$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa File: d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa (raw, json) Hash identifier: WbJGmr0dOAuWO0+2FkuWRg1gFAQ8NP0BtSiTESDgqKw= Subject key identifier: FB:CD:76:54:85:0F:B8:E7:5C:FE:DA:B6:1E:13:07:37:F8:8D:99:74 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F38B2742F93F11EC5D479F080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa Signing time: Sat 19 Sep 2026 01:00:12 +0000 ROA not before: Sat 19 Sep 2026 01:00:12 +0000 ROA not after: Fri 18 Dec 2026 02:00:12 +0000 asID: 53863 IP address blocks: 38.69.208.0/21 maxlen: 21 38.108.72.0/23 maxlen: 23 38.128.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:b2:74:2f:93:f1:1e:c5:d4:79:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 19 01:00:12 2026 GMT Not After : Dec 18 02:00:12 2026 GMT Subject: CN=ee4a2a16-fa40-43bc-8a26-d766fb9537c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:53:58:94:a4:08:35:c4:d4:c0:28:96:a2: f1:21:ea:ee:d5:54:b9:04:aa:3b:8c:1d:3c:d0:01: 66:5f:ce:85:92:21:b6:b6:ff:0c:84:e2:2c:47:4f: 08:01:a1:97:23:35:e1:3b:21:d2:c2:fb:d2:60:93: b5:92:2b:21:a7:3a:b4:98:d7:27:76:fc:6a:b3:60: fc:08:d5:15:78:9a:e4:9c:ae:d4:01:f8:61:30:03: f1:42:92:14:83:1b:86:d1:6f:f2:b0:cb:c3:9e:24: 29:bb:3a:08:3f:c5:0d:71:de:e6:98:1c:9e:ad:40: 12:a5:a9:94:0b:bc:5f:2f:7d:b9:16:e5:b1:4f:9b: ae:bd:1a:d9:f2:30:e6:e0:eb:59:c6:38:a9:80:dc: 89:94:e7:7e:bf:62:6f:43:ad:bd:01:b8:91:33:e4: e9:fa:4a:c5:95:41:48:29:ee:06:6c:30:41:1a:92: 02:4f:5e:b1:5f:6f:15:89:9c:bf:d1:4a:2e:3f:6c: cd:6e:b5:e2:ce:6f:d5:e5:e4:4b:e8:bb:6c:69:93: 26:29:a3:63:18:74:b3:c5:3a:91:95:60:35:bb:b0: 0d:dd:0d:ec:cb:23:88:6d:dd:b9:6b:1d:c2:1f:c0: d5:2f:cc:ac:f7:30:15:53:0b:49:c6:a9:f5:08:b1: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CD:76:54:85:0F:B8:E7:5C:FE:DA:B6:1E:13:07:37:F8:8D:99:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.69.208.0/21 38.108.72.0/23 38.128.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ef:c5:6e:ea:22:c6:2d:63:b4:05:dd:0f:4b:40:f3:1d:86: d8:b3:1e:c4:b1:a5:44:6b:b0:99:e5:ae:21:bf:07:0f:84:c9: 3d:11:11:f5:8b:c7:44:8f:5f:27:5d:b0:4d:dd:a1:3c:8d:ab: 1a:eb:44:f5:11:a2:24:e6:ec:82:87:79:26:0f:bc:2f:a6:c2: 2a:b5:76:52:76:19:3b:d4:31:6b:98:c3:1c:0f:62:de:06:86: 5e:fa:c4:50:1e:ad:a2:04:0a:c8:27:d0:21:20:40:38:b6:9a: bb:d0:0c:d0:70:ef:b0:1d:98:be:9a:db:b7:ae:06:fe:ff:ab: ec:09:6a:9f:4c:68:64:13:a7:15:f6:c7:35:c4:f5:71:99:71: 8b:55:7c:97:f7:71:20:01:3c:a5:3f:77:7d:a0:77:51:31:1c: 32:0f:d0:b5:72:6c:e9:c4:73:78:2f:2b:45:c3:67:09:f3:2f: 2b:dc:3e:3e:db:18:25:70:fb:e0:83:21:40:79:b7:74:ff:0e: 14:88:34:86:ec:c1:a5:16:d6:da:1b:5b:31:ba:5c:cf:62:0a: 9f:17:6c:ca:aa:01:95:e8:cf:9a:7d:00:ff:11:4b:d5:bf:2a: c8:b0:e5:50:97:52:78:06:2f:f8:2e:5f:d6:50:5a:8f:26:f6: c9:e8:ef:85 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE84snQvk/EexdR58IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk ZWU0YTJhMTYtZmE0MC00M2JjLThhMjYtZDc2NmZiOTUzN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n1TWJSkCDXE1MAolqLxIeru1VS5BKo7jB08 0AFmX86FkiG2tv8MhOIsR08IAaGXIzXhOyHSwvvSYJO1kishpzq0mNcndvxqs2D8 CNUVeJrknK7UAfhhMAPxQpIUgxuG0W/ysMvDniQpuzoIP8UNcd7mmByerUASpamU C7xfL325FuWxT5uuvRrZ8jDm4OtZxjipgNyJlOd+v2JvQ629AbiRM+Tp+krFlUFI Ke4GbDBBGpICT16xX28ViZy/0UouP2zNbrXizm/V5eRL6LtsaZMmKaNjGHSzxTqR lWA1u7AN3Q3syyOIbd25ax3CH8DVL8ys9zAVUwtJxqn1CLGcQwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPvNdlSFD7jnXP7ath4TBzf4jZl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDc1NWFhOTQtYTk2OC0z NmY0LWFmZDctZDFhMGQ5NGYyMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJkXQAwQB JmxIAwQBJoDuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABTvxW7qIsYtY7QF3Q9LQPMdhtizHsSxpURrsJnl riG/Bw+EyT0REfWLx0SPXyddsE3doTyNqxrrRPURoiTm7IKHeSYPvC+mwiq1dlJ2 GTvUMWuYwxwPYt4Ghl76xFAeraIECsgn0CEgQDi2mrvQDNBw77AdmL6a27euBv7/ q+wJap9MaGQTpxX2xzXE9XGZcYtVfJf3cSABPKU/d32gd1ExHDIP0LVybOnEc3gv K0XDZwnzLyvcPj7bGCVw++CDIUB5t3T/DhSINIbswaUW1tobWzG6XM9iCp8XbMqq AZXoz5p9AP8RS9W/Ksiw5VCXUngGL/guX9ZQWo8m9sno74U= -----END CERTIFICATE-----Generated at Tue Sep 22 02:57:53 2026 by rpki-client