$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ebc0919-7243-3027-a09d-a0ad83a915e0.roa File: 5ebc0919-7243-3027-a09d-a0ad83a915e0.roa (raw, json) Hash identifier: vziFVFhpZX7LDegCIqJQcb+xMhNmAH7aJeMglpveFZk= Subject key identifier: A7:F4:2E:87:A8:83:D4:93:73:95:E3:BA:3C:0D:DE:78:42:D4:43:44 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F2527ADB0A1597368EEF180A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ebc0919-7243-3027-a09d-a0ad83a915e0.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 16604 IP address blocks: 38.2.232.0/23 maxlen: 24 38.2.234.0/23 maxlen: 24 38.2.238.0/24 maxlen: 24 38.45.192.0/21 maxlen: 24 38.69.28.0/23 maxlen: 24 38.110.178.0/23 maxlen: 24 38.110.180.0/24 maxlen: 24 38.110.181.0/24 maxlen: 24 38.255.145.0/24 maxlen: 24 38.255.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:ad:b0:a1:59:73:68:ee:f1:80:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=9e83cdde-08dc-4781-b8ba-aec51fe4519e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:28:82:0b:cb:96:3e:fa:49:9b:6f:cd:87: a8:44:4e:70:f4:1c:4a:f3:ba:e5:7d:02:1c:26:56: a1:b0:1c:a0:3e:24:c5:e3:5e:b1:44:6a:e2:f7:55: f2:a6:54:e5:87:2b:b5:2d:5e:20:8e:3b:53:67:ea: e0:fe:29:eb:de:32:74:56:44:be:12:6c:96:29:91: 43:48:c1:22:62:db:68:b0:98:fe:3f:42:6e:2b:c8: 03:2e:f7:6a:b2:29:cc:02:e8:4f:da:ef:34:e3:12: 46:ed:e5:bc:e3:09:dd:80:3d:b7:e6:fe:81:c6:dd: 52:2b:58:32:33:5b:4a:aa:85:4e:8a:09:a2:fc:38: aa:5f:9b:25:9d:7e:25:05:cf:52:02:f1:b7:67:63: 39:48:30:cd:2e:89:d9:0d:f8:8c:e1:bf:6d:15:cd: 69:72:4a:24:c7:f4:bb:2f:e9:32:f2:33:14:66:94: c4:7a:a9:22:a4:f9:14:38:08:52:2c:a3:f1:aa:7a: 2c:c1:b5:a6:e0:07:f7:45:3d:3b:2f:2d:2d:98:2d: c5:74:19:b5:b5:52:43:0a:d6:67:07:68:41:e0:6a: fe:63:5e:9d:81:68:5b:c8:23:e1:db:b5:db:b4:36: 06:e3:a1:a7:68:28:58:dd:1b:71:0d:f6:b8:e6:44: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:2E:87:A8:83:D4:93:73:95:E3:BA:3C:0D:DE:78:42:D4:43:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ebc0919-7243-3027-a09d-a0ad83a915e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.2.232.0/22 38.2.238.0/24 38.45.192.0/21 38.69.28.0/23 38.110.178.0-38.110.181.255 38.255.145.0-38.255.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:8c:16:29:4c:8f:6b:7e:6d:db:dc:5b:3e:af:dc:98:1a:d0: d1:af:19:82:57:33:4a:a4:5c:fd:74:ab:49:9d:36:90:bd:ee: 33:b2:22:5e:7c:23:b1:e5:f5:85:f9:19:33:fb:e7:79:25:9c: d4:ce:7a:5d:37:0f:2f:5a:74:9b:81:33:97:3c:17:60:92:6b: 44:c4:18:a1:b2:12:b7:c3:e5:e3:fe:20:ae:b6:31:d6:16:6e: ab:e7:7a:20:97:ea:9b:15:1c:4e:e0:11:1f:03:33:36:db:3d: 62:80:81:08:d1:07:cc:1c:f8:9d:48:8f:7d:32:a0:6b:ee:a2: c0:b3:d9:06:b3:c1:a5:32:c5:ec:00:7f:80:20:32:ff:58:55: b0:88:47:c3:f2:30:1a:60:70:e7:2e:43:2d:59:84:d8:62:29: 5a:7a:7a:db:93:be:dd:fd:64:4e:02:aa:06:90:ea:e4:b9:4e: c7:62:76:61:a5:29:23:fd:cb:69:d4:7a:56:56:fb:97:5e:a5: b9:17:ad:d2:bb:e6:b6:96:f4:ac:5b:26:cf:13:11:18:cf:5c: 1e:86:68:c4:d4:25:13:3a:50:fb:be:c1:e5:77:e0:d1:4a:10: ca:b9:6e:6f:83:d5:d9:4e:1d:0b:52:b7:6e:8e:96:3f:4c:c4: 7f:58:74:1c -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWE8lJ62woVlzaO7xgKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk OWU4M2NkZGUtMDhkYy00NzgxLWI4YmEtYWVjNTFmZTQ1MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPYoggvLlj76SZtvzYeoRE5w9BxK87rlfQIc JlahsBygPiTF416xRGri91XyplTlhyu1LV4gjjtTZ+rg/inr3jJ0VkS+EmyWKZFD SMEiYttosJj+P0JuK8gDLvdqsinMAuhP2u804xJG7eW84wndgD235v6Bxt1SK1gy M1tKqoVOigmi/DiqX5slnX4lBc9SAvG3Z2M5SDDNLonZDfiM4b9tFc1pckokx/S7 L+ky8jMUZpTEeqkipPkUOAhSLKPxqnoswbWm4Af3RT07Ly0tmC3FdBm1tVJDCtZn B2hB4Gr+Y16dgWhbyCPh27XbtDYG46GnaChY3RtxDfa45kRDRQIDAQABo4IDgzCC A38wHQYDVR0OBBYEFKf0Loeog9STc5XjujwN3nhC1ENEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWViYzA5MTktNzI0My0z MDI3LWEwOWQtYTBhZDgzYTkxNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCJgLoAwQA JgLuAwQDJi3AAwQBJkUcMAwDBAEmbrIDBAEmbrQwDAMEACb/kQMEAib/kDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCwjBYpTI9rfm3b3Fs+r9yYGtDRrxmCVzNKpFz9dKtJnTaQve4zsiJefCOx 5fWF+Rkz++d5JZzUznpdNw8vWnSbgTOXPBdgkmtExBihshK3w+Xj/iCutjHWFm6r 53ogl+qbFRxO4BEfAzM22z1igIEI0QfMHPidSI99MqBr7qLAs9kGs8GlMsXsAH+A IDL/WFWwiEfD8jAaYHDnLkMtWYTYYilaenrbk77d/WROAqoGkOrkuU7HYnZhpSkj /ctp1HpWVvuXXqW5F63Su+a2lvSsWybPExEYz1wehmjE1CUTOlD7vsHld+DRShDK uW5vg9XZTh0LUrdujpY/TMR/WHQc -----END CERTIFICATE-----Generated at Sat Oct 10 10:34:33 2026 by rpki-client