$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f49f66b1-9fef-3b4e-927d-36fe17baa5fa.roa File: f49f66b1-9fef-3b4e-927d-36fe17baa5fa.roa (raw, json) Hash identifier: F8d+A7VAssS+YX9I4L6kbOZmxZ6I8vm1/dOVv2hdAx0= Subject key identifier: 7F:B3:2D:21:88:8B:E9:AA:F2:1E:EB:76:0C:8E:D1:B6:3E:0C:80:32 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F23C2840ED13F3B5A2FD28480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f49f66b1-9fef-3b4e-927d-36fe17baa5fa.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 273902 IP address blocks: 38.210.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:84:0e:d1:3f:3b:5a:2f:d2:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=ba4224c2-6bb1-4b0f-ac76-0a9847aa5fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:85:7b:ca:52:c9:9d:78:58:ff:93:2b:4b: 7b:b6:ce:5c:eb:93:fa:f2:e1:53:c1:b6:bc:25:f4: ed:21:2d:8d:67:46:0c:cf:96:c1:43:bc:79:2f:e5: 1a:29:03:a0:fb:e9:a5:04:7a:dd:d1:93:6c:f5:74: 42:ce:8a:6a:7c:8a:ba:e9:b8:b0:cd:21:cc:bd:37: 84:c9:77:65:e3:a8:98:de:3e:41:36:a0:aa:74:7a: 6b:b8:0f:92:a5:60:84:7a:25:a3:4b:39:6c:20:98: 0c:6e:d0:b8:a3:84:c6:80:23:12:0a:c7:8e:80:8b: 8d:1c:ed:a5:32:32:2d:c8:bc:ae:4d:c6:0e:0b:3e: fe:04:04:47:74:7f:18:02:79:e6:62:71:6f:12:65: 9f:9e:d4:d9:01:87:8c:53:5c:93:ab:38:1a:0d:24: 3c:1e:ba:f1:4d:1c:04:af:56:0f:b6:89:aa:37:44: 0d:2d:9f:53:8e:e0:da:07:45:8c:2b:33:34:1f:9c: a6:80:a3:f4:5a:6e:00:26:65:d0:ee:7e:c0:b1:c9: d4:cf:ec:2f:86:84:78:36:9f:13:3c:3d:db:a0:ba: 5e:95:de:08:18:f8:63:4f:53:2c:04:55:18:0f:f1: cc:8b:da:a4:5b:46:cf:d8:54:19:c2:18:a7:0d:a1: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:2D:21:88:8B:E9:AA:F2:1E:EB:76:0C:8E:D1:B6:3E:0C:80:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f49f66b1-9fef-3b4e-927d-36fe17baa5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7e:d3:29:0a:63:6e:21:0f:49:d5:9d:75:76:f0:d5:b2:bc: 51:b0:5b:20:4c:55:fe:7e:3c:82:5d:22:91:9d:b4:fc:03:b6: 13:8e:4c:1f:d8:df:17:f5:45:44:fa:fd:32:97:94:33:cf:3f: 2f:a2:89:c2:7e:11:78:bb:62:fb:eb:6e:4b:e7:14:cf:2f:8d: 85:c4:67:9c:10:79:10:b3:14:1e:a6:f1:3e:76:d9:d5:ab:46: 25:f7:a7:21:b6:1e:b5:df:eb:d7:a2:13:fc:83:42:4f:5e:ed: 25:75:74:6d:40:95:ee:64:08:90:38:44:40:40:a4:25:f7:3b: d4:37:5a:1e:23:01:68:16:6a:f0:53:df:c5:56:4f:c1:02:14: df:0a:2a:7c:7f:a5:03:de:17:44:2e:83:ba:56:ae:29:50:c0: 26:5d:dc:1b:40:08:b1:2a:01:c9:fd:f6:8d:a7:89:0e:a3:7a: d3:d8:69:14:43:27:11:6e:25:e7:78:ee:20:e1:4c:9e:59:2f: d5:c0:ef:2f:39:ea:dc:b0:2b:1a:d9:83:30:6c:e3:90:c3:d8: a5:f4:75:12:94:40:1a:f0:2d:a9:41:37:a7:0c:bc:83:9b:db: 79:89:3a:2c:2b:77:54:87:b6:ef:54:52:58:fe:e0:7a:0f:85: f9:f7:af:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwoQO0T87Wi/ShIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YmE0MjI0YzItNmJiMS00YjBmLWFjNzYtMGE5ODQ3YWE1ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LiFe8pSyZ14WP+TK0t7ts5c65P68uFTwba8 JfTtIS2NZ0YMz5bBQ7x5L+UaKQOg++mlBHrd0ZNs9XRCzopqfIq66biwzSHMvTeE yXdl46iY3j5BNqCqdHpruA+SpWCEeiWjSzlsIJgMbtC4o4TGgCMSCseOgIuNHO2l MjItyLyuTcYOCz7+BARHdH8YAnnmYnFvEmWfntTZAYeMU1yTqzgaDSQ8HrrxTRwE r1YPtomqN0QNLZ9TjuDaB0WMKzM0H5ymgKP0Wm4AJmXQ7n7AscnUz+wvhoR4Np8T PD3boLpeld4IGPhjT1MsBFUYD/HMi9qkW0bP2FQZwhinDaE2DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+zLSGIi+mq8h7rdgyO0bY+DIAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjQ5ZjY2YjEtOWZlZi0z YjRlLTkyN2QtMzZmZTE3YmFhNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJtLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR+0ykKY24hD0nVnXV28NWyvFGwWyBMVf5+PIJdIpGdtPwDthOOTB/Y 3xf1RUT6/TKXlDPPPy+iicJ+EXi7YvvrbkvnFM8vjYXEZ5wQeRCzFB6m8T522dWr RiX3pyG2HrXf69eiE/yDQk9e7SV1dG1Ale5kCJA4REBApCX3O9Q3Wh4jAWgWavBT 38VWT8ECFN8KKnx/pQPeF0Qug7pWrilQwCZd3BtACLEqAcn99o2niQ6jetPYaRRD JxFuJed47iDhTJ5ZL9XA7y856tywKxrZgzBs45DD2KX0dRKUQBrwLalBN6cMvIOb 23mJOiwrd1SHtu9UUlj+4HoPhfn3r1Y= -----END CERTIFICATE-----Generated at Fri Sep 25 02:20:41 2026 by rpki-client