$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ced324db-e30f-3b76-9a23-65871e129ffe.roa File: ced324db-e30f-3b76-9a23-65871e129ffe.roa (raw, json) Hash identifier: 8sT7hxxXUMG3M1UFt36RZ/0kWAZCbdxiGpcUHOTYqCI= Subject key identifier: 72:81:2C:DA:5F:92:43:88:12:C3:AD:A3:46:FF:D9:FF:BF:D2:FC:71 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F497498CB1C0EBFDD9224BC80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ced324db-e30f-3b76-9a23-65871e129ffe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 273125 IP address blocks: 38.253.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:98:cb:1c:0e:bf:dd:92:24:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=45c96226-5480-456a-99c8-388b175ce0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:06:80:ed:1d:b2:25:dd:7a:f5:b7:ff:84: f5:4b:7c:66:6a:dd:c0:fb:db:78:70:b0:81:3b:6f: e9:b5:6b:9f:78:c7:80:d8:59:cf:d6:ed:95:37:b2: c4:7f:83:8c:d5:97:c6:00:6e:30:aa:44:7a:72:a1: 40:36:99:43:c0:75:32:13:5f:9c:b7:80:6f:d6:27: d6:a8:45:c4:8f:f2:2f:ac:44:56:79:63:48:f7:cc: e0:23:28:fa:05:7e:9f:69:36:62:3b:d5:17:7f:0f: 8f:06:65:0c:21:c2:fd:63:02:c4:04:da:58:b2:60: 53:85:8f:28:b0:bb:fb:cb:d6:c5:8f:6a:1d:16:68: 96:5f:14:e4:9a:71:44:e7:e8:67:ec:c1:0f:66:79: 2d:46:67:96:e2:ad:7f:d9:43:ac:13:03:d3:ef:d2: 3e:17:59:a6:b3:ba:82:8f:ec:a1:5f:96:7c:87:79: cc:ec:a2:80:b1:91:25:9a:c3:5d:08:33:c0:3b:d5: cf:6a:b5:2d:2b:b2:0e:75:98:41:bf:a9:96:d2:62: e0:e2:45:76:51:32:5a:0c:99:e2:9e:9d:78:a7:ba: 84:a2:fa:65:31:15:b1:f0:7d:a8:c4:f0:96:78:a6: fb:f0:dd:07:f3:08:41:fe:a0:32:ea:a9:f1:58:bc: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:2C:DA:5F:92:43:88:12:C3:AD:A3:46:FF:D9:FF:BF:D2:FC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ced324db-e30f-3b76-9a23-65871e129ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:ea:9b:56:e1:d2:4a:b7:77:39:32:64:21:a3:5f:16:ad:b3: ae:bd:15:f7:2c:b4:18:93:b5:33:c8:9a:2e:f9:ab:69:b7:8f: fd:4b:5b:7e:a9:d2:de:9d:06:e1:5a:84:f7:e7:7f:0b:88:a6: c8:b8:89:00:a3:d3:bd:6e:19:db:70:dc:b4:cf:59:d6:b2:c9: 79:d5:a8:ec:d9:ee:0e:a1:59:e1:ba:c6:4e:35:b2:fc:c5:13: 75:05:b0:46:2b:9a:0d:3a:75:a1:8a:6c:96:c3:d6:2e:76:7a: d2:76:d6:cd:36:91:c6:a8:db:7b:1e:57:14:40:83:0f:ce:ee: d4:19:1b:bc:5b:e0:0c:ee:c0:1d:75:fe:85:da:18:06:b4:70: 94:13:4d:53:c9:4e:ab:aa:81:2c:4f:49:b8:c7:cf:9f:46:99: 87:e6:91:da:05:20:99:12:e4:f3:7c:f2:04:36:3e:c1:2e:b0: 38:96:3c:2f:7d:67:d8:0b:77:f5:85:42:c2:08:85:a9:2c:8c: 6f:e3:86:27:8d:9f:e1:f3:c4:0f:66:ff:79:13:7f:c0:c8:46: 49:bc:5e:90:9f:77:5b:58:2c:8d:bb:5b:73:18:58:6c:18:4b: c1:08:fb:52:23:4e:0f:e9:1c:18:b6:19:4a:35:3d:94:8c:37: 9e:5d:42:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJjLHA6/3ZIkvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDVjOTYyMjYtNTQ4MC00NTZhLTk5YzgtMzg4YjE3NWNlMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrgGgO0dsiXdevW3/4T1S3xmat3A+9t4cLCB O2/ptWufeMeA2FnP1u2VN7LEf4OM1ZfGAG4wqkR6cqFANplDwHUyE1+ct4Bv1ifW qEXEj/IvrERWeWNI98zgIyj6BX6faTZiO9UXfw+PBmUMIcL9YwLEBNpYsmBThY8o sLv7y9bFj2odFmiWXxTkmnFE5+hn7MEPZnktRmeW4q1/2UOsEwPT79I+F1mms7qC j+yhX5Z8h3nM7KKAsZElmsNdCDPAO9XParUtK7IOdZhBv6mW0mLg4kV2UTJaDJni np14p7qEovplMRWx8H2oxPCWeKb78N0H8whB/qAy6qnxWLyN1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKBLNpfkkOIEsOto0b/2f+/0vxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2VkMzI0ZGItZTMwZi0z Yjc2LTlhMjMtNjU4NzFlMTI5ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTqm1bh0kq3dzkyZCGjXxats669FfcstBiTtTPImi75q2m3j/1LW36p 0t6dBuFahPfnfwuIpsi4iQCj071uGdtw3LTPWdayyXnVqOzZ7g6hWeG6xk41svzF E3UFsEYrmg06daGKbJbD1i52etJ21s02kcao23seVxRAgw/O7tQZG7xb4AzuwB11 /oXaGAa0cJQTTVPJTquqgSxPSbjHz59GmYfmkdoFIJkS5PN88gQ2PsEusDiWPC99 Z9gLd/WFQsIIhaksjG/jhieNn+HzxA9m/3kTf8DIRkm8XpCfd1tYLI27W3MYWGwY S8EI+1IjTg/pHBi2GUo1PZSMN55dQhM= -----END CERTIFICATE-----Generated at Fri Sep 25 21:42:14 2026 by rpki-client