$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa File: 87b41eaf-23a1-30da-b30a-a05c5e920862.roa (raw, json) Hash identifier: xdmPkrM0fc/3fK11GVpVO0cEmf40UWmc3be1H5c03tQ= Subject key identifier: 95:9C:BD:F0:AD:D0:DC:41:8E:45:09:D4:4A:05:1D:A1:3B:25:C9:69 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4972A6CE4467121A0C15ED40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 274252 IP address blocks: 38.97.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a6:ce:44:67:12:1a:0c:15:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=92af3753-11c0-406b-87c0-073ff1976a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:06:73:44:39:31:bd:b2:24:69:2a:76:f7: 22:e8:35:df:a2:56:0e:5b:07:ef:76:75:0b:0e:08: dc:47:f5:64:54:f1:2f:79:02:3c:7e:85:bd:56:f9: 14:31:c6:e8:b8:f9:4a:59:de:d5:15:df:af:d6:63: 8a:e0:1a:1d:f2:1c:b6:ce:de:06:22:cc:1c:c1:01: 09:c5:94:b7:f5:40:18:ef:d4:7e:29:1e:a4:3c:b2: 8a:1b:b4:3e:40:b1:38:46:95:61:6d:10:bc:b6:1d: 3e:c5:52:f2:5c:5c:04:2d:10:f2:b6:be:d1:1c:95: 6b:3e:1b:ad:7a:93:52:73:ac:f3:48:a6:8d:9e:0c: e9:b2:b3:bd:82:91:06:da:cc:0c:68:3b:00:47:f4: 13:60:78:44:17:87:33:26:ee:59:6b:82:8d:cd:2e: 74:06:ab:45:50:0e:98:4c:b6:db:d2:f8:7e:76:3f: 11:b7:01:a8:d6:cf:fc:7e:64:89:22:66:95:19:72: 4d:64:44:ea:e7:37:91:e5:81:70:8d:a9:e0:ea:9a: f7:43:e9:2c:4d:bc:58:ef:86:8d:ef:fd:96:44:57: f0:b1:93:4e:fc:01:05:9e:bc:95:11:b3:ed:4d:ca: c0:30:f5:ae:9a:e0:39:80:82:2d:4a:4a:fd:69:15: 19:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9C:BD:F0:AD:D0:DC:41:8E:45:09:D4:4A:05:1D:A1:3B:25:C9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.97.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c1:04:b1:e8:1a:26:de:93:95:80:08:d9:dd:81:15:15:32: ab:2f:ab:f4:ed:76:48:ce:c3:96:64:56:75:63:26:fd:bb:b8: 59:fe:b7:6d:6d:29:2d:8b:c9:97:bd:84:21:6a:1e:d4:3d:bb: 0f:ab:c1:6c:40:f3:a8:11:53:79:38:1d:8e:71:ff:63:4b:56: 71:ff:b5:39:4e:44:cb:58:78:b1:bc:d0:a3:3d:ee:c1:51:b9: f9:08:40:3b:c6:84:32:01:7a:57:1c:85:07:98:61:06:72:1a: 7f:39:e4:e4:7e:d3:5f:2e:5e:e1:69:0a:73:e0:27:b9:ec:78: d0:ef:d2:a3:64:8e:21:3b:8e:9f:98:45:8b:5a:61:4c:0d:25: d4:f2:a5:6d:f1:9d:c5:e7:dd:a9:96:32:af:90:92:69:2d:74: 11:a0:1f:27:ab:7d:95:9b:38:28:4d:f9:bf:d6:41:8a:59:76: bc:9d:85:4b:57:e2:55:8a:7e:d9:12:a1:9a:3b:a8:4d:c9:02: 87:41:51:16:33:f7:44:14:29:ff:aa:df:24:7c:6a:e4:2a:1e: 55:f2:dc:85:03:39:ad:66:55:04:5a:ba:f2:a6:0f:8e:d7:ba: 69:37:79:e7:72:be:86:e2:74:54:7c:3b:4b:5e:da:b3:b9:2b: 3f:bf:9c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqbORGcSGgwV7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTJhZjM3NTMtMTFjMC00MDZiLTg3YzAtMDczZmYxOTc2YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL4Gc0Q5Mb2yJGkqdvci6DXfolYOWwfvdnUL DgjcR/VkVPEveQI8foW9VvkUMcbouPlKWd7VFd+v1mOK4Bod8hy2zt4GIswcwQEJ xZS39UAY79R+KR6kPLKKG7Q+QLE4RpVhbRC8th0+xVLyXFwELRDytr7RHJVrPhut epNSc6zzSKaNngzpsrO9gpEG2swMaDsAR/QTYHhEF4czJu5Za4KNzS50BqtFUA6Y TLbb0vh+dj8RtwGo1s/8fmSJImaVGXJNZETq5zeR5YFwjang6pr3Q+ksTbxY74aN 7/2WRFfwsZNO/AEFnryVEbPtTcrAMPWumuA5gIItSkr9aRUZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWcvfCt0NxBjkUJ1EoFHaE7JclpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdiNDFlYWYtMjNhMS0z MGRhLWIzMGEtYTA1YzVlOTIwODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnBBLHoGibek5WACNndgRUVMqsvq/TtdkjOw5ZkVnVjJv27uFn+t21t KS2LyZe9hCFqHtQ9uw+rwWxA86gRU3k4HY5x/2NLVnH/tTlORMtYeLG80KM97sFR ufkIQDvGhDIBelcchQeYYQZyGn855OR+018uXuFpCnPgJ7nseNDv0qNkjiE7jp+Y RYtaYUwNJdTypW3xncXn3amWMq+QkmktdBGgHyerfZWbOChN+b/WQYpZdrydhUtX 4lWKftkSoZo7qE3JAodBURYz90QUKf+q3yR8auQqHlXy3IUDOa1mVQRauvKmD47X umk3eedyvobidFR8O0te2rO5Kz+/nE4= -----END CERTIFICATE-----Generated at Sat Sep 26 04:52:10 2026 by rpki-client