$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/32235f62-4711-31dd-8d7d-a17f76b0711e.roa File: 32235f62-4711-31dd-8d7d-a17f76b0711e.roa (raw, json) Hash identifier: TqvXyG2C6ocMMN0rJaI2A5TpvBcivsR/zJ4AaVH6gFk= Subject key identifier: CB:20:72:2C:B8:20:64:87:DA:CE:53:83:6C:A3:A0:99:3D:4D:6B:76 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E986346054F83F679D94AB200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/32235f62-4711-31dd-8d7d-a17f76b0711e.roa Signing time: Thu 23 Jul 2026 14:51:24 +0000 ROA not before: Thu 23 Jul 2026 14:51:24 +0000 ROA not after: Wed 21 Oct 2026 14:51:24 +0000 asID: 274496 IP address blocks: 38.10.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:63:46:05:4f:83:f6:79:d9:4a:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 23 14:51:24 2026 GMT Not After : Oct 21 14:51:24 2026 GMT Subject: CN=daf75a8e-c0ca-415d-aa7a-c409a19ab375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:f8:aa:38:bb:36:ae:e9:01:de:a6:39:fd: bb:84:f1:eb:ef:dd:0f:6f:a3:68:8a:b4:03:06:92: 5a:fd:4a:ed:cd:65:25:67:a1:dc:10:45:69:a2:45: 2e:a1:49:e9:6a:c5:46:f7:4a:57:91:99:a5:17:2c: 71:14:b7:05:e8:d3:d1:fd:a0:ee:e3:00:72:a4:51: da:85:7d:10:b4:df:48:b3:83:03:82:21:0d:40:1a: 2b:da:bd:d3:6a:e7:f3:4c:e1:34:31:35:13:01:13: c2:ef:97:1d:f2:4b:aa:e9:81:fa:a7:74:96:3a:ff: 98:e4:78:c2:71:ba:cb:da:9f:b2:dd:93:41:70:a1: 6c:97:ae:43:6a:a3:54:54:03:76:a4:cc:41:f6:6b: cd:11:90:2f:2b:1f:ca:f9:45:2a:84:ec:96:6a:f3: 4f:f3:46:7e:06:3c:9e:8f:a9:1a:ab:87:a5:7c:30: 8c:2f:4a:a0:6a:fb:ea:2d:73:e2:fb:d7:e6:11:bb: 84:06:42:ce:e2:93:ab:6c:41:de:4e:00:96:4e:f8: 1b:76:5e:fc:c1:4d:49:d7:72:bf:02:14:0d:2e:c8: 27:8b:7b:34:66:6a:5a:7d:87:90:f9:d6:bd:08:48: 4a:71:a5:fd:da:8b:29:fc:d8:42:68:ef:01:be:99: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:20:72:2C:B8:20:64:87:DA:CE:53:83:6C:A3:A0:99:3D:4D:6B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/32235f62-4711-31dd-8d7d-a17f76b0711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.10.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:15:5b:fa:98:00:b5:13:d6:af:b8:b7:91:86:85:69:39:b9: f4:a6:c7:b1:34:dd:c3:a6:dd:d7:2b:64:38:21:89:7a:6b:4e: 98:d9:99:c0:26:49:e1:e2:67:34:4e:d8:45:9c:4c:c4:28:ec: 6e:43:d2:0b:2e:cd:05:c2:e2:8d:e7:83:a6:dd:26:8e:26:cd: 34:1d:62:4a:a6:22:2e:15:b2:2a:6a:71:1b:ac:3a:9d:63:9d: f0:17:18:b0:92:76:9c:59:02:40:cf:57:fa:c5:c8:49:03:47: d7:1d:90:0c:46:d3:bc:00:6e:4f:39:ad:0b:60:91:4b:3c:b2: f1:cd:ea:80:dc:0b:20:b8:bf:42:5e:7e:26:f2:3b:d9:c3:12: 91:c0:35:f8:44:e1:95:a6:2a:bc:54:55:ae:13:ae:a6:dc:ad: f6:d9:a8:ca:81:6d:77:5c:f7:d2:a9:1d:e5:c4:46:35:81:95: 86:c0:5c:e3:7e:b2:ad:f5:57:56:84:08:a1:f6:d6:83:a9:dd: ed:61:47:af:af:53:82:4a:2b:42:54:3a:5d:c7:cd:93:6b:bf: 48:37:d2:52:eb:21:d5:a7:87:88:d6:67:21:26:51:5d:e0:75: 82:5d:96:83:37:a8:75:ef:36:f4:d3:e0:89:8e:3b:98:cc:ce: dc:08:b3:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6YY0YFT4P2edlKsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMzE0NTEyNFoXDTI2MTAyMTE0NTEyNFowLzEtMCsGA1UEAxMk ZGFmNzVhOGUtYzBjYS00MTVkLWFhN2EtYzQwOWExOWFiMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17b4qji7Nq7pAd6mOf27hPHr790Pb6NoirQD BpJa/UrtzWUlZ6HcEEVpokUuoUnpasVG90pXkZmlFyxxFLcF6NPR/aDu4wBypFHa hX0QtN9Is4MDgiENQBor2r3TaufzTOE0MTUTARPC75cd8kuq6YH6p3SWOv+Y5HjC cbrL2p+y3ZNBcKFsl65DaqNUVAN2pMxB9mvNEZAvKx/K+UUqhOyWavNP80Z+Bjye j6kaq4elfDCML0qgavvqLXPi+9fmEbuEBkLO4pOrbEHeTgCWTvgbdl78wU1J13K/ AhQNLsgni3s0ZmpafYeQ+da9CEhKcaX92osp/NhCaO8BvpkJfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsgciy4IGSH2s5Tg2yjoJk9TWt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzIyMzVmNjItNDcxMS0z MWRkLThkN2QtYTE3Zjc2YjA3MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJgqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQVW/qYALUT1q+4t5GGhWk5ufSmx7E03cOm3dcrZDghiXprTpjZmcAm SeHiZzRO2EWcTMQo7G5D0gsuzQXC4o3ng6bdJo4mzTQdYkqmIi4VsipqcRusOp1j nfAXGLCSdpxZAkDPV/rFyEkDR9cdkAxG07wAbk85rQtgkUs8svHN6oDcCyC4v0Je fibyO9nDEpHANfhE4ZWmKrxUVa4TrqbcrfbZqMqBbXdc99KpHeXERjWBlYbAXON+ sq31V1aECKH21oOp3e1hR6+vU4JKK0JUOl3HzZNrv0g30lLrIdWnh4jWZyEmUV3g dYJdloM3qHXvNvTT4ImOO5jMztwIs08= -----END CERTIFICATE-----Generated at Thu Jul 23 20:19:44 2026 by rpki-client