$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa File: 3689bc33-1247-3591-afb5-2336487c7f3b.roa (raw, json) Hash identifier: 7ZqdFTQhS5X8enLkKdt359helWTE34DuIj3gP7wa7P8= Subject key identifier: D8:B6:20:E6:61:11:EB:5A:E0:27:CA:3A:39:A7:ED:4B:A9:65:16:13 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E878BC8BE85C34A63C2004E80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa Signing time: Fri 17 Jul 2026 14:04:17 +0000 ROA not before: Fri 17 Jul 2026 14:04:17 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 136841 IP address blocks: 38.86.221.0/24 maxlen: 24 206.85.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8b:c8:be:85:c3:4a:63:c2:00:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 17 14:04:17 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=53b5b451-7a8d-4e04-9829-5e6dd72cafdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:5a:c8:ec:e2:08:7a:b8:90:ef:47:c1:42: 7d:80:0d:d5:ad:c8:c1:14:ee:01:e4:4b:a6:e7:14: 77:97:f5:e0:07:e7:61:5b:b2:7d:d2:72:0e:35:65: 30:99:70:98:3a:27:df:29:09:02:b7:fa:99:ed:22: 23:9b:84:1c:f8:d4:64:11:32:75:96:d1:4b:8f:f6: 5f:a1:84:1d:5c:d6:43:bf:f2:83:6a:5a:c1:16:73: 35:2b:65:68:2c:7b:7c:06:96:4c:30:07:0c:38:22: 6d:31:db:e7:5b:48:1d:56:4c:4a:ea:a4:ba:72:f4: 24:29:e0:a4:96:1e:62:ef:80:a6:9d:8a:34:46:39: 99:ce:06:b7:07:44:b7:84:14:1d:b5:91:94:9a:0e: 66:9c:2a:8e:d7:8b:23:c9:0b:b2:1d:56:c2:31:6f: 9a:0b:e7:fd:fa:ed:3a:11:f5:95:98:7e:91:56:c3: 3f:a6:ae:73:c7:fe:bf:ce:e4:70:fd:13:d8:c4:16: b3:c7:0e:5f:c5:d3:8b:f4:c0:c5:45:b9:29:90:2a: cc:e3:e5:c7:7e:b6:0e:47:11:f8:13:82:94:b5:82: f8:38:a3:81:fd:3e:6d:90:b2:21:cc:b5:47:1f:8a: 89:08:08:ae:ae:dc:d0:08:63:ff:d1:5d:78:5d:1f: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B6:20:E6:61:11:EB:5A:E0:27:CA:3A:39:A7:ED:4B:A9:65:16:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3689bc33-1247-3591-afb5-2336487c7f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.221.0/24 206.85.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:aa:57:31:36:e8:dc:5e:28:4e:6b:06:9a:1f:db:49:c6:c3: ea:da:da:67:8b:e1:21:1a:bd:eb:2f:1d:d7:51:a8:07:28:87: 75:09:17:a6:69:1a:25:3c:05:6e:e3:11:65:39:e6:f5:21:87: 5a:37:dc:c6:9b:57:30:bb:6b:c3:da:1a:50:80:99:62:52:72: 14:b0:a8:69:17:e0:46:98:7c:c1:c6:d6:93:b5:ce:08:09:97: fb:23:a0:ba:d6:34:f0:63:83:e6:1d:ef:8d:b4:a8:fb:82:94: 89:e1:29:2c:6e:c8:37:ec:ae:b4:d7:ce:a8:89:18:89:da:f8: b3:df:d8:89:b9:6e:97:ea:d5:b4:d8:77:b5:41:c5:9f:5f:db: 0f:ed:4c:72:5c:d6:1a:83:e7:e9:99:0c:a0:99:13:b8:44:31: b9:f9:32:79:12:f7:56:55:ba:38:1b:e2:73:f4:5e:1e:7a:04: 4e:3c:5b:3f:b3:d0:83:74:50:ff:3a:9c:3a:fe:8a:20:a6:ef: 59:b3:96:da:e9:c8:24:c7:da:5f:64:c7:a5:d5:ce:9c:fd:61: 47:dd:48:ca:c7:b9:3a:b6:de:d9:0b:49:9b:df:07:49:a6:3e: 2d:23:46:f3:00:b7:35:e7:a4:1e:4c:78:b6:e2:65:10:e5:de: 0c:0f:a5:68 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6Hi8i+hcNKY8IAToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxNzE0MDQxN1oXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NTNiNWI0NTEtN2E4ZC00ZTA0LTk4MjktNWU2ZGQ3MmNhZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnItayOziCHq4kO9HwUJ9gA3VrcjBFO4B5Eum 5xR3l/XgB+dhW7J90nIONWUwmXCYOiffKQkCt/qZ7SIjm4Qc+NRkETJ1ltFLj/Zf oYQdXNZDv/KDalrBFnM1K2VoLHt8BpZMMAcMOCJtMdvnW0gdVkxK6qS6cvQkKeCk lh5i74CmnYo0RjmZzga3B0S3hBQdtZGUmg5mnCqO14sjyQuyHVbCMW+aC+f9+u06 EfWVmH6RVsM/pq5zx/6/zuRw/RPYxBazxw5fxdOL9MDFRbkpkCrM4+XHfrYORxH4 E4KUtYL4OKOB/T5tkLIhzLVHH4qJCAiurtzQCGP/0V14XR/4jwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNi2IOZhEeta4CfKOjmn7UupZRYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzY4OWJjMzMtMTI0Ny0z NTkxLWFmYjUtMjMzNjQ4N2M3ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJlbdAwQA zlUZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHGqVzE26NxeKE5rBpof20nGw+ra2meL4SEavesvHddRqAco h3UJF6ZpGiU8BW7jEWU55vUhh1o33MabVzC7a8PaGlCAmWJSchSwqGkX4EaYfMHG 1pO1zggJl/sjoLrWNPBjg+Yd7420qPuClInhKSxuyDfsrrTXzqiJGIna+LPf2Im5 bpfq1bTYd7VBxZ9f2w/tTHJc1hqD5+mZDKCZE7hEMbn5MnkS91ZVujgb4nP0Xh56 BE48Wz+z0IN0UP86nDr+iiCm71mzltrpyCTH2l9kx6XVzpz9YUfdSMrHuTq23tkL SZvfB0mmPi0jRvMAtzXnpB5MeLbiZRDl3gwPpWg= -----END CERTIFICATE-----Generated at Fri Jul 24 00:52:05 2026 by rpki-client