$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa File: a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa (raw, json) Hash identifier: vZ7zwds6SoWiPgZYWBDD6osyUSmbywfyYFxJxEk4KaQ= Subject key identifier: DD:A4:2E:0E:03:2B:11:0F:B1:50:05:AC:4A:CD:33:51:AD:60:87:E6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4C3D768C45915C255B488200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19188 IP address blocks: 38.111.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:76:8c:45:91:5c:25:5b:48:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=40ba5919-420c-4087-988f-b6d37c7f2075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:ae:aa:30:4a:f2:a4:4d:da:8b:cc:70:78: 92:51:44:a1:85:78:52:6f:e7:cf:a6:13:70:58:fc: c6:db:6d:0b:4e:57:7c:44:20:f9:8c:76:b6:1a:b1: ee:16:9f:88:b5:ee:ef:63:37:ec:15:90:34:a6:e7: 58:4b:07:8d:d1:34:09:de:d9:36:e8:48:78:a6:a8: f0:67:16:7a:5d:54:0f:45:5e:1b:1e:4a:1f:76:fd: 59:77:e9:1b:af:ac:7e:9a:28:2a:1d:48:bd:2a:76: af:6e:17:ca:1b:2d:3c:0b:ba:e1:37:b6:0c:60:52: b0:ed:a7:c6:84:44:2b:9a:12:cd:bf:89:40:67:e9: bf:05:3d:0a:bd:de:cf:64:3e:39:cf:7a:1e:18:33: a3:92:df:e9:8d:c9:fc:a3:0c:c0:de:0f:f8:ff:1f: 76:11:ac:32:02:31:62:f2:f5:1e:08:29:36:5f:87: c3:ef:c3:97:08:e8:cd:a7:a1:06:68:76:ae:7e:2a: 30:36:72:d0:c3:1c:68:50:e9:7c:ab:67:87:eb:fd: e5:05:a2:cb:fe:e9:6a:68:a5:9d:d5:42:59:a2:b6: a5:ef:a7:ab:6b:dc:11:14:42:62:69:af:5d:a0:59: 58:24:0c:57:41:34:fc:dd:01:78:56:62:f3:25:e4: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:2E:0E:03:2B:11:0F:B1:50:05:AC:4A:CD:33:51:AD:60:87:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.111.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e7:a2:6c:84:a0:7b:0b:b0:71:85:28:25:88:1c:bb:a4:ab: e1:89:84:76:88:2f:89:15:fd:59:85:ea:e9:b1:e3:4f:23:ea: 70:dc:a4:66:d3:e3:53:48:7c:37:f6:ed:f9:a2:e6:69:8f:c1: 1f:b1:cd:f9:c8:8e:de:76:c5:35:63:38:a5:58:4e:76:f1:a3: a0:dd:25:bf:dd:47:95:b3:c2:cf:50:4c:18:1d:67:e2:f9:6a: 51:f5:48:c2:a1:de:ea:40:6f:d7:ad:e9:06:fc:85:09:b7:cc: 7c:55:27:6e:94:d3:74:17:24:fe:f7:54:c2:23:26:d9:cf:e3: 6c:94:b4:30:42:8a:9a:52:1e:4f:8a:04:24:c2:63:81:59:1c: 05:89:d5:ee:be:3f:18:5d:dc:41:45:c3:f8:11:01:45:29:f7: ad:07:80:98:61:62:76:7a:d6:16:0e:9e:d8:a3:12:77:f8:cb: ac:17:3e:e5:83:80:1c:e3:c2:5e:f1:e4:3c:f2:2c:23:84:23: 5c:ad:6f:a2:c4:d9:1b:28:aa:d5:52:a0:59:ee:33:ba:87:e7: 7b:ee:9f:a5:0f:74:a6:fb:d5:4a:57:1f:1a:b7:09:e3:ca:8b: 4d:48:82:52:76:5a:87:25:06:22:4a:59:77:2a:08:3f:39:42: bc:aa:49:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXaMRZFcJVtIggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDBiYTU5MTktNDIwYy00MDg3LTk4OGYtYjZkMzdjN2YyMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKquqjBK8qRN2ovMcHiSUUShhXhSb+fPphNw WPzG220LTld8RCD5jHa2GrHuFp+Ite7vYzfsFZA0pudYSweN0TQJ3tk26Eh4pqjw ZxZ6XVQPRV4bHkofdv1Zd+kbr6x+migqHUi9KnavbhfKGy08C7rhN7YMYFKw7afG hEQrmhLNv4lAZ+m/BT0Kvd7PZD45z3oeGDOjkt/pjcn8owzA3g/4/x92EawyAjFi 8vUeCCk2X4fD78OXCOjNp6EGaHaufiowNnLQwxxoUOl8q2eH6/3lBaLL/ulqaKWd 1UJZoral76era9wRFEJiaa9doFlYJAxXQTT83QF4VmLzJeTZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2kLg4DKxEPsVAFrErNM1GtYIfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTdlYjhlMGMtMGY4Ny0z OTE5LTkwYzQtN2U4OGQxZDYyODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLnomyEoHsLsHGFKCWIHLukq+GJhHaIL4kV/VmF6umx408j6nDcpGbT 41NIfDf27fmi5mmPwR+xzfnIjt52xTVjOKVYTnbxo6DdJb/dR5Wzws9QTBgdZ+L5 alH1SMKh3upAb9et6Qb8hQm3zHxVJ26U03QXJP73VMIjJtnP42yUtDBCippSHk+K BCTCY4FZHAWJ1e6+Pxhd3EFFw/gRAUUp960HgJhhYnZ61hYOntijEnf4y6wXPuWD gBzjwl7x5DzyLCOEI1ytb6LE2RsoqtVSoFnuM7qH53vun6UPdKb71UpXHxq3CePK i01IglJ2WoclBiJKWXcqCD85QryqSao= -----END CERTIFICATE-----Generated at Sun Sep 27 01:21:55 2026 by rpki-client