$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b9f8ce3d-4100-36a7-8c44-7b6977393fba.roa File: b9f8ce3d-4100-36a7-8c44-7b6977393fba.roa (raw, json) Hash identifier: DdRj0RSG1Sa/090YfWaPOjXxbLyno8NY8kEYXD25RBY= Subject key identifier: 86:80:02:00:E2:C6:7B:D4:BE:8A:41:7C:BA:59:04:33:49:03:27:19 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F23C28378A1888C3B079CF900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b9f8ce3d-4100-36a7-8c44-7b6977393fba.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 38758 IP address blocks: 38.130.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:83:78:a1:88:8c:3b:07:9c:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=8c6d5ca5-aee6-43df-91a8-db9f9b0d5085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:f2:63:c3:87:ab:93:5e:68:d8:4b:b4:22: 65:40:3d:32:74:98:e7:ad:5c:2d:57:a8:9f:bd:af: 16:21:0c:64:06:81:26:9d:12:fc:f4:b8:00:a0:6c: 63:85:ca:2b:1b:11:d5:fd:6d:95:1f:f8:11:2a:d9: ad:cd:6a:3c:93:0a:08:da:ef:f7:00:be:97:57:3b: 56:3e:4e:49:e4:08:9e:f2:0c:d3:04:eb:f7:54:45: dd:f3:9a:5a:04:29:12:69:a9:88:70:f1:99:47:33: 59:ed:f1:07:0a:1c:c4:b8:07:c6:87:ad:0b:c8:d7: e3:6a:d1:0f:fe:11:55:76:34:44:66:bf:50:86:10: ae:75:81:da:6b:9e:9f:e0:37:1c:6e:ac:dd:0d:b7: 7e:86:b3:c5:1b:5d:da:70:a8:61:55:64:cd:e1:9f: ac:de:d9:37:08:91:67:26:4e:e1:cc:a8:2e:b3:df: 04:6a:3d:e1:61:58:44:b2:47:93:be:97:4d:fe:40: c5:9a:dd:11:89:3a:ad:ca:6f:26:6a:d4:a5:66:ab: e7:18:e4:95:b2:f4:e0:b1:17:d5:f3:3e:06:dc:c4: cd:63:0f:05:60:21:33:24:cf:79:3f:7a:ae:f8:8b: 22:9d:55:be:df:de:72:4d:97:67:01:bd:bc:1a:1d: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:80:02:00:E2:C6:7B:D4:BE:8A:41:7C:BA:59:04:33:49:03:27:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b9f8ce3d-4100-36a7-8c44-7b6977393fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.130.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ef:a0:a4:02:eb:67:e2:ce:b5:d5:27:e7:ea:c5:a7:8f:78: bb:01:5c:7b:bf:f6:94:ca:83:9b:a0:d0:a0:e6:6c:24:59:9b: cd:37:a6:2b:df:95:c8:39:3b:88:4d:c2:05:35:74:7b:41:bd: 89:f9:34:4a:b2:26:e3:76:ee:dc:72:bc:7c:f9:53:6f:f8:0d: 71:58:72:80:6a:c3:1f:db:68:0b:ca:57:50:7c:ca:11:fd:25: e8:f5:9a:1b:c7:5d:f1:0f:91:a8:88:18:e1:98:0b:03:da:59: 06:29:33:5f:e1:b5:a0:e5:53:7c:59:44:f7:97:4b:c2:d2:9d: ed:11:cf:4b:09:61:bc:28:7e:01:2e:50:d4:0c:f2:14:8d:69: 17:78:9a:ca:c3:3a:d3:2b:0f:80:05:5b:cf:00:a9:d4:29:df: a4:7c:a5:83:71:29:63:7e:57:c5:7d:f8:a5:30:8e:ef:20:03: 2e:d7:a0:61:c1:9e:f1:38:1f:20:f9:10:71:b3:3c:b8:f2:02: 95:bb:0e:62:9c:3a:fd:25:9a:21:12:2d:d9:a8:d6:1a:13:33: 39:a2:37:f9:14:39:7d:87:5e:38:0c:73:bb:10:8b:3a:f6:45: 0f:3c:8f:e6:16:82:3a:de:cb:33:53:49:6b:70:ae:25:ce:1d: 3c:dc:48:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwoN4oYiMOwec+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OGM2ZDVjYTUtYWVlNi00M2RmLTkxYTgtZGI5ZjliMGQ1MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5vyY8OHq5NeaNhLtCJlQD0ydJjnrVwtV6if va8WIQxkBoEmnRL89LgAoGxjhcorGxHV/W2VH/gRKtmtzWo8kwoI2u/3AL6XVztW Pk5J5Aie8gzTBOv3VEXd85paBCkSaamIcPGZRzNZ7fEHChzEuAfGh60LyNfjatEP /hFVdjREZr9QhhCudYHaa56f4DccbqzdDbd+hrPFG13acKhhVWTN4Z+s3tk3CJFn Jk7hzKgus98Eaj3hYVhEskeTvpdN/kDFmt0RiTqtym8matSlZqvnGOSVsvTgsRfV 8z4G3MTNYw8FYCEzJM95P3qu+IsinVW+395yTZdnAb28Gh1HqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaAAgDixnvUvopBfLpZBDNJAycZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjlmOGNlM2QtNDEwMC0z NmE3LThjNDQtN2I2OTc3MzkzZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJoJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzvoKQC62fizrXVJ+fqxaePeLsBXHu/9pTKg5ug0KDmbCRZm803pivf lcg5O4hNwgU1dHtBvYn5NEqyJuN27txyvHz5U2/4DXFYcoBqwx/baAvKV1B8yhH9 Jej1mhvHXfEPkaiIGOGYCwPaWQYpM1/htaDlU3xZRPeXS8LSne0Rz0sJYbwofgEu UNQM8hSNaRd4msrDOtMrD4AFW88AqdQp36R8pYNxKWN+V8V9+KUwju8gAy7XoGHB nvE4HyD5EHGzPLjyApW7DmKcOv0lmiESLdmo1hoTMzmiN/kUOX2HXjgMc7sQizr2 RQ88j+YWgjreyzNTSWtwriXOHTzcSNI= -----END CERTIFICATE-----Generated at Sun Sep 20 20:15:49 2026 by rpki-client