$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86bfa981-4ab6-334f-a96d-ff7a677ee561.roa File: 86bfa981-4ab6-334f-a96d-ff7a677ee561.roa (raw, json) Hash identifier: I+4egoUbmMlH1ip0efjaKgwpKIJ3+viIZfQX7rQkHMI= Subject key identifier: 9C:6A:6D:20:12:F4:EE:C7:10:E2:D3:19:E8:00:EE:A2:BE:77:B2:05 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F23C258D1AA2A80393B08F880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86bfa981-4ab6-334f-a96d-ff7a677ee561.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 198949 IP address blocks: 38.135.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:58:d1:aa:2a:80:39:3b:08:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=3f996ce8-c121-43d4-97e5-a56dd24ada83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:20:6c:f0:58:b1:ea:72:88:9f:4e:30:f4: af:b1:83:65:5a:30:87:8c:ee:39:f5:b9:6d:de:e2: 2e:bc:2d:d3:1e:f9:01:22:45:a0:ce:30:4b:cf:b8: 04:d3:7f:d1:50:8a:fe:2b:9b:83:10:7f:0c:70:c6: 99:05:91:ed:d0:93:8c:b1:a4:e5:a7:fc:e0:18:44: 53:4e:37:0c:cd:8d:ec:e1:ac:95:0a:86:0c:c0:2d: 16:70:36:38:9f:4d:10:df:21:9e:35:b5:ee:35:9b: 8a:96:23:76:fb:f1:8a:b0:b6:13:a8:03:7c:ff:5c: ad:28:d2:cd:c3:9a:f0:7b:49:78:77:30:05:14:ea: 61:f3:cd:f0:51:b9:7d:bb:5f:f2:60:52:21:5e:e2: 51:a4:34:ad:07:a4:f8:d5:87:56:51:0a:59:fc:d8: f6:a9:6a:7c:64:8f:d8:f5:0a:32:27:ba:a4:51:92: 6a:f6:7f:2f:67:bb:c1:f8:96:8b:f2:04:1e:c6:83: e0:e7:66:e1:43:5b:12:a9:94:ca:28:0e:ef:58:63: 34:de:82:ff:95:d0:09:05:03:a8:8e:64:9b:f7:16: 0b:53:0f:cb:b9:31:cf:1e:0a:c8:0e:7a:5f:78:99: 36:19:60:c0:53:8d:0f:34:b6:09:db:78:ee:71:80: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6A:6D:20:12:F4:EE:C7:10:E2:D3:19:E8:00:EE:A2:BE:77:B2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86bfa981-4ab6-334f-a96d-ff7a677ee561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ee:a5:48:2c:14:e3:bc:8a:e2:d9:d4:0f:59:20:21:b6:86: 5b:a4:4b:01:51:77:bd:30:9f:da:60:2c:73:80:93:d8:07:e5: ee:5f:91:67:31:a9:74:53:55:6b:cd:33:f1:6f:3b:31:0e:f8: b6:2a:51:e4:39:46:81:80:0c:a0:6d:bd:e8:7d:84:eb:01:45: e1:ec:1a:30:35:8e:82:53:b6:f7:6c:b2:20:3c:0c:28:bb:c1: 8a:63:b1:77:ca:da:f0:10:4a:53:75:f8:64:ae:1e:89:3f:7c: 9a:23:63:53:17:d3:b3:c0:58:ee:7b:a5:91:15:4b:63:c4:50: 48:5d:d9:cc:75:57:09:bb:e3:a7:b7:7f:7e:c2:58:ed:f1:01: ae:db:47:6a:08:e8:62:6f:ee:da:1f:dd:94:39:5c:25:e0:90: c8:23:c8:50:95:69:72:92:ac:5d:e0:7a:14:d1:ad:93:ad:53: 78:02:59:4e:23:19:c1:28:ec:df:f7:8c:40:ce:56:a4:7c:f6: f8:01:bc:83:f0:df:d8:a6:62:f5:63:61:42:35:ea:6b:48:6b: 17:51:84:2e:a1:cf:61:e2:bc:0b:d9:f6:18:a0:54:2c:d1:16: d1:2e:44:f4:c7:ce:47:74:89:c2:3f:c1:53:ad:8a:39:4e:81: e0:3e:2d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwljRqiqAOTsI+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk M2Y5OTZjZTgtYzEyMS00M2Q0LTk3ZTUtYTU2ZGQyNGFkYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ScgbPBYsepyiJ9OMPSvsYNlWjCHjO459blt 3uIuvC3THvkBIkWgzjBLz7gE03/RUIr+K5uDEH8McMaZBZHt0JOMsaTlp/zgGERT TjcMzY3s4ayVCoYMwC0WcDY4n00Q3yGeNbXuNZuKliN2+/GKsLYTqAN8/1ytKNLN w5rwe0l4dzAFFOph883wUbl9u1/yYFIhXuJRpDStB6T41YdWUQpZ/Nj2qWp8ZI/Y 9QoyJ7qkUZJq9n8vZ7vB+JaL8gQexoPg52bhQ1sSqZTKKA7vWGM03oL/ldAJBQOo jmSb9xYLUw/LuTHPHgrIDnpfeJk2GWDAU40PNLYJ23jucYBRHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxqbSAS9O7HEOLTGegA7qK+d7IFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODZiZmE5ODEtNGFiNi0z MzRmLWE5NmQtZmY3YTY3N2VlNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJoeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7upUgsFOO8iuLZ1A9ZICG2hlukSwFRd70wn9pgLHOAk9gH5e5fkWcx qXRTVWvNM/FvOzEO+LYqUeQ5RoGADKBtveh9hOsBReHsGjA1joJTtvdssiA8DCi7 wYpjsXfK2vAQSlN1+GSuHok/fJojY1MX07PAWO57pZEVS2PEUEhd2cx1Vwm746e3 f37CWO3xAa7bR2oI6GJv7tof3ZQ5XCXgkMgjyFCVaXKSrF3gehTRrZOtU3gCWU4j GcEo7N/3jEDOVqR89vgBvIPw39imYvVjYUI16mtIaxdRhC6hz2HivAvZ9higVCzR FtEuRPTHzkd0icI/wVOtijlOgeA+Lb8= -----END CERTIFICATE-----Generated at Sun Sep 20 18:38:18 2026 by rpki-client