$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa File: bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa (raw, json) Hash identifier: 6BeBS6sRrzbfGqBmATMSWIfj3UawVJqqITxsBI2KEJo= Subject key identifier: 9A:CA:5E:B1:00:A6:2D:2A:31:1F:83:17:6B:71:C3:A4:70:37:A3:30 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3B7D24123DA12310063DC780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 212337 IP address blocks: 38.224.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:24:12:3d:a1:23:10:06:3d:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=5ae2a258-8509-4484-b626-fba64d65a7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:90:2c:88:a9:3d:5a:be:90:fe:6c:34:52: 10:b0:22:7a:35:88:cc:c7:f9:68:b9:a4:e7:7f:4c: ba:af:4a:dc:9a:90:1a:6d:d7:5d:eb:f7:52:7d:94: 0a:59:6b:78:78:fb:23:71:0e:3b:f8:2a:8d:40:19: 5f:87:c5:bc:fe:e0:57:bc:f5:6f:e1:99:c2:26:4f: 24:26:ca:79:cf:61:71:32:7b:0d:3f:ca:9c:a5:8a: 90:e7:0b:27:ac:6f:ae:b7:fe:38:b1:03:04:9b:74: fd:da:39:43:b9:98:1b:f9:b6:68:db:bd:0f:11:5e: 6b:97:a8:e8:df:a6:fe:8d:2c:c7:f9:a2:25:6b:b4: 88:28:8e:27:0e:ba:4c:01:9b:0a:7e:c7:bc:e8:69: 1e:be:d3:31:f9:9f:83:67:ee:6e:44:45:d9:a5:7f: da:fc:cb:b0:b9:41:bd:88:65:dd:58:8b:88:fc:49: 86:59:6c:f7:0f:1a:df:59:90:eb:fc:2f:ab:94:36: 1d:ee:75:c1:02:94:43:74:ae:45:35:9f:e5:9a:84: 85:c0:46:be:4b:93:fb:f3:82:28:13:60:a1:d2:3b: f8:83:4c:12:6e:a9:9e:f2:eb:cf:b9:24:01:29:ed: bc:48:9a:39:4a:27:e1:a0:a9:7b:c4:c6:a3:2c:b9: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:5E:B1:00:A6:2D:2A:31:1F:83:17:6B:71:C3:A4:70:37:A3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:b8:bc:47:27:58:20:72:aa:8f:3f:a5:3b:1f:3a:ce:c3:17: c7:a1:6c:f7:62:96:14:7c:f2:e7:a1:56:32:c7:94:48:ca:ce: c6:a2:e9:a6:93:b6:64:a3:30:0d:e6:19:c8:00:16:7c:a3:10: 20:b7:49:df:a6:97:9d:b1:dc:5a:4d:f0:74:1a:6f:68:a1:f5: 41:33:ba:86:46:8d:21:ee:93:f2:73:82:9c:27:a6:64:60:f3: 26:71:61:51:11:f9:c5:20:7d:23:59:14:a7:50:6a:51:b0:07: 91:97:5a:6c:f3:cb:1f:b8:54:a4:8d:34:e9:e9:dd:22:0a:d3: ad:86:1d:cc:b1:81:f0:78:98:52:a2:58:60:e6:79:da:dc:8a: d1:87:86:d8:dd:e6:6f:e6:0c:43:6f:72:e1:84:c4:e0:fd:64: a7:aa:e1:7a:ec:10:fe:aa:50:7c:94:37:a9:de:77:ee:20:48: c8:ca:62:4e:82:d8:1a:7b:ec:58:d4:8c:ee:61:38:c1:14:a9: c0:54:fb:f8:90:fb:82:e3:bf:5b:92:be:88:91:62:5a:ff:7f: d2:cb:ce:57:ad:e5:16:c2:f8:4e:d6:77:25:ce:f7:ce:c9:02: 89:5d:77:2a:2f:de:f6:72:76:48:62:19:b7:4c:9a:06:b0:39: 88:56:a4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSQSPaEjEAY9x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NWFlMmEyNTgtODUwOS00NDg0LWI2MjYtZmJhNjRkNjVhN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhyQLIipPVq+kP5sNFIQsCJ6NYjMx/louaTn f0y6r0rcmpAabddd6/dSfZQKWWt4ePsjcQ47+CqNQBlfh8W8/uBXvPVv4ZnCJk8k Jsp5z2FxMnsNP8qcpYqQ5wsnrG+ut/44sQMEm3T92jlDuZgb+bZo270PEV5rl6jo 36b+jSzH+aIla7SIKI4nDrpMAZsKfse86GkevtMx+Z+DZ+5uREXZpX/a/MuwuUG9 iGXdWIuI/EmGWWz3DxrfWZDr/C+rlDYd7nXBApRDdK5FNZ/lmoSFwEa+S5P784Io E2Ch0jv4g0wSbqme8uvPuSQBKe28SJo5SifhoKl7xMajLLk5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrKXrEApi0qMR+DF2txw6RwN6MwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmI0ODg2NGQtNDdiMi0z N2RlLThkNmEtZjZmOTNkZDVhN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMe4vEcnWCByqo8/pTsfOs7DF8ehbPdilhR88uehVjLHlEjKzsai6aaT tmSjMA3mGcgAFnyjECC3Sd+ml52x3FpN8HQab2ih9UEzuoZGjSHuk/JzgpwnpmRg 8yZxYVER+cUgfSNZFKdQalGwB5GXWmzzyx+4VKSNNOnp3SIK062GHcyxgfB4mFKi WGDmedrcitGHhtjd5m/mDENvcuGExOD9ZKeq4XrsEP6qUHyUN6ned+4gSMjKYk6C 2Bp77FjUjO5hOMEUqcBU+/iQ+4Ljv1uSvoiRYlr/f9LLzlet5RbC+E7WdyXO987J Aolddyov3vZydkhiGbdMmgawOYhWpEk= -----END CERTIFICATE-----Generated at Mon Sep 21 21:42:54 2026 by rpki-client