$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa File: 8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa (raw, json) Hash identifier: 7DZm7WVpZqmHKxIPHMPGVTappp0qLNlh1vEoG7ZpE2Y= Subject key identifier: E4:AE:4E:49:44:5C:B3:0A:74:0C:48:53:C0:E1:D5:93:66:09:36:FB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F23C256B30309287408010280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 393559 IP address blocks: 38.135.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:56:b3:03:09:28:74:08:01:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=a2e3a218-1f86-4754-87d8-28a4a8433b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:44:f1:24:e7:01:58:21:58:bc:8d:62:ac: 26:2f:1d:94:45:5d:44:c6:28:e2:01:80:3b:52:39: ed:0b:4b:96:d9:47:37:26:2e:bb:7f:1a:23:4f:fc: 52:1f:53:c3:b1:05:74:61:cc:1e:9f:39:99:82:e6: bb:70:8d:89:5b:da:e2:a1:de:bc:78:81:d8:01:44: 53:d3:8e:0a:a8:68:88:4b:98:7a:d8:a7:75:f8:d1: 6e:b2:48:b4:d9:b6:ff:d6:59:c3:0b:f1:56:4a:a0: 7a:62:98:07:cd:5b:f2:a8:d8:7b:72:fb:91:53:2a: 7d:48:3b:4d:6d:1f:be:3c:ae:dd:76:af:57:e3:28: 20:52:1c:9e:2d:da:11:97:af:81:04:f1:6e:c0:76: 05:39:13:5b:26:dc:96:e6:dd:53:da:e4:63:72:2d: 97:c5:66:e1:f8:cf:dc:97:03:9c:f8:e5:2f:06:4c: 41:a0:b0:b5:c2:33:4c:90:8d:3b:b2:61:e0:ce:1e: 12:ff:2d:a5:35:97:ba:fb:75:ee:9f:df:db:7a:75: f7:02:fb:9e:39:2d:69:9e:a4:b3:43:23:8d:c4:25: d1:b4:c4:73:54:99:43:02:a0:f3:82:56:2d:d6:1a: 54:27:11:77:12:bf:9a:ec:71:b3:51:1b:5a:24:5f: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AE:4E:49:44:5C:B3:0A:74:0C:48:53:C0:E1:D5:93:66:09:36:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:47:95:44:1e:c1:41:d9:8d:03:4c:15:08:4d:1f:47:a5:27: 0c:c8:ce:68:9d:c2:61:2f:02:14:2a:77:a5:27:ea:d9:fe:65: c0:c0:ff:a0:a9:d2:d3:66:44:96:07:9b:46:16:e6:11:ad:1b: 99:46:1c:8b:63:90:ff:92:a4:ad:aa:af:b4:4f:0b:da:19:d3: a0:c5:98:07:38:49:70:15:c3:ee:d5:3a:ab:25:b0:5a:fb:9a: d2:e4:d4:5c:22:cd:d5:61:93:de:1e:67:8c:6b:e6:0a:c5:4f: ec:09:80:23:19:df:95:a5:12:51:ac:07:72:86:d3:1a:45:2e: 03:85:8b:3b:7c:36:0b:bc:c3:6e:46:66:4b:84:41:b3:ea:e6: 34:ac:ba:de:0e:5f:ba:5a:b7:91:f9:9d:7a:0b:00:c5:5f:26: 84:f4:ea:d1:e0:83:87:0b:eb:05:1c:38:11:d6:96:af:30:45: 96:ab:26:0f:b8:b5:73:a4:fc:ac:60:b1:f7:bd:29:13:7d:68: 8a:2c:19:e9:97:a3:f8:85:b7:c0:61:f7:28:ed:1e:bf:b6:56: 0c:21:8b:3f:db:31:12:be:3d:f8:f1:46:9b:e0:c2:e0:b5:96: 85:92:b1:ab:a9:22:6d:09:11:87:e4:3e:70:c0:ef:a4:18:73: 54:dd:89:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlazAwkodAgBAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YTJlM2EyMTgtMWY4Ni00NzU0LTg3ZDgtMjhhNGE4NDMzYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLJE8STnAVghWLyNYqwmLx2URV1ExijiAYA7 UjntC0uW2Uc3Ji67fxojT/xSH1PDsQV0YcwenzmZgua7cI2JW9riod68eIHYAURT 044KqGiIS5h62Kd1+NFuski02bb/1lnDC/FWSqB6YpgHzVvyqNh7cvuRUyp9SDtN bR++PK7ddq9X4yggUhyeLdoRl6+BBPFuwHYFORNbJtyW5t1T2uRjci2XxWbh+M/c lwOc+OUvBkxBoLC1wjNMkI07smHgzh4S/y2lNZe6+3Xun9/benX3AvueOS1pnqSz QyONxCXRtMRzVJlDAqDzglYt1hpUJxF3Er+a7HGzURtaJF/KvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSuTklEXLMKdAxIU8Dh1ZNmCTb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGMxOWI5NmMtNmYwMi0z ODkyLTliYjUtNGI0NjcwMmU2MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJoeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFHlUQewUHZjQNMFQhNH0elJwzIzmidwmEvAhQqd6Un6tn+ZcDA/6Cp 0tNmRJYHm0YW5hGtG5lGHItjkP+SpK2qr7RPC9oZ06DFmAc4SXAVw+7VOqslsFr7 mtLk1FwizdVhk94eZ4xr5grFT+wJgCMZ35WlElGsB3KG0xpFLgOFizt8Ngu8w25G ZkuEQbPq5jSsut4OX7pat5H5nXoLAMVfJoT06tHgg4cL6wUcOBHWlq8wRZarJg+4 tXOk/Kxgsfe9KRN9aIosGemXo/iFt8Bh9yjtHr+2Vgwhiz/bMRK+PfjxRpvgwuC1 loWSsaupIm0JEYfkPnDA76QYc1Tdiaw= -----END CERTIFICATE-----Generated at Tue Sep 22 14:42:15 2026 by rpki-client