$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5d5419d-eabd-30b0-9061-8ff170a8dcfa.roa File: c5d5419d-eabd-30b0-9061-8ff170a8dcfa.roa (raw, json) Hash identifier: Bh4F2wWhnllZ603ZR2eyMYRoO2N9efFSUc8EgEgGCXY= Subject key identifier: 70:12:68:8A:86:5A:E0:AC:C4:E9:12:63:70:59:92:B1:A2:4F:E0:7B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3223E9AC7F614AECF30EEA80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5d5419d-eabd-30b0-9061-8ff170a8dcfa.roa Signing time: Wed 16 Sep 2026 16:38:14 +0000 ROA not before: Wed 16 Sep 2026 16:38:14 +0000 ROA not after: Tue 15 Dec 2026 17:38:14 +0000 asID: 13335 IP address blocks: 38.82.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:23:e9:ac:7f:61:4a:ec:f3:0e:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 16 16:38:14 2026 GMT Not After : Dec 15 17:38:14 2026 GMT Subject: CN=68ffa03b-482e-4cb2-a16e-2313317d5fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:11:0e:90:94:6c:63:e8:12:d3:a5:8e:fa: da:d2:e1:5e:84:85:a3:bf:13:dd:2c:ca:57:63:5e: 54:24:3f:aa:2e:81:dd:13:0c:1f:8b:b1:87:d4:5d: c3:b4:d0:fc:37:66:97:7d:f8:0f:f9:dd:4d:68:22: ab:3f:fd:73:24:0e:77:8c:b2:ac:2c:e1:e0:d1:f8: 5e:d2:c9:3a:ac:db:e3:34:e1:21:1d:8d:ff:0e:c2: d7:ae:04:46:e9:7f:03:2d:00:65:1d:b0:a7:88:9d: ec:54:de:ed:68:98:fa:8e:fe:6f:ee:22:9a:40:49: 32:c4:65:ec:63:78:25:b4:ce:ea:b0:cd:90:fc:2c: e8:2c:d9:8e:4b:d7:4d:5a:a1:d4:dc:ae:09:85:8c: 69:90:4b:48:c4:e3:60:e5:0d:8b:b5:f9:7f:a0:09: 99:95:3b:8e:05:ba:5d:8c:bb:fc:df:f5:5e:a4:46: 1e:57:19:57:07:40:14:3b:3a:d0:f2:03:11:48:0d: 0b:21:dc:e8:71:d9:bb:77:e3:72:6e:3a:f7:e3:70: 35:bb:40:74:f0:7a:5e:8f:39:76:7c:01:25:42:47: 86:df:31:df:8d:07:6e:9c:5e:e0:82:c7:23:c2:ff: 02:a0:b8:fd:06:d5:41:a9:03:94:10:a4:4a:e4:24: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:68:8A:86:5A:E0:AC:C4:E9:12:63:70:59:92:B1:A2:4F:E0:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5d5419d-eabd-30b0-9061-8ff170a8dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.82.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:9a:70:37:86:41:5e:49:64:84:a7:49:6e:45:4d:16:cb:d1: 64:06:70:86:be:15:b9:43:88:13:ce:da:a8:f0:a7:c5:2a:f6: eb:ee:03:61:b0:dc:30:19:c8:d3:c3:9f:87:9f:37:58:28:30: 61:0e:3d:51:9f:58:6c:36:f8:79:d5:8b:81:a7:b8:b9:7c:17: 28:27:70:2f:f0:e3:c6:59:5e:fb:fe:97:62:72:e7:94:4d:30: 79:ac:47:4f:47:4e:cb:3c:67:68:8b:13:e6:f6:12:5f:94:fd: ea:c8:7b:5b:93:7a:46:1b:4d:dd:aa:60:a8:d6:30:0b:7a:9c: 81:b2:96:bd:aa:0f:f1:e8:82:c3:97:30:ce:37:8d:f4:94:f7: 53:b9:d4:cc:fd:fc:98:c3:da:fc:f8:19:0b:ac:7d:59:e2:dd: ab:ff:9c:3b:3e:5a:cf:9c:52:1b:60:77:2b:2d:fe:5a:26:79: b6:2d:8e:00:8d:53:f7:d9:27:ba:5b:5d:60:53:ed:c8:d4:cb: 7b:15:8c:36:b9:dd:87:1b:eb:ab:04:fd:4b:82:2d:92:6a:08: 58:6f:33:15:e4:17:93:99:54:bd:12:86:92:c8:7b:91:fb:40: 30:ab:34:ca:c8:5e:63:30:ed:62:64:48:33:42:ff:19:b5:57: 55:f5:58:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8yI+msf2FK7PMO6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNjE2MzgxNFoXDTI2MTIxNTE3MzgxNFowLzEtMCsGA1UEAxMk NjhmZmEwM2ItNDgyZS00Y2IyLWExNmUtMjMxMzMxN2Q1ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLMRDpCUbGPoEtOljvra0uFehIWjvxPdLMpX Y15UJD+qLoHdEwwfi7GH1F3DtND8N2aXffgP+d1NaCKrP/1zJA53jLKsLOHg0fhe 0sk6rNvjNOEhHY3/DsLXrgRG6X8DLQBlHbCniJ3sVN7taJj6jv5v7iKaQEkyxGXs Y3gltM7qsM2Q/CzoLNmOS9dNWqHU3K4JhYxpkEtIxONg5Q2Ltfl/oAmZlTuOBbpd jLv83/VepEYeVxlXB0AUOzrQ8gMRSA0LIdzocdm7d+Nybjr343A1u0B08Hpejzl2 fAElQkeG3zHfjQdunF7ggscjwv8CoLj9BtVBqQOUEKRK5CSE8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHASaIqGWuCsxOkSY3BZkrGiT+B7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzVkNTQxOWQtZWFiZC0z MGIwLTkwNjEtOGZmMTcwYThkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJlIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqacDeGQV5JZISnSW5FTRbL0WQGcIa+FblDiBPO2qjwp8Uq9uvuA2Gw 3DAZyNPDn4efN1goMGEOPVGfWGw2+HnVi4GnuLl8FygncC/w48ZZXvv+l2Jy55RN MHmsR09HTss8Z2iLE+b2El+U/erIe1uTekYbTd2qYKjWMAt6nIGylr2qD/HogsOX MM43jfSU91O51Mz9/JjD2vz4GQusfVni3av/nDs+Ws+cUhtgdyst/lomebYtjgCN U/fZJ7pbXWBT7cjUy3sVjDa53Ycb66sE/UuCLZJqCFhvMxXkF5OZVL0ShpLIe5H7 QDCrNMrIXmMw7WJkSDNC/xm1V1X1WJw= -----END CERTIFICATE-----Generated at Mon Sep 21 10:51:53 2026 by rpki-client