$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68fabc2c-2da0-373e-aacb-c12101bbc260.roa File: 68fabc2c-2da0-373e-aacb-c12101bbc260.roa (raw, json) Hash identifier: L+ADAEy4CtqUQqddyMOp6MkiZw71LnIsZQ/J+Wz/I+8= Subject key identifier: 92:F7:9D:D4:DB:CB:14:DC:64:E9:8F:47:95:DD:A8:F7:3E:4E:11:9D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F331D2179FD381A8346407F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68fabc2c-2da0-373e-aacb-c12101bbc260.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 274237 IP address blocks: 38.191.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:21:79:fd:38:1a:83:46:40:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=99ed61ad-9428-4a64-a678-935122dd2be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:da:28:c7:2e:18:55:3e:b1:a8:dc:57:8b: 6c:61:7b:78:5e:dd:ac:ca:fa:d5:c6:07:af:b6:98: dd:9c:74:e1:d3:bb:c9:65:cc:a6:26:f0:3f:b0:78: dd:ea:92:36:66:b7:2d:9a:e2:17:90:ab:c7:23:86: 71:12:91:aa:99:4c:ce:5f:43:2e:23:77:9e:e0:3b: 86:8d:c8:40:39:95:99:7b:c1:37:51:a9:09:06:3c: 1a:d6:51:c7:9a:8e:c2:d7:b7:7e:91:96:6e:52:ff: 34:20:9f:ac:ae:c0:bf:e8:5c:a4:58:0f:77:be:52: de:08:58:94:5f:42:4c:67:81:7d:9f:04:30:5d:69: e4:34:81:9d:b0:1f:a1:28:32:ac:ba:de:c7:e3:c6: ac:d8:72:cb:c9:a4:02:0f:d3:fa:d8:d2:03:df:42: 7e:0f:39:49:a6:56:dc:4c:de:ba:ef:0a:b1:71:6e: 96:b3:1f:00:63:e2:6e:9b:5b:37:3a:b7:90:bc:c0: 36:33:f6:0d:d3:a8:12:5f:49:8d:81:d9:88:ec:f3: 8d:9a:18:4f:12:4f:7d:e2:65:bc:ed:00:0c:aa:44: c2:21:3f:28:0b:d0:4a:15:02:95:24:93:ad:ab:31: d8:23:df:8d:66:f4:ba:9b:0d:7c:1e:6c:a1:85:8a: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F7:9D:D4:DB:CB:14:DC:64:E9:8F:47:95:DD:A8:F7:3E:4E:11:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68fabc2c-2da0-373e-aacb-c12101bbc260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.191.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:86:2e:f2:9c:45:29:47:6c:a6:a8:5e:e5:c4:f3:85:90:d4: 22:ca:a9:ab:7d:95:54:79:9e:4f:dc:f9:70:38:87:61:bc:ac: 43:fe:b3:fe:de:3d:93:16:55:36:3b:2f:be:36:d4:17:73:2b: e4:6e:a5:6b:b2:28:67:d3:23:ac:c1:9e:f0:2f:22:dd:a3:85: 11:2d:50:b8:b5:9c:b7:de:73:0d:43:de:6e:a9:dc:b5:21:65: ae:28:cb:21:57:fc:13:cb:d0:58:7f:9b:6d:f8:35:58:c4:ba: 14:be:97:f0:39:89:54:78:8a:c3:c2:7c:fb:73:0a:40:cb:78: ab:13:74:d8:f8:1d:ba:dc:8f:99:cf:4e:0e:f2:de:ea:c9:1b: 39:b4:29:a8:f2:0f:a2:53:d7:6f:7c:09:ff:91:b0:79:c8:e4: 08:cf:99:23:f7:5e:4e:f0:85:f4:d4:50:17:83:9a:b2:b8:9d: 18:69:ce:cf:c9:77:0d:1c:83:a8:47:0e:22:77:18:08:c4:7c: a8:d4:0d:6e:e6:8a:48:5b:3a:0f:c4:02:d3:58:53:a9:31:db: 9d:b9:e0:de:99:79:fa:53:88:94:73:e3:66:4b:a3:a4:86:72: c4:f7:b0:04:c9:d8:a1:05:8a:6e:fa:38:74:71:1e:43:f0:83: 98:d0:a5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSF5/Tgag0ZAfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk OTllZDYxYWQtOTQyOC00YTY0LWE2NzgtOTM1MTIyZGQyYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum7aKMcuGFU+sajcV4tsYXt4Xt2syvrVxgev tpjdnHTh07vJZcymJvA/sHjd6pI2ZrctmuIXkKvHI4ZxEpGqmUzOX0MuI3ee4DuG jchAOZWZe8E3UakJBjwa1lHHmo7C17d+kZZuUv80IJ+srsC/6FykWA93vlLeCFiU X0JMZ4F9nwQwXWnkNIGdsB+hKDKsut7H48as2HLLyaQCD9P62NID30J+DzlJplbc TN667wqxcW6Wsx8AY+Jum1s3OreQvMA2M/YN06gSX0mNgdmI7PONmhhPEk994mW8 7QAMqkTCIT8oC9BKFQKVJJOtqzHYI9+NZvS6mw18HmyhhYp6SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL3ndTbyxTcZOmPR5XdqPc+ThGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjhmYWJjMmMtMmRhMC0z NzNlLWFhY2ItYzEyMTAxYmJjMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJr/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCGLvKcRSlHbKaoXuXE84WQ1CLKqat9lVR5nk/c+XA4h2G8rEP+s/7e PZMWVTY7L7421BdzK+RupWuyKGfTI6zBnvAvIt2jhREtULi1nLfecw1D3m6p3LUh Za4oyyFX/BPL0Fh/m234NVjEuhS+l/A5iVR4isPCfPtzCkDLeKsTdNj4Hbrcj5nP Tg7y3urJGzm0KajyD6JT1298Cf+RsHnI5AjPmSP3Xk7whfTUUBeDmrK4nRhpzs/J dw0cg6hHDiJ3GAjEfKjUDW7mikhbOg/EAtNYU6kx25254N6ZefpTiJRz42ZLo6SG csT3sATJ2KEFim76OHRxHkPwg5jQpSI= -----END CERTIFICATE-----Generated at Thu Sep 24 21:12:51 2026 by rpki-client