$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa File: cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa (raw, json) Hash identifier: Ol3hUdAePYTbZcDH0rCHR3YXCETdkNNFBWUXvCCjvoA= Subject key identifier: 8F:61:13:B8:56:15:F1:8E:E1:42:4D:49:5F:47:3F:04:B3:A9:A5:64 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4988E9CB2E27C4FC0597E870 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 271996 IP address blocks: 38.100.158.0/23 maxlen: 24 38.158.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:e9:cb:2e:27:c4:fc:05:97:e8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8fd2a76-e79e-474c-86e9-e52e84ad5547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:29:68:51:d9:d7:75:f5:55:a3:0f:59:21: f2:e8:45:6c:7e:09:9c:3b:77:3f:03:3b:66:0a:bc: 5d:4a:9b:93:bb:7b:3c:d5:2c:18:91:2c:bf:d8:28: bd:b9:20:6c:57:4c:0b:bd:32:e0:99:28:51:8d:94: 94:37:e1:70:46:47:d7:bc:8d:fb:cf:3d:85:95:09: eb:06:c8:2b:e7:aa:c3:a5:77:8e:67:50:83:bc:da: 92:1f:29:dd:45:05:7f:79:8f:b9:a2:ad:22:23:31: 04:1e:54:53:48:56:fa:21:ee:c0:89:1e:2e:84:b4: db:58:84:80:60:ca:f7:6d:ae:bf:01:77:34:8e:85: 87:6e:6c:af:c3:7c:e6:08:76:aa:b0:8f:f5:80:89: 17:89:09:c0:fe:0e:7c:0d:a1:3c:70:c9:32:4f:17: 20:cb:12:cb:9d:cb:00:58:b2:ff:37:0a:53:17:24: 00:de:07:9e:b5:e5:f3:53:d9:33:1c:7c:9a:19:f9: aa:ba:74:b8:4f:52:59:62:11:ea:b2:ab:fe:a7:38: 05:09:69:22:99:e9:4d:16:b0:8e:62:55:df:dc:9c: ce:a1:63:11:9a:ae:e5:b9:b2:fd:98:4e:82:48:55: c8:fd:98:42:ec:85:86:8d:ac:cb:75:93:26:a0:20: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:61:13:B8:56:15:F1:8E:E1:42:4D:49:5F:47:3F:04:B3:A9:A5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.100.158.0/23 38.158.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:e7:d8:b5:a1:a7:9a:df:4b:47:9a:dd:4f:0d:9b:a4:c5:8c: 8f:ea:de:20:fe:5b:97:d8:c2:8b:98:19:27:b3:4e:64:2f:9f: 6a:52:e0:9b:fa:30:b2:29:f5:47:d6:69:37:f4:41:7c:0a:ca: f1:14:28:a4:d2:5c:0f:f1:d5:24:dc:4b:7f:3d:ba:60:70:35: 33:0a:08:50:8d:db:7e:05:14:39:ea:e7:43:3e:d1:40:1c:df: 12:99:63:e6:d9:58:74:f5:2a:df:d6:cc:90:55:8f:85:4c:76: 16:5c:33:14:f8:74:6d:af:69:9b:82:17:e1:11:ba:38:38:48: a8:09:e6:52:40:37:3d:0a:80:aa:fc:af:98:48:54:9a:bd:28: b1:f3:4d:98:b1:92:70:b5:db:cc:d5:88:e5:71:80:d6:0a:67: 90:18:cb:8e:d2:ae:0f:3c:c4:2d:83:cd:c5:36:b3:1b:e7:4a: 11:6b:78:44:2d:be:9a:ea:9c:a1:68:f7:b9:73:9d:34:9f:18: 35:0b:45:85:3d:9a:d9:2a:64:df:bc:1a:b4:22:d6:12:be:79: 7f:ef:f2:bb:ce:8d:c0:c9:b7:d4:66:36:35:35:9b:de:0f:37: 94:bb:5c:22:10:1d:8c:17:a9:bc:40:c4:cd:a5:2f:70:81:14: 80:c2:df:4b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JiOnLLifE/AWX6HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThmZDJhNzYtZTc5ZS00NzRjLTg2ZTktZTUyZTg0YWQ1NTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso0paFHZ13X1VaMPWSHy6EVsfgmcO3c/Aztm CrxdSpuTu3s81SwYkSy/2Ci9uSBsV0wLvTLgmShRjZSUN+FwRkfXvI37zz2FlQnr Bsgr56rDpXeOZ1CDvNqSHyndRQV/eY+5oq0iIzEEHlRTSFb6Ie7AiR4uhLTbWISA YMr3ba6/AXc0joWHbmyvw3zmCHaqsI/1gIkXiQnA/g58DaE8cMkyTxcgyxLLncsA WLL/NwpTFyQA3geeteXzU9kzHHyaGfmqunS4T1JZYhHqsqv+pzgFCWkimelNFrCO YlXf3JzOoWMRmq7lubL9mE6CSFXI/ZhC7IWGjazLdZMmoCCcmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI9hE7hWFfGO4UJNSV9HPwSzqaVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2RmNDA1ZTgtNjQyNS0z YTVhLTliMWEtMmE2M2MzZjk1ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJmSeAwQB Jp7IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMzn2LWhp5rfS0ea3U8Nm6TFjI/q3iD+W5fYwouYGSezTmQv n2pS4Jv6MLIp9UfWaTf0QXwKyvEUKKTSXA/x1STcS389umBwNTMKCFCN234FFDnq 50M+0UAc3xKZY+bZWHT1Kt/WzJBVj4VMdhZcMxT4dG2vaZuCF+ERujg4SKgJ5lJA Nz0KgKr8r5hIVJq9KLHzTZixknC128zViOVxgNYKZ5AYy47Srg88xC2DzcU2sxvn ShFreEQtvprqnKFo97lznTSfGDULRYU9mtkqZN+8GrQi1hK+eX/v8rvOjcDJt9Rm NjU1m94PN5S7XCIQHYwXqbxAxM2lL3CBFIDC30s= -----END CERTIFICATE-----Generated at Fri Sep 25 10:01:53 2026 by rpki-client