$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65fd993c-272a-3183-b6c3-8d44f91a77a2.roa File: 65fd993c-272a-3183-b6c3-8d44f91a77a2.roa (raw, json) Hash identifier: 5YzSlu6wIOCo2MHCc/WUSrKlHNh4ak90XV5A508DT4E= Subject key identifier: F1:2E:FB:67:D0:71:93:5B:1E:E7:B0:8F:39:F9:89:7D:7C:11:09:67 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F24629502CB6D9D7DB4B06400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65fd993c-272a-3183-b6c3-8d44f91a77a2.roa Signing time: Fri 11 Sep 2026 18:23:11 +0000 ROA not before: Fri 11 Sep 2026 18:23:11 +0000 ROA not after: Thu 10 Dec 2026 19:23:11 +0000 asID: 131746 IP address blocks: 38.211.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:62:95:02:cb:6d:9d:7d:b4:b0:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 18:23:11 2026 GMT Not After : Dec 10 19:23:11 2026 GMT Subject: CN=34ab3142-7386-48ed-af02-e073e226ef59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:80:16:c0:23:d1:f0:f7:39:68:50:0f:59: 4e:5b:59:24:5b:24:6d:6e:e1:30:71:8f:fa:17:9e: 3f:33:c8:ac:60:80:d8:a7:af:d9:e5:7c:fa:24:5e: 66:12:61:94:84:b1:dd:ac:3a:bc:9b:e7:d7:cb:32: ff:84:5b:23:9b:01:da:37:2e:f8:1b:5a:60:f0:92: 1b:86:a1:2c:b6:ba:8c:ad:12:93:c1:31:c0:e0:80: 7f:5d:6e:0a:73:25:73:63:e6:ac:e7:07:e1:92:80: be:7f:24:01:0c:4a:c7:e9:ae:6d:f1:62:f5:3c:fc: e4:86:22:67:1f:da:7b:8f:b0:05:8e:4d:dd:b8:84: 4a:e5:9f:8f:6b:9e:8b:39:47:2e:d2:29:48:04:0d: 90:ba:20:cc:0f:b1:cc:48:d1:d3:3c:76:c9:32:27: 1b:32:00:6d:f2:8e:69:f2:71:0a:43:08:f8:b6:e4: 47:33:5a:fc:ca:b8:88:46:bc:ad:24:ad:cf:f8:89: 2f:99:3e:2e:8e:60:5a:1c:42:8c:ab:ac:a3:83:45: 0f:e1:44:b0:3c:f8:05:17:2c:4f:bf:27:a1:eb:17: a9:34:f1:09:60:d8:b5:bd:9a:40:2d:51:ab:6e:e5: e3:15:b7:83:5e:e7:19:77:3c:29:3e:79:3e:91:b0: 98:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2E:FB:67:D0:71:93:5B:1E:E7:B0:8F:39:F9:89:7D:7C:11:09:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65fd993c-272a-3183-b6c3-8d44f91a77a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:59:f9:ea:5b:65:1c:28:9a:9f:0f:c8:4d:0a:1c:33:98:21: 1b:ff:8c:ae:31:89:a1:df:22:5d:55:5f:5d:49:4b:88:34:c5: 5d:fa:cd:b5:eb:cb:16:c6:47:6e:b5:27:1b:b6:a8:ab:2b:14: d0:4a:50:6b:aa:12:ea:81:94:81:65:b8:86:e3:60:49:75:94: 91:70:50:f6:17:63:ad:e4:6e:2f:d5:cd:73:0f:58:e8:f8:87: 05:7d:31:84:c2:2d:db:0a:d1:bf:25:e0:24:55:bd:de:f2:ad: fe:51:4e:36:49:f7:4e:9b:a7:00:8f:5f:7f:83:18:2d:4c:63: cb:cd:cc:e9:61:e1:77:52:ea:50:05:08:ec:51:b8:fc:ee:99: 63:58:d7:f6:e5:a5:f3:cc:eb:ca:d0:db:53:9f:90:08:f0:c6: b6:08:1f:c6:4d:f1:17:46:2c:3a:59:75:55:df:23:12:32:97: b1:5f:2a:4d:66:c6:0e:78:72:7e:4a:2a:ab:5c:54:53:b3:19: bf:d2:fe:6d:7e:22:5e:8e:64:6c:e7:06:e0:19:df:fb:ea:aa: 2b:4b:68:94:fa:e4:27:95:e9:ea:2b:43:37:87:c6:0c:b3:d8: 61:7a:a9:2a:4e:4a:c5:21:a5:d3:11:8e:18:92:a4:28:a0:86: 4d:0b:a5:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kYpUCy22dfbSwZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTE4MjMxMVoXDTI2MTIxMDE5MjMxMVowLzEtMCsGA1UEAxMk MzRhYjMxNDItNzM4Ni00OGVkLWFmMDItZTA3M2UyMjZlZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDyAFsAj0fD3OWhQD1lOW1kkWyRtbuEwcY/6 F54/M8isYIDYp6/Z5Xz6JF5mEmGUhLHdrDq8m+fXyzL/hFsjmwHaNy74G1pg8JIb hqEstrqMrRKTwTHA4IB/XW4KcyVzY+as5wfhkoC+fyQBDErH6a5t8WL1PPzkhiJn H9p7j7AFjk3duIRK5Z+Pa56LOUcu0ilIBA2QuiDMD7HMSNHTPHbJMicbMgBt8o5p 8nEKQwj4tuRHM1r8yriIRrytJK3P+IkvmT4ujmBaHEKMq6yjg0UP4USwPPgFFyxP vyeh6xepNPEJYNi1vZpALVGrbuXjFbeDXucZdzwpPnk+kbCYJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEu+2fQcZNbHuewjzn5iX18EQlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjVmZDk5M2MtMjcyYS0z MTgzLWI2YzMtOGQ0NGY5MWE3N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJtOMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhZ+epbZRwomp8PyE0KHDOYIRv/jK4xiaHfIl1VX11JS4g0xV36zbXr yxbGR261Jxu2qKsrFNBKUGuqEuqBlIFluIbjYEl1lJFwUPYXY63kbi/VzXMPWOj4 hwV9MYTCLdsK0b8l4CRVvd7yrf5RTjZJ906bpwCPX3+DGC1MY8vNzOlh4XdS6lAF COxRuPzumWNY1/blpfPM68rQ21OfkAjwxrYIH8ZN8RdGLDpZdVXfIxIyl7FfKk1m xg54cn5KKqtcVFOzGb/S/m1+Il6OZGznBuAZ3/vqqitLaJT65CeV6eorQzeHxgyz 2GF6qSpOSsUhpdMRjhiSpCighk0LpU4= -----END CERTIFICATE-----Generated at Fri Sep 25 18:40:14 2026 by rpki-client