$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a3f9d5d0-acf8-3b74-ad40-bd4288372c99.roa File: a3f9d5d0-acf8-3b74-ad40-bd4288372c99.roa (raw, json) Hash identifier: d7bL2Pb92wDCRcXC0dhmH31XudbGLWrX+DEE3gVmHuo= Subject key identifier: 31:02:CE:DA:3B:ED:40:EA:03:5D:B2:BD:19:0E:2C:45:A8:B9:61:4D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F14678ACD36793DF6729912A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a3f9d5d0-acf8-3b74-ad40-bd4288372c99.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 63139 IP address blocks: 38.54.0.0/17 maxlen: 24 38.60.128.0/17 maxlen: 24 149.104.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8a:cd:36:79:3d:f6:72:99:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=266e0d6f-af67-44b6-a3f9-0cdb85918e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:71:d4:66:94:b2:7b:4c:d8:d5:15:dc:73: 13:9f:26:a5:0e:7c:56:fe:f7:28:4d:50:74:35:4a: 09:37:0a:36:43:ba:df:32:35:f8:82:18:02:e0:c5: d6:57:b9:df:15:42:33:b2:4d:c3:5a:6d:e4:47:c8: 12:d4:49:93:80:b4:b5:4d:f0:94:24:a2:13:e2:06: f8:30:db:0e:d8:e7:b3:f3:3f:19:30:de:5c:2d:f8: 70:d4:3e:5b:c8:3c:b9:3c:db:9f:d8:7d:df:8d:51: ed:62:c3:d8:62:eb:86:05:49:71:26:39:79:ca:88: d7:01:ad:10:69:cd:30:fc:f7:1e:76:75:09:e4:0e: 47:4e:b4:f6:2d:03:8c:5c:89:8d:53:c7:0e:2a:48: 24:f4:04:8f:4a:89:90:d9:c8:bf:30:5a:f5:95:8d: 3d:ea:f2:5e:24:e4:54:ad:05:14:47:de:61:e6:2e: e8:ba:c5:d9:67:81:e1:58:22:57:9e:2c:60:11:b4: 5a:0b:8d:5e:a7:b2:6c:3a:91:15:0e:79:8c:7d:4a: 02:38:ce:8b:cb:16:45:db:71:08:68:c7:cb:c5:84: 5d:d3:26:36:cb:e6:53:1d:3d:64:7f:c8:4f:5b:eb: cf:8d:76:e4:21:b4:6a:ef:20:f3:a9:93:ff:a5:4c: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:CE:DA:3B:ED:40:EA:03:5D:B2:BD:19:0E:2C:45:A8:B9:61:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a3f9d5d0-acf8-3b74-ad40-bd4288372c99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.54.0.0/17 38.60.128.0/17 149.104.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:60:a1:03:c3:a5:d5:c4:61:3d:60:32:b3:00:38:3c:9b:10: 7d:a8:46:5c:8b:59:02:62:73:cb:48:e7:f8:89:05:e4:42:19: 5d:11:1a:dd:8a:e2:af:2d:87:a2:ab:fb:cc:e8:fb:1e:75:75: b0:1e:82:25:6d:59:f0:8f:1f:49:ac:96:5a:28:63:37:4b:21: 2a:1b:cb:e3:cb:d6:1e:02:f7:85:f0:b2:64:de:60:43:2c:62: 3e:ab:5e:37:88:7a:16:e7:b6:ce:35:c7:9f:9b:f6:5e:ed:8a: 09:71:b8:34:cd:a2:40:a6:03:94:5f:42:f4:0b:32:42:12:0a: 9c:da:54:52:c4:9a:28:44:3b:8b:95:4b:61:1f:7d:36:d8:99: ef:3e:eb:ce:1d:26:13:a4:ee:b1:fe:05:29:b1:3d:80:60:bf: 42:04:9d:83:cb:78:67:c0:35:6b:e3:52:7d:5d:95:ce:02:67: 65:e4:e5:ce:6b:8d:2d:b2:f3:a0:5b:7a:ad:2e:ea:7a:a3:7d: 42:4c:9a:97:79:4f:24:79:40:7e:bc:35:ba:cc:99:65:3d:da: 43:f2:c6:2d:c3:1c:3b:75:5f:93:93:a1:a0:fe:df:37:72:e6: ae:b5:43:eb:00:ba:4f:36:e5:e8:09:c4:01:4e:dc:76:c3:1e: 68:99:74:07 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8UZ4rNNnk99nKZEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjY2ZTBkNmYtYWY2Ny00NGI2LWEzZjktMGNkYjg1OTE4ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVxx1GaUsntM2NUV3HMTnyalDnxW/vcoTVB0 NUoJNwo2Q7rfMjX4ghgC4MXWV7nfFUIzsk3DWm3kR8gS1EmTgLS1TfCUJKIT4gb4 MNsO2Oez8z8ZMN5cLfhw1D5byDy5PNuf2H3fjVHtYsPYYuuGBUlxJjl5yojXAa0Q ac0w/PcednUJ5A5HTrT2LQOMXImNU8cOKkgk9ASPSomQ2ci/MFr1lY096vJeJORU rQUUR95h5i7ousXZZ4HhWCJXnixgEbRaC41ep7JsOpEVDnmMfUoCOM6LyxZF23EI aMfLxYRd0yY2y+ZTHT1kf8hPW+vPjXbkIbRq7yDzqZP/pUwExQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDECzto77UDqA12yvRkOLEWouWFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTNmOWQ1ZDAtYWNmOC0z Yjc0LWFkNDAtYmQ0Mjg4MzcyYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHJjYAAwQH JjyAAwQGlWhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABFgoQPDpdXEYT1gMrMAODybEH2oRlyLWQJic8tI 5/iJBeRCGV0RGt2K4q8th6Kr+8zo+x51dbAegiVtWfCPH0msllooYzdLISoby+PL 1h4C94XwsmTeYEMsYj6rXjeIehbnts41x5+b9l7tiglxuDTNokCmA5RfQvQLMkIS CpzaVFLEmihEO4uVS2EffTbYme8+684dJhOk7rH+BSmxPYBgv0IEnYPLeGfANWvj Un1dlc4CZ2Xk5c5rjS2y86Bbeq0u6nqjfUJMmpd5TyR5QH68NbrMmWU92kPyxi3D HDt1X5OToaD+3zdy5q61Q+sAuk825egJxAFO3HbDHmiZdAc= -----END CERTIFICATE-----Generated at Fri Sep 25 22:52:48 2026 by rpki-client