$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f45e1034-b84d-341d-bc04-8398c9a9de97.roa File: f45e1034-b84d-341d-bc04-8398c9a9de97.roa (raw, json) Hash identifier: 5D8ejS475gDdicG9m8ZLx+zZCPsqGTs8e+NDSPvTKGM= Subject key identifier: E0:48:F8:08:09:B9:19:E9:57:24:E1:88:95:4E:89:6B:D5:FA:41:D1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3796A1A6A211C9FAFCB502E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f45e1034-b84d-341d-bc04-8398c9a9de97.roa Signing time: Fri 18 Sep 2026 15:28:25 +0000 ROA not before: Fri 18 Sep 2026 15:28:25 +0000 ROA not after: Thu 17 Dec 2026 16:28:25 +0000 asID: 268624 IP address blocks: 38.4.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:96:a1:a6:a2:11:c9:fa:fc:b5:02:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 18 15:28:25 2026 GMT Not After : Dec 17 16:28:25 2026 GMT Subject: CN=2f5a7e91-075e-44c7-b8d6-40d4482fc45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:50:40:b1:95:96:9c:ba:32:13:11:19:e1: 34:f8:aa:f8:46:e7:17:10:2a:c8:54:e3:67:d6:68: 82:d1:89:ba:0b:79:d8:92:66:04:fe:fa:d2:ea:ab: 70:ca:f2:c3:42:ab:32:eb:f5:20:c1:35:1c:54:57: 68:c8:34:bb:11:85:d6:51:50:cb:19:86:0e:28:15: 75:a7:c4:a6:ce:35:5e:60:75:1b:67:72:29:18:06: a6:ac:66:b7:74:95:ea:f3:ac:00:2d:d8:87:70:6d: 2b:47:76:53:83:e3:c8:33:86:70:a3:cb:52:12:92: e3:5b:0b:80:2d:f9:3f:74:3a:04:5e:47:5d:7a:cf: 82:b9:70:88:36:a0:c9:f1:e8:f4:78:1c:50:e2:f5: 6a:05:f1:8c:e2:bb:c7:3e:ae:eb:db:f1:1a:f9:6a: ef:39:89:54:4e:f5:aa:be:ca:f2:34:90:24:b9:8f: 0a:06:60:60:16:ff:bb:65:b4:f8:ae:37:34:86:50: 54:a6:88:54:31:d7:46:02:be:46:25:d7:7d:33:13: 38:50:0f:84:54:86:08:1f:25:5a:f6:09:f3:a7:f9: 03:68:5d:2d:eb:54:e6:07:d6:01:9c:c9:1f:b3:61: ae:94:bf:ee:1f:d6:c0:ec:19:09:ce:b7:70:ef:13: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:48:F8:08:09:B9:19:E9:57:24:E1:88:95:4E:89:6B:D5:FA:41:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f45e1034-b84d-341d-bc04-8398c9a9de97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.4.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c9:d9:90:75:62:fc:cf:34:1b:ec:19:ab:b9:62:85:de:ed: a9:2e:24:da:ad:50:e8:2b:29:32:ac:17:3b:9c:8e:6a:c8:f4: bd:d3:c0:3f:87:c3:76:03:53:16:7f:23:82:3f:06:3f:ca:d4: 13:95:b5:09:4b:ee:e8:3e:f9:e5:57:9d:33:cf:23:a3:b2:aa: 69:75:9b:88:4c:9b:87:c4:08:27:3d:1a:9e:7b:9b:bd:c7:85: 26:8e:64:93:a7:a1:48:d4:88:ac:7a:08:76:0a:08:05:b8:8e: 34:2c:e7:ca:61:50:17:9c:61:68:15:70:20:16:e0:af:17:52: 61:fa:46:c2:64:2e:5f:72:b2:e2:79:71:3f:ba:df:33:2c:51: 61:d4:48:27:de:b4:4a:8c:e1:c4:2a:f0:0b:8e:27:25:64:01: de:5c:19:1d:99:7a:42:fc:5d:bc:20:6e:de:03:63:d8:3e:c4: 55:cb:70:42:75:3a:c1:45:76:c2:a4:43:34:d7:04:05:1f:d0: 19:d6:a4:91:d5:f7:46:b2:36:c2:32:d5:63:ca:c9:9b:6e:21: d6:ad:09:51:04:a3:d8:5e:dc:57:ea:c0:98:e9:b0:f2:d0:73: a1:f2:84:29:9d:b9:9f:2d:40:bc:c2:32:d8:18:44:6a:63:7f: 5a:80:10:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83lqGmohHJ+vy1AuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxODE1MjgyNVoXDTI2MTIxNzE2MjgyNVowLzEtMCsGA1UEAxMk MmY1YTdlOTEtMDc1ZS00NGM3LWI4ZDYtNDBkNDQ4MmZjNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdxQQLGVlpy6MhMRGeE0+Kr4RucXECrIVONn 1miC0Ym6C3nYkmYE/vrS6qtwyvLDQqsy6/UgwTUcVFdoyDS7EYXWUVDLGYYOKBV1 p8SmzjVeYHUbZ3IpGAamrGa3dJXq86wALdiHcG0rR3ZTg+PIM4Zwo8tSEpLjWwuA Lfk/dDoEXkddes+CuXCINqDJ8ej0eBxQ4vVqBfGM4rvHPq7r2/Ea+WrvOYlUTvWq vsryNJAkuY8KBmBgFv+7ZbT4rjc0hlBUpohUMddGAr5GJdd9MxM4UA+EVIYIHyVa 9gnzp/kDaF0t61TmB9YBnMkfs2GulL/uH9bA7BkJzrdw7xOL1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBI+AgJuRnpVyThiJVOiWvV+kHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjQ1ZTEwMzQtYjg0ZC0z NDFkLWJjMDQtODM5OGM5YTlkZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJgSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTJ2ZB1YvzPNBvsGau5YoXe7akuJNqtUOgrKTKsFzucjmrI9L3TwD+H w3YDUxZ/I4I/Bj/K1BOVtQlL7ug++eVXnTPPI6Oyqml1m4hMm4fECCc9Gp57m73H hSaOZJOnoUjUiKx6CHYKCAW4jjQs58phUBecYWgVcCAW4K8XUmH6RsJkLl9ysuJ5 cT+63zMsUWHUSCfetEqM4cQq8AuOJyVkAd5cGR2ZekL8Xbwgbt4DY9g+xFXLcEJ1 OsFFdsKkQzTXBAUf0BnWpJHV90ayNsIy1WPKyZtuIdatCVEEo9he3FfqwJjpsPLQ c6HyhCmduZ8tQLzCMtgYRGpjf1qAEDM= -----END CERTIFICATE-----Generated at Sun Sep 20 12:37:47 2026 by rpki-client