$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/be27af38-34c9-3234-bdec-a76f7bc7d489.roa File: be27af38-34c9-3234-bdec-a76f7bc7d489.roa (raw, json) Hash identifier: UqxstAbcpFC0izdoXton0uuJsWMlep3//MY1cI0AH0I= Subject key identifier: 1C:9B:D9:FB:7C:48:05:90:F0:E4:9B:C1:7B:6B:84:58:34:DC:88:A1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F23E71A629783CC0FD3028B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/be27af38-34c9-3234-bdec-a76f7bc7d489.roa Signing time: Fri 11 Sep 2026 14:14:23 +0000 ROA not before: Fri 11 Sep 2026 14:14:23 +0000 ROA not after: Thu 10 Dec 2026 15:14:23 +0000 asID: 274022 IP address blocks: 38.247.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:e7:1a:62:97:83:cc:0f:d3:02:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 14:14:23 2026 GMT Not After : Dec 10 15:14:23 2026 GMT Subject: CN=bbb06979-719f-44da-ba41-406d4f377dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:d3:7d:4e:03:bd:86:2a:c6:48:a8:ed:e6: 8f:7f:ca:89:78:22:ba:82:f9:7b:93:87:84:3b:3c: 7e:37:26:20:0c:5b:b5:93:37:fc:54:ef:23:3a:13: 92:25:8c:f4:19:e6:e6:29:62:17:42:ae:fe:c9:3b: f7:3d:be:8b:66:5a:89:da:6a:c7:34:8c:dc:91:ac: 52:d8:06:a3:e0:73:ed:8c:4e:4a:45:92:f5:67:54: 4e:ee:3b:f1:85:db:2b:28:07:81:49:bf:34:41:7c: 10:2f:fb:9d:33:f6:d9:24:02:14:93:43:fd:0c:7b: a7:ea:32:b1:56:48:f7:62:f5:bc:d7:06:41:79:83: aa:58:3b:f9:43:e2:95:f3:11:4d:07:54:d5:29:79: 53:82:90:52:96:8e:09:45:65:f8:96:19:57:37:c6: 27:55:41:5f:43:b7:e4:99:ba:29:90:a3:f2:90:4c: ce:27:bd:20:d6:87:27:d1:12:b9:48:ec:d0:d6:0d: cb:8f:bb:08:d1:e7:8b:81:7b:cd:fe:a5:86:bd:6f: 0c:f7:55:a9:ad:b3:22:2b:59:d9:41:42:ef:c0:9c: 83:e3:2c:0a:b6:38:44:a0:49:1e:5f:99:72:3a:eb: 32:f2:a8:1c:23:51:47:3c:29:21:6f:0c:ef:39:0b: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:D9:FB:7C:48:05:90:F0:E4:9B:C1:7B:6B:84:58:34:DC:88:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/be27af38-34c9-3234-bdec-a76f7bc7d489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.247.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:00:21:f7:fb:6d:04:7c:e3:62:ef:fb:c6:eb:94:1e:6f:d9: c9:c5:bd:0f:1a:db:71:ee:9e:33:dc:06:0c:69:c2:75:45:ed: 1c:2d:50:9f:23:2e:67:22:de:24:cc:f7:92:90:4f:84:6b:f9: ae:06:ff:84:49:67:22:72:77:0c:4a:eb:49:65:5f:bd:8d:0f: 9d:9f:7a:a3:d3:69:bb:86:98:40:a4:59:07:86:6b:62:e9:be: de:30:2a:f0:67:56:b7:1b:94:f3:4f:8a:c5:99:d3:26:ff:9e: 8c:8a:01:d3:c1:c6:c3:86:bc:a7:fb:9b:38:9d:26:87:34:79: 3d:f8:26:17:d3:1f:f7:d5:bc:ca:ed:89:62:92:5e:2c:91:33: e1:27:f8:d8:fb:84:0e:c5:9f:f3:93:ad:87:20:da:99:25:e8: 20:9c:d1:fa:b9:13:ea:b6:2a:9a:4f:af:21:27:91:7e:51:00: d1:d5:e5:4a:5d:ad:32:33:65:4e:fd:80:2b:a9:b9:eb:3f:d4: bb:37:91:77:a6:b0:ae:76:12:7d:81:59:e3:d0:70:8d:e8:89: 10:99:9f:0c:5e:7e:3b:3c:47:f9:75:cc:1a:5b:c2:2c:f7:af: e1:55:02:79:63:d5:5d:fb:de:95:84:aa:aa:37:09:e9:14:b9: 9a:f6:f0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8j5xpil4PMD9MCi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTE0MTQyM1oXDTI2MTIxMDE1MTQyM1owLzEtMCsGA1UEAxMk YmJiMDY5NzktNzE5Zi00NGRhLWJhNDEtNDA2ZDRmMzc3ZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoubTfU4DvYYqxkio7eaPf8qJeCK6gvl7k4eE Ozx+NyYgDFu1kzf8VO8jOhOSJYz0GebmKWIXQq7+yTv3Pb6LZlqJ2mrHNIzckaxS 2Aaj4HPtjE5KRZL1Z1RO7jvxhdsrKAeBSb80QXwQL/udM/bZJAIUk0P9DHun6jKx Vkj3YvW81wZBeYOqWDv5Q+KV8xFNB1TVKXlTgpBSlo4JRWX4lhlXN8YnVUFfQ7fk mbopkKPykEzOJ70g1ocn0RK5SOzQ1g3Lj7sI0eeLgXvN/qWGvW8M91WprbMiK1nZ QULvwJyD4ywKtjhEoEkeX5lyOusy8qgcI1FHPCkhbwzvOQtgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByb2ft8SAWQ8OSbwXtrhFg03IihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmUyN2FmMzgtMzRjOS0z MjM0LWJkZWMtYTc2ZjdiYzdkNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcAIff7bQR842Lv+8brlB5v2cnFvQ8a23HunjPcBgxpwnVF7RwtUJ8j Lmci3iTM95KQT4Rr+a4G/4RJZyJydwxK60llX72ND52feqPTabuGmECkWQeGa2Lp vt4wKvBnVrcblPNPisWZ0yb/noyKAdPBxsOGvKf7mzidJoc0eT34JhfTH/fVvMrt iWKSXiyRM+En+Nj7hA7Fn/OTrYcg2pkl6CCc0fq5E+q2KppPryEnkX5RANHV5Upd rTIzZU79gCupues/1Ls3kXemsK52En2BWePQcI3oiRCZnwxefjs8R/l1zBpbwiz3 r+FVAnlj1V373pWEqqo3CekUuZr28Lc= -----END CERTIFICATE-----Generated at Thu Sep 24 23:13:49 2026 by rpki-client