$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/509eb00c-aa5c-3286-b387-51db9f987b19.roa File: 509eb00c-aa5c-3286-b387-51db9f987b19.roa (raw, json) Hash identifier: RacF8MUZeBtvfTy09x5CmN2Sy6t+auo8arkDwzNUXjU= Subject key identifier: 42:8F:C6:11:86:E2:62:30:CE:EA:5B:D4:A9:53:04:70:0F:F6:55:E1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4973082E44878DA8A1279580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/509eb00c-aa5c-3286-b387-51db9f987b19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 154488 IP address blocks: 38.45.154.0/24 maxlen: 24 38.57.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:08:2e:44:87:8d:a8:a1:27:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d063db2-f177-46a1-932a-52fbabfe1d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:f1:a8:2e:94:85:68:65:c6:9f:75:30:26: 4e:ce:0c:fa:d9:03:05:73:57:e5:ee:9c:2a:95:e7: 14:6d:a2:be:38:af:83:eb:55:25:3d:a7:3c:af:5a: a3:de:cd:1d:ff:9c:bc:71:96:6b:95:7a:fe:65:05: 5e:9f:1d:80:16:4d:7e:78:ac:1b:6b:16:a1:d8:c3: 2f:23:da:03:08:4a:70:04:2e:d3:ef:e3:c3:ce:4e: f7:e2:f2:ee:75:4e:41:58:b3:30:87:77:0a:f0:b2: 37:3a:d6:96:aa:01:5d:bf:34:4c:a9:28:bc:f8:15: 99:8a:c7:5c:63:61:d6:95:08:9e:dd:c2:44:09:3e: c7:79:17:ee:e3:d2:b0:49:72:58:72:cb:7f:8d:7f: f7:53:12:23:e4:6a:e6:02:3b:62:27:a7:e1:1d:79: 1a:e3:88:ec:02:36:a2:ac:cc:68:a7:43:8b:1b:0a: 07:89:06:ed:4f:9d:a2:1f:5a:45:d4:60:2e:e2:36: 6a:b5:dd:0d:6c:48:f4:1e:a5:0d:4e:fa:cd:1a:ea: b8:58:53:f6:4a:8a:98:c5:ac:18:ce:ba:f1:28:30: 1f:28:a2:b7:66:4a:f0:ee:34:f1:2f:94:5d:ae:68: e4:eb:0d:a0:2b:b4:20:01:5c:d0:a5:51:56:8d:e4: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:C6:11:86:E2:62:30:CE:EA:5B:D4:A9:53:04:70:0F:F6:55:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/509eb00c-aa5c-3286-b387-51db9f987b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.154.0/24 38.57.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4c:28:aa:34:66:53:dc:38:72:57:17:33:85:1f:ff:b3:06: 8c:c4:ff:c7:ee:6b:6f:ad:11:03:50:48:f6:6d:30:3e:65:16: ff:55:9a:5d:ad:6f:87:08:ef:3c:5a:df:e6:e2:86:6b:d1:bc: a9:35:e1:0c:6d:e8:d8:ec:35:dc:04:54:1a:a5:7f:8d:da:78: ea:61:1e:46:a9:27:4a:53:87:6c:ce:cf:10:b0:a8:af:f2:0c: eb:eb:b8:58:27:f8:0f:65:75:e6:ad:64:6e:a2:28:ea:f7:ec: d1:65:84:26:bf:f3:3a:a9:01:bb:13:9b:e8:3c:e0:5f:4d:d4: 62:cc:c4:bb:9a:46:9b:b9:0c:a7:44:50:4b:0c:e3:ea:bd:7e: a1:41:1d:fa:1e:5c:58:5b:8d:a5:3c:e4:9d:10:75:05:32:09: c5:fe:a9:75:6c:0f:33:c7:c7:db:7a:9d:5a:7d:19:81:05:c8: ea:2d:0c:6a:38:29:c5:90:91:04:c1:2b:7f:0e:81:83:2b:22: 80:ab:fe:c1:b4:55:a3:52:a2:1f:17:c2:58:fa:c4:ae:0d:7c: 8c:05:04:0e:b6:06:b9:b3:cc:b6:a4:f8:3d:c9:53:1d:ac:3a: d1:ec:8c:a0:9a:5c:99:30:2e:f6:d3:fd:d1:d4:15:11:3f:37: fc:31:41:a8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JcwguRIeNqKEnlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQwNjNkYjItZjE3Ny00NmExLTkzMmEtNTJmYmFiZmUxZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGjxqC6UhWhlxp91MCZOzgz62QMFc1fl7pwq lecUbaK+OK+D61UlPac8r1qj3s0d/5y8cZZrlXr+ZQVenx2AFk1+eKwbaxah2MMv I9oDCEpwBC7T7+PDzk734vLudU5BWLMwh3cK8LI3OtaWqgFdvzRMqSi8+BWZisdc Y2HWlQie3cJECT7HeRfu49KwSXJYcst/jX/3UxIj5GrmAjtiJ6fhHXka44jsAjai rMxop0OLGwoHiQbtT52iH1pF1GAu4jZqtd0NbEj0HqUNTvrNGuq4WFP2SoqYxawY zrrxKDAfKKK3Zkrw7jTxL5Rdrmjk6w2gK7QgAVzQpVFWjeRNCQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEKPxhGG4mIwzupb1KlTBHAP9lXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTA5ZWIwMGMtYWE1Yy0z Mjg2LWIzODctNTFkYjlmOTg3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJi2aAwQB JjkiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA9MKKo0ZlPcOHJXFzOFH/+zBozE/8fua2+tEQNQSPZtMD5l Fv9Vml2tb4cI7zxa3+bihmvRvKk14Qxt6NjsNdwEVBqlf43aeOphHkapJ0pTh2zO zxCwqK/yDOvruFgn+A9ldeatZG6iKOr37NFlhCa/8zqpAbsTm+g84F9N1GLMxLua Rpu5DKdEUEsM4+q9fqFBHfoeXFhbjaU85J0QdQUyCcX+qXVsDzPHx9t6nVp9GYEF yOotDGo4KcWQkQTBK38OgYMrIoCr/sG0VaNSoh8Xwlj6xK4NfIwFBA62BrmzzLak +D3JUx2sOtHsjKCaXJkwLvbT/dHUFRE/N/wxQag= -----END CERTIFICATE-----Generated at Tue Sep 29 21:02:07 2026 by rpki-client