$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/166c1dc8-fb00-3c89-9505-0a932eefc183.roa File: 166c1dc8-fb00-3c89-9505-0a932eefc183.roa (raw, json) Hash identifier: W+o9iJR450zXc3xTPqyoUY5wGwHHA9X1Bc/fAzPM7fw= Subject key identifier: 9D:2A:82:07:8E:39:4F:BF:A7:8B:BB:AD:E5:44:62:C5:73:32:6B:68 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E8FFA88A002FAE8BBAAC2B780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/166c1dc8-fb00-3c89-9505-0a932eefc183.roa Signing time: Mon 20 Jul 2026 14:33:54 +0000 ROA not before: Mon 20 Jul 2026 14:33:54 +0000 ROA not after: Thu 15 Oct 2026 13:54:44 +0000 asID: 140607 IP address blocks: 38.87.70.0/24 maxlen: 24 38.125.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fa:88:a0:02:fa:e8:bb:aa:c2:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 20 14:33:54 2026 GMT Not After : Oct 15 13:54:44 2026 GMT Subject: CN=6d3675d2-f3e0-4e88-9bc0-4ed55011f051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:f7:29:26:57:7c:b0:f4:6e:44:ed:b0:01: 97:8d:80:8e:64:fd:6d:e1:01:3a:bc:0d:5b:f0:4c: d9:19:c5:ac:e2:c5:c8:7c:7d:84:09:05:00:c9:2a: e6:a8:3c:45:4d:07:07:05:2c:2e:11:5c:d6:8e:0f: 2d:03:86:7e:1e:18:ae:14:7a:e8:5e:e6:96:3a:41: 77:72:cf:10:ea:24:20:2c:ee:1a:b5:8b:11:92:60: ae:a1:bd:09:3f:f0:49:a1:89:83:92:d6:fd:8b:15: 17:5b:3e:8a:03:84:49:b1:ce:13:f9:bc:d8:2a:e8: 27:8f:3d:7a:40:67:5e:be:a0:54:36:9f:56:14:3d: fd:4f:e1:a4:85:7f:7d:66:33:c7:a8:1e:30:25:b6: 5c:5a:51:d5:8c:f0:6b:95:4a:5b:44:17:c4:88:94: 9d:ca:07:b2:b8:34:5d:03:8c:70:cb:31:2d:6a:f2: 9c:b4:b7:f1:5d:95:67:bf:44:80:fe:1d:88:e8:b5: 74:91:3c:dc:e5:72:f1:4c:df:77:09:0e:b1:c5:46: c3:4e:38:70:09:60:6e:fc:bd:e6:9f:e4:fc:a8:e1: fb:cc:7e:ce:19:b9:e2:65:ec:18:53:e9:d9:a9:9e: 32:3e:d7:5a:10:82:3c:e4:ab:9f:0b:c3:73:44:67: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:82:07:8E:39:4F:BF:A7:8B:BB:AD:E5:44:62:C5:73:32:6B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/166c1dc8-fb00-3c89-9505-0a932eefc183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.87.70.0/24 38.125.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c5:e6:64:56:85:b7:13:2a:52:8c:20:3d:c2:55:12:03:c1: dd:e8:45:37:fd:09:ae:d5:d2:fa:ca:3a:28:4d:b5:b7:79:90: 41:a4:c0:aa:9b:42:fe:f3:ea:c8:2d:aa:d5:ae:dd:38:54:c4: a0:ae:77:d8:2e:ae:e2:99:db:a0:71:67:3c:25:dc:63:a2:e3: 90:57:05:38:46:11:f6:a5:8c:0c:b6:7b:cf:65:62:68:07:e3: 0c:ce:74:0b:dc:d8:aa:43:81:a0:7e:02:92:7d:e2:55:39:89: 3e:27:70:b3:37:45:80:32:e2:e6:eb:48:66:3a:34:d3:dd:05: 15:a1:8e:e5:2c:86:1b:b3:1a:ca:51:38:2f:78:1c:06:93:68: e3:3f:25:07:35:79:37:69:03:b2:06:c5:e0:3e:bd:9b:32:a5: f4:20:2f:89:4e:8e:8a:d7:ca:9f:42:e8:0a:40:06:74:43:3c: 82:d8:65:13:55:44:25:a8:f8:8b:e3:bf:e9:47:70:ca:17:4b: 49:0a:12:63:8b:58:b1:a9:15:c3:65:64:b0:08:a5:02:25:5a: de:37:72:79:4f:a4:ec:86:ad:b9:5f:51:2e:73:76:e5:cb:08: 9c:02:12:81:fc:b0:b7:b1:5e:d8:7f:29:f3:80:28:7c:81:be: b8:97:d5:e4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6P+oigAvrou6rCt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMDE0MzM1NFoXDTI2MTAxNTEzNTQ0NFowLzEtMCsGA1UEAxMk NmQzNjc1ZDItZjNlMC00ZTg4LTliYzAtNGVkNTUwMTFmMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4/3KSZXfLD0bkTtsAGXjYCOZP1t4QE6vA1b 8EzZGcWs4sXIfH2ECQUAySrmqDxFTQcHBSwuEVzWjg8tA4Z+HhiuFHroXuaWOkF3 cs8Q6iQgLO4atYsRkmCuob0JP/BJoYmDktb9ixUXWz6KA4RJsc4T+bzYKugnjz16 QGdevqBUNp9WFD39T+GkhX99ZjPHqB4wJbZcWlHVjPBrlUpbRBfEiJSdygeyuDRd A4xwyzEtavKctLfxXZVnv0SA/h2I6LV0kTzc5XLxTN93CQ6xxUbDTjhwCWBu/L3m n+T8qOH7zH7OGbniZewYU+nZqZ4yPtdaEII85KufC8NzRGesbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ0qggeOOU+/p4u7reVEYsVzMmtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTY2YzFkYzgtZmIwMC0z Yzg5LTk1MDUtMGE5MzJlZWZjMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJldGAwQD Jn34MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEXF5mRWhbcTKlKMID3CVRIDwd3oRTf9Ca7V0vrKOihNtbd5 kEGkwKqbQv7z6sgtqtWu3ThUxKCud9guruKZ26BxZzwl3GOi45BXBThGEfaljAy2 e89lYmgH4wzOdAvc2KpDgaB+ApJ94lU5iT4ncLM3RYAy4ubrSGY6NNPdBRWhjuUs hhuzGspROC94HAaTaOM/JQc1eTdpA7IGxeA+vZsypfQgL4lOjorXyp9C6ApABnRD PILYZRNVRCWo+Ivjv+lHcMoXS0kKEmOLWLGpFcNlZLAIpQIlWt43cnlPpOyGrblf US5zduXLCJwCEoH8sLexXth/KfOAKHyBvriX1eQ= -----END CERTIFICATE-----Generated at Fri Jul 24 04:22:41 2026 by rpki-client