87:a0:40:39:20:10:e9:e6:ec:f1:93:aa:71: 5c:9c:8d:89:c5:86:a7:20:a8:85:3c:e1:98:9a:88:1e:cb:8b: 65:13:f3:0a:24:47:2f:8b:90:73:bd:52:d5:11:75:5a:15:45: 7a:29:bf:b5:2b:a0:14:24:93:dc:a2:94:ce:49:dc:a7:26:71: 11:b2:eb:f3:af:21:79:89:57:b2:bb:93:9f:18:d7:17:78:25: a1:83:5f:d6:be:69:6b:58:bd:6a:56:21:28:6f:19:8a:5a:6b: 6a:9d:6c:95:d1:b4:fc:98:a5:30:49:be:7f:b8:6f:01:e8:f0: 50:85:5f:24:72:48:a3:fd:cf:e5:23:28:b0:44:69:e3:34:00: 6c:82:2d:eb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9XaAdsiJOXTnfkEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MGM0MWE2ZmYtN2RjYS00ODJhLWExNmEtOTFmNmY0YmIyYzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Kb4MnPL1FcoaC9gmLz9JWwDojINl6Lk74K TBgMEIItFnRtyCo35sxO5R3bsNUkLroaHDWefny5k3BghHFB3OEf252xrMpp3IlJ 4TbIznEpWXtqTHcWhV+IjV0OEJ/tSKok5BmIOqc9uYDgaHBwN6+Ds3df7bIIthVU Uqv236WX+uCcFhSlaVUMOQXMlTauID543zuzK8Do1GO8aLT7vdB3QM6BdvOZIfbG c0x398oamaiEpgFEQc7+8OtrAkmsEzVXMKcJ/zIRoEvd7KsyP5xx0a5AVA2qVfHh eV/tjnFtSTM9aepqyKTza4MypHE5gFprp9RDeYiBZpgWg9SpiQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNHcwVP9uJZCgti6s++J8MS5c/7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDNjYWE1NDAtZGUyNy0z MDc0LTk3MGQtMGY3ZjgyNjAxMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJsScAwQB mjtcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMcEVInRkzldI+izd+Ax1PsxJuQGXmSJbpm0BDIwDPCSm1kg DE9L4+h+LZhK8WwJOdQv1a9LXuRn2gLR20t+KgsOdzEM9hoYKiRxFkETEGzgoaxI gy+ymfPyNxlDaNpuip3LwE0YaaGWnWzjHEFyZRyjh6BAOSAQ6ebs8ZOqcVycjYnF hqcgqIU84ZiaiB7Li2UT8wokRy+LkHO9UtURdVoVRXopv7UroBQkk9yilM5J3Kcm cRGy6/OvIXmJV7K7k58Y1xd4JaGDX9a+aWtYvWpWIShvGYpaa2qdbJXRtPyYpTBJ vn+4bwHo8FCFXyRySKP9z+UjKLBEaeM0AGyCLes= -----END CERTIFICATE-----Generated at Sat Oct 10 12:18:24 2026 by rpki-client