$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ac33ac97-ee42-30a1-817b-1a344102a193.roa File: ac33ac97-ee42-30a1-817b-1a344102a193.roa (raw, json) Hash identifier: EW32IXLzM7jkZs/WZO4RJ08uTuqYYkQslPm555P3OrA= Subject key identifier: E2:3A:07:1E:A5:40:5B:F5:E4:B4:2F:76:69:06:2F:7A:FD:FF:33:27 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F34EE8491D6B442C36E273280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ac33ac97-ee42-30a1-817b-1a344102a193.roa Signing time: Thu 17 Sep 2026 16:38:04 +0000 ROA not before: Thu 17 Sep 2026 16:38:04 +0000 ROA not after: Wed 16 Dec 2026 17:38:04 +0000 asID: 274974 IP address blocks: 38.86.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:ee:84:91:d6:b4:42:c3:6e:27:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 17 16:38:04 2026 GMT Not After : Dec 16 17:38:04 2026 GMT Subject: CN=cadbdfd0-aae1-461a-a158-de8497b758d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:ba:5e:d1:b0:19:0b:b9:43:81:91:80:01: f0:fa:b0:29:c2:a3:b3:70:6a:11:dd:4a:07:63:5b: 1d:9c:6c:a4:61:1b:7b:99:d7:43:24:8a:25:4b:d1: 86:2e:54:bf:7e:e0:2c:c9:b0:2b:ad:56:f8:89:6f: ea:ac:7f:fe:4f:6c:5b:ce:44:e3:ad:08:f3:b6:96: b2:28:5c:a4:7a:bd:ee:99:e9:be:73:0b:b4:2b:23: 81:c7:68:c8:e3:90:41:92:bc:50:73:0e:a8:9b:18: d1:8d:0c:63:2c:43:95:8c:54:7a:56:c0:9d:7d:2c: ec:c9:ca:58:60:d1:db:72:52:23:8a:2a:1f:82:bb: 6b:35:25:bc:c6:6c:b5:9a:5f:d8:f3:04:e4:27:19: ad:d5:7f:93:a9:a9:32:8c:05:31:6a:0f:c9:2a:a6: fd:37:00:20:1b:f9:06:00:61:bf:14:fb:e2:64:05: 88:98:10:0c:9a:c6:0d:22:60:f1:1e:a1:bc:d0:82: 36:e4:1b:7b:58:e5:d1:02:c8:37:41:f7:f1:25:01: a2:96:7d:37:f2:d3:2f:c1:ab:bf:63:b5:a3:62:a5: 4d:36:67:52:27:18:7c:76:8c:e8:29:8b:b4:3a:43: 18:1b:4c:08:c3:4b:02:6a:17:07:4a:ea:3b:7c:9a: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3A:07:1E:A5:40:5B:F5:E4:B4:2F:76:69:06:2F:7A:FD:FF:33:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ac33ac97-ee42-30a1-817b-1a344102a193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:bd:b8:75:e6:71:ee:80:89:d5:6b:6d:4f:0c:3b:3f:3a:3c: 9b:91:93:ec:8f:b3:80:95:0f:74:81:cd:a2:a2:c0:26:da:50: b2:8a:9d:9a:4b:68:ca:82:dc:35:97:a5:68:e4:82:30:94:b9: 61:c3:9e:48:0d:3d:68:81:bc:2a:15:d8:87:07:b7:b0:72:19: 3c:88:ea:33:10:92:04:c9:4c:cb:2a:c7:6b:35:3e:86:1e:f7: 73:07:fc:a2:8f:09:9b:c9:d7:11:17:46:47:e1:ef:a3:84:cc: 08:33:48:74:8e:c7:c7:d7:30:9f:50:51:66:8b:57:99:5b:c9: 9d:c0:e1:16:7f:80:89:37:24:00:c5:9e:c2:d4:59:4c:e3:04: aa:c7:27:61:8c:5b:5c:b6:87:50:a3:43:9e:ca:f6:dc:ae:f4: cc:b9:7b:07:d0:9b:29:6f:79:45:f7:3b:28:05:b7:c6:73:e8: 07:f2:05:b8:45:82:e9:d3:58:00:52:90:4f:06:16:0f:1e:5c: 0d:a4:50:cc:f2:da:21:c8:40:f3:25:54:5b:4b:18:e2:f0:5a: 44:16:55:f4:15:20:e0:12:63:da:82:63:f5:83:22:5b:d1:ba: 47:13:51:11:83:25:18:98:65:c6:e6:b4:35:98:d0:05:7a:de: 30:d3:67:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE807oSR1rRCw24nMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNzE2MzgwNFoXDTI2MTIxNjE3MzgwNFowLzEtMCsGA1UEAxMk Y2FkYmRmZDAtYWFlMS00NjFhLWExNTgtZGU4NDk3Yjc1OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQe6XtGwGQu5Q4GRgAHw+rApwqOzcGoR3UoH Y1sdnGykYRt7mddDJIolS9GGLlS/fuAsybArrVb4iW/qrH/+T2xbzkTjrQjztpay KFyker3umem+cwu0KyOBx2jI45BBkrxQcw6omxjRjQxjLEOVjFR6VsCdfSzsycpY YNHbclIjiiofgrtrNSW8xmy1ml/Y8wTkJxmt1X+TqakyjAUxag/JKqb9NwAgG/kG AGG/FPviZAWImBAMmsYNImDxHqG80II25Bt7WOXRAsg3QffxJQGiln038tMvwau/ Y7WjYqVNNmdSJxh8dozoKYu0OkMYG0wIw0sCahcHSuo7fJrrOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI6Bx6lQFv15LQvdmkGL3r9/zMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWMzM2FjOTctZWU0Mi0z MGExLTgxN2ItMWEzNDQxMDJhMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO9uHXmce6AidVrbU8MOz86PJuRk+yPs4CVD3SBzaKiwCbaULKKnZpL aMqC3DWXpWjkgjCUuWHDnkgNPWiBvCoV2IcHt7ByGTyI6jMQkgTJTMsqx2s1PoYe 93MH/KKPCZvJ1xEXRkfh76OEzAgzSHSOx8fXMJ9QUWaLV5lbyZ3A4RZ/gIk3JADF nsLUWUzjBKrHJ2GMW1y2h1CjQ57K9tyu9My5ewfQmylveUX3OygFt8Zz6AfyBbhF gunTWABSkE8GFg8eXA2kUMzy2iHIQPMlVFtLGOLwWkQWVfQVIOASY9qCY/WDIlvR ukcTURGDJRiYZcbmtDWY0AV63jDTZ+o= -----END CERTIFICATE-----Generated at Sat Sep 26 23:37:44 2026 by rpki-client