$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa File: 35828ae1-c906-38dd-815a-71a05121f2f6.roa (raw, json) Hash identifier: Uo3lzXx9pfgsCi6MItax65fV6HKvI2d25ViQ4owmnnQ= Subject key identifier: 2A:41:BA:C3:69:53:9E:C6:B7:06:6C:A2:21:6C:C1:5E:77:64:B8:B8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E7E9504021649BBB953BD3A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 265634 IP address blocks: 38.159.160.0/22 maxlen: 24 38.236.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:04:02:16:49:bb:b9:53:bd:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=ab6b7fcc-1599-493a-b42c-05f3c7127c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:73:d2:ec:f2:06:24:38:70:15:1a:d0:86: 9a:42:00:eb:e4:7a:eb:12:f8:c0:55:34:cf:64:60: a3:bf:dd:3e:8f:5f:21:a9:58:0e:80:23:2d:80:80: d3:98:b4:e4:a2:cc:9b:c6:9e:d2:c7:72:5f:a7:9a: fd:6d:eb:86:cd:1f:74:74:d6:be:36:72:3b:dd:bc: 0e:a3:30:5c:8a:b1:26:99:60:77:27:f6:a9:ad:0b: c2:27:06:7d:cf:2c:c0:86:3e:59:37:15:eb:e6:29: b7:ec:ca:89:a9:70:35:5b:0a:eb:1d:c5:b9:b2:04: 1d:0d:83:d2:e5:68:bf:3c:4c:9d:5d:82:69:60:46: a9:38:b1:1b:3d:f8:ac:39:74:65:fd:32:30:1f:98: 36:ce:1d:eb:ed:ec:74:bb:f6:a9:00:97:b1:14:1b: 8f:d8:ff:c6:7c:c3:73:87:a8:81:1c:7f:c1:b0:f5: 71:04:bf:8a:b1:a5:0b:4f:e2:51:de:8b:88:9d:d7: af:f7:e8:42:28:6f:f1:99:04:f8:a8:1c:ed:2c:ba: 7a:8c:3d:fb:01:30:96:1f:15:1c:77:10:0a:23:1a: 47:b7:57:19:13:0f:4b:70:3c:6b:9d:75:61:38:a0: f2:2e:51:59:ba:d1:15:f0:d6:0d:3f:0e:41:80:6a: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:BA:C3:69:53:9E:C6:B7:06:6C:A2:21:6C:C1:5E:77:64:B8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.160.0/22 38.236.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:08:76:8e:d2:12:af:0c:c6:79:14:36:73:ef:ab:17:2e:d8: 3f:d5:bb:d5:90:13:bb:ca:48:d6:d5:21:63:98:46:d0:ba:c1: ad:16:f2:d6:d5:8c:67:ac:e5:1a:e5:a0:5c:5a:0c:c3:b4:f1: 23:f4:79:aa:92:a8:a1:c1:3e:54:ea:2e:d3:ab:3d:cc:8d:53: 5c:54:e3:de:0d:aa:c7:b6:2f:14:20:4e:0e:0d:85:a4:f3:66: 29:2b:5d:11:ce:f0:3b:43:da:6c:a0:2c:d8:73:5d:b9:be:60: 8d:ed:85:4f:36:aa:80:a1:5e:a4:ac:d1:52:f4:af:48:c0:54: fb:57:75:13:b5:68:67:bc:35:da:0e:58:c3:44:cd:bd:a9:bd: 11:49:0d:0e:d0:e4:d1:61:33:d8:1e:55:40:6b:0b:5a:82:af: cf:ca:bd:a6:2a:ac:4c:7e:0a:2e:78:51:64:03:dd:45:7f:58: df:7d:9b:f2:15:11:f6:ec:94:5b:d3:b3:1d:88:b8:db:2c:69: 59:84:6d:de:35:0d:3e:4f:10:11:93:94:c3:91:77:89:bc:ac: 9f:63:95:99:c8:98:7f:61:bb:e5:8e:67:ae:89:6b:77:5c:de: 96:aa:df:7e:f1:53:b3:16:c0:8d:a6:52:97:07:84:20:27:16: f3:15:33:1e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5+lQQCFkm7uVO9OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YWI2YjdmY2MtMTU5OS00OTNhLWI0MmMtMDVmM2M3MTI3YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO5z0uzyBiQ4cBUa0IaaQgDr5HrrEvjAVTTP ZGCjv90+j18hqVgOgCMtgIDTmLTkosybxp7Sx3Jfp5r9beuGzR90dNa+NnI73bwO ozBcirEmmWB3J/aprQvCJwZ9zyzAhj5ZNxXr5im37MqJqXA1WwrrHcW5sgQdDYPS 5Wi/PEydXYJpYEapOLEbPfisOXRl/TIwH5g2zh3r7ex0u/apAJexFBuP2P/GfMNz h6iBHH/BsPVxBL+KsaULT+JR3ouIndev9+hCKG/xmQT4qBztLLp6jD37ATCWHxUc dxAKIxpHt1cZEw9LcDxrnXVhOKDyLlFZutEV8NYNPw5BgGpJIwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCpBusNpU57GtwZsoiFswV53ZLi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzU4MjhhZTEtYzkwNi0z OGRkLTgxNWEtNzFhMDUxMjFmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJp+gAwQC JuxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAQIdo7SEq8MxnkUNnPvqxcu2D/Vu9WQE7vKSNbVIWOYRtC6 wa0W8tbVjGes5RrloFxaDMO08SP0eaqSqKHBPlTqLtOrPcyNU1xU494Nqse2LxQg Tg4NhaTzZikrXRHO8DtD2mygLNhzXbm+YI3thU82qoChXqSs0VL0r0jAVPtXdRO1 aGe8NdoOWMNEzb2pvRFJDQ7Q5NFhM9geVUBrC1qCr8/KvaYqrEx+Ci54UWQD3UV/ WN99m/IVEfbslFvTsx2IuNssaVmEbd41DT5PEBGTlMORd4m8rJ9jlZnImH9hu+WO Z66Ja3dc3paq337xU7MWwI2mUpcHhCAnFvMVMx4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:21:16 2026 by rpki-client