$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa File: cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa (raw, json) Hash identifier: +36hvhnecxYPaUu+LOhZACl0dOUqS+lYdLAf25ErWuI= Subject key identifier: 8E:A7:84:5D:99:FB:F0:64:4D:56:66:15:3D:0B:92:38:31:58:40:42 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F2D87B631E04E2EC4C4182C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 132925 IP address blocks: 38.130.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b6:31:e0:4e:2e:c4:c4:18:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=59b3319a-1f8a-43e7-8eba-889b13dd0805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:1a:36:92:ad:cd:03:47:f9:5f:1f:37:66: 1e:ed:ba:56:56:43:db:48:27:6b:82:53:95:e7:1c: 26:5c:48:29:29:d8:63:82:38:81:d6:d8:21:b1:3e: cf:77:6d:e1:1a:ae:a1:b9:d7:c3:00:4f:d5:fc:bd: 75:74:47:59:e2:38:b0:00:1e:c9:ec:09:ec:1d:e9: 56:6d:6a:7e:3a:18:46:56:32:98:7f:4a:6f:b1:5d: 48:42:f9:7d:09:f1:c2:a6:a3:41:9d:d3:6c:f7:eb: 5b:36:0e:64:57:75:d2:e2:d2:d9:e8:e7:a7:44:21: da:5e:1e:fd:56:fc:b0:c5:d8:54:e1:5d:c4:f8:f2: da:15:e9:29:65:39:88:0d:2c:07:0a:36:79:eb:05: 4a:5d:39:d9:73:e3:1f:96:b0:24:7c:92:bc:6e:c1: c6:8c:13:ab:c5:ed:79:77:cc:14:f5:36:a4:02:0e: 3d:0b:b1:f1:bb:cd:56:09:4c:18:1a:5f:06:99:d0: b6:ea:30:1f:4a:fa:67:86:ac:d8:7e:5a:22:ab:16: 14:86:01:37:58:92:66:d3:dc:d3:f6:7e:69:21:b5: b0:55:85:92:01:fd:dc:c3:20:c1:2d:53:aa:b3:a6: 53:54:e3:d2:d7:30:d1:6f:7d:6a:a4:7c:72:ee:36: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A7:84:5D:99:FB:F0:64:4D:56:66:15:3D:0B:92:38:31:58:40:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.130.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3e:9d:56:69:de:07:5e:d9:17:cd:5c:bf:9a:ae:a9:57:a0: 99:9d:72:69:9c:af:db:72:4e:29:f6:98:49:b3:4e:11:cb:0a: b4:2f:7d:5e:7c:d4:dc:0f:f4:6c:51:3f:ee:fe:01:fc:1c:9d: 5c:d5:bd:ef:b6:1b:a8:fb:8b:2d:84:de:fc:0c:f1:ba:b6:68: 85:8f:40:11:ed:96:ad:bc:0b:92:cc:e4:3f:05:73:7e:63:c8: 9d:c3:d4:42:59:d4:b2:9c:0b:8a:77:c0:d9:56:1e:1d:6b:3c: 43:7a:75:3f:49:7f:e2:2a:47:d1:d2:ec:28:6f:28:a6:dc:f7: e8:30:35:b1:f7:26:7d:26:62:04:89:4a:90:e1:65:01:b0:7f: 3c:94:ed:47:a3:b5:4e:e9:f8:76:ea:5a:89:12:c7:a7:af:a2: 7f:f5:c8:72:f2:ad:e6:69:78:87:c4:0f:6b:e4:07:1e:82:3e: 11:99:4f:52:35:82:3e:c6:d0:a3:0f:d3:0e:18:a4:0c:16:6a: c8:09:40:79:5b:af:6d:6a:0a:f8:94:8f:2a:2e:52:db:ea:58: b2:12:79:6a:01:8b:bd:41:89:23:28:5b:45:ad:b9:3f:ea:62: 43:ce:b3:47:d7:d8:09:c1:f3:24:dc:a9:94:d5:19:82:b6:34: 89:ee:fb:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7Yx4E4uxMQYLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NTliMzMxOWEtMWY4YS00M2U3LThlYmEtODg5YjEzZGQwODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCcaNpKtzQNH+V8fN2Ye7bpWVkPbSCdrglOV 5xwmXEgpKdhjgjiB1tghsT7Pd23hGq6hudfDAE/V/L11dEdZ4jiwAB7J7AnsHelW bWp+OhhGVjKYf0pvsV1IQvl9CfHCpqNBndNs9+tbNg5kV3XS4tLZ6OenRCHaXh79 VvywxdhU4V3E+PLaFekpZTmIDSwHCjZ56wVKXTnZc+MflrAkfJK8bsHGjBOrxe15 d8wU9TakAg49C7Hxu81WCUwYGl8GmdC26jAfSvpnhqzYfloiqxYUhgE3WJJm09zT 9n5pIbWwVYWSAf3cwyDBLVOqs6ZTVOPS1zDRb31qpHxy7jYV8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6nhF2Z+/BkTVZmFT0LkjgxWEBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2JjNGQ5NmEtMGU1Yi0z NWJlLTg5ZmUtMDg1N2VmMGU3YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJoL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI+nVZp3gde2RfNXL+arqlXoJmdcmmcr9tyTin2mEmzThHLCrQvfV58 1NwP9GxRP+7+AfwcnVzVve+2G6j7iy2E3vwM8bq2aIWPQBHtlq28C5LM5D8Fc35j yJ3D1EJZ1LKcC4p3wNlWHh1rPEN6dT9Jf+IqR9HS7ChvKKbc9+gwNbH3Jn0mYgSJ SpDhZQGwfzyU7UejtU7p+HbqWokSx6evon/1yHLyreZpeIfED2vkBx6CPhGZT1I1 gj7G0KMP0w4YpAwWasgJQHlbr21qCviUjyouUtvqWLISeWoBi71BiSMoW0WtuT/q YkPOs0fX2AnB8yTcqZTVGYK2NInu+/s= -----END CERTIFICATE-----Generated at Tue Sep 22 10:59:51 2026 by rpki-client