$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/396ae705-e0c3-35a9-8943-e978c55bbb47.roa File: 396ae705-e0c3-35a9-8943-e978c55bbb47.roa (raw, json) Hash identifier: AR8tjH0O5/O01tKsUBaz5iJHF5Alc4YM2khR5KLdmd8= Subject key identifier: 76:44:11:EF:0C:5C:A3:B7:1A:D3:64:6F:B9:7B:4D:94:63:B3:95:68 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E8B24F3613391E73D1252B880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/396ae705-e0c3-35a9-8943-e978c55bbb47.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 153634 IP address blocks: 38.78.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:f3:61:33:91:e7:3d:12:52:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=0cd606ff-f620-4b2e-9b88-2ae29248a319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:c7:54:45:fc:6f:d4:2b:df:7a:9e:6d:38: a8:c6:6a:e3:a1:0d:df:0a:f6:8f:21:85:f2:f1:cd: 48:86:c7:da:00:cf:3d:12:f0:40:ec:cc:49:29:1e: 63:48:ba:3c:62:c1:25:8b:15:b6:89:c4:47:ff:b2: 57:8d:47:db:e9:dc:42:c9:a0:b7:fa:ff:56:d6:2a: da:bf:8a:da:54:ee:05:25:a1:1a:82:11:20:7e:3c: e2:c8:23:b5:f2:92:ea:9f:85:50:87:44:6a:1b:c1: 8e:86:1c:21:19:96:80:e9:77:1c:d5:1f:56:83:73: 56:e5:9d:80:56:f0:70:04:b9:8b:ea:a6:b6:57:f9: 46:2f:07:96:84:d5:a0:e8:43:27:09:b7:79:ae:8a: 42:e0:c2:b0:67:64:6e:b4:3c:bf:25:2a:f1:ab:b8: 17:09:fa:08:df:ed:f3:b5:54:0a:5d:4a:f8:b8:68: 73:d3:c6:fd:4d:ed:a8:67:fa:ed:f9:bd:61:85:cf: 8c:14:31:c3:5d:46:41:fe:b3:d0:fb:7b:95:fe:59: 64:5e:ec:27:e4:22:95:40:5f:56:10:8c:b3:07:ec: 71:ba:1e:81:c1:02:a1:3b:ed:08:5e:8f:31:0d:f7: 7e:94:5f:31:30:d6:89:54:92:8e:a8:cb:cd:1c:81: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:44:11:EF:0C:5C:A3:B7:1A:D3:64:6F:B9:7B:4D:94:63:B3:95:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/396ae705-e0c3-35a9-8943-e978c55bbb47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.78.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0d:5c:8d:34:a7:ee:6a:54:6b:ea:70:5b:27:e2:7c:4c:b3: 71:38:50:5d:fb:62:5d:ea:65:88:58:5a:1e:b9:59:a0:fc:fc: 59:57:ef:e2:a8:ea:5d:2e:89:37:6b:81:9b:a7:c1:ff:73:1f: df:b3:83:45:00:87:66:9a:ce:71:3f:5a:86:fc:7b:2a:d3:3b: 2f:52:71:86:0d:5a:b4:59:e3:d9:31:20:cb:23:df:da:94:9f: 73:ff:ae:03:ef:27:d7:a7:cb:34:65:e4:2b:0f:50:69:e5:17: b4:ae:da:c0:00:30:ed:22:bc:3e:b1:a5:76:72:0c:03:75:e4: 06:f4:22:20:25:65:7e:f2:8a:48:20:8b:e1:9f:ee:24:9e:e3: 81:2a:8c:73:66:4a:9b:f0:b7:c6:82:62:a9:cb:a2:f9:36:ab: 19:20:cb:3d:b4:17:5c:88:98:31:f2:6a:50:1a:09:98:0e:4d: d3:f5:fd:18:c0:a2:20:f2:a6:cd:4d:e9:74:f7:02:c7:96:ab: 63:67:4b:5e:01:8e:5d:0b:58:0a:10:d9:d7:05:5a:76:2a:02: 40:5a:38:9b:fb:70:3b:f8:63:ac:bd:35:12:c1:0e:a5:6a:b8: c2:eb:92:91:fb:33:7f:8d:e5:56:86:8d:42:e5:64:b5:4f:65: 7c:f8:dc:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJPNhM5HnPRJSuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk MGNkNjA2ZmYtZjYyMC00YjJlLTliODgtMmFlMjkyNDhhMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDjHVEX8b9Qr33qebTioxmrjoQ3fCvaPIYXy 8c1IhsfaAM89EvBA7MxJKR5jSLo8YsElixW2icRH/7JXjUfb6dxCyaC3+v9W1ira v4raVO4FJaEaghEgfjziyCO18pLqn4VQh0RqG8GOhhwhGZaA6Xcc1R9Wg3NW5Z2A VvBwBLmL6qa2V/lGLweWhNWg6EMnCbd5ropC4MKwZ2RutDy/JSrxq7gXCfoI3+3z tVQKXUr4uGhz08b9Te2oZ/rt+b1hhc+MFDHDXUZB/rPQ+3uV/llkXuwn5CKVQF9W EIyzB+xxuh6BwQKhO+0IXo8xDfd+lF8xMNaJVJKOqMvNHIFwhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZEEe8MXKO3GtNkb7l7TZRjs5VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzk2YWU3MDUtZTBjMy0z NWE5LTg5NDMtZTk3OGM1NWJiYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJk6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMENXI00p+5qVGvqcFsn4nxMs3E4UF37Yl3qZYhYWh65WaD8/FlX7+Ko 6l0uiTdrgZunwf9zH9+zg0UAh2aaznE/Wob8eyrTOy9ScYYNWrRZ49kxIMsj39qU n3P/rgPvJ9enyzRl5CsPUGnlF7Su2sAAMO0ivD6xpXZyDAN15Ab0IiAlZX7yikgg i+Gf7iSe44EqjHNmSpvwt8aCYqnLovk2qxkgyz20F1yImDHyalAaCZgOTdP1/RjA oiDyps1N6XT3AseWq2NnS14Bjl0LWAoQ2dcFWnYqAkBaOJv7cDv4Y6y9NRLBDqVq uMLrkpH7M3+N5VaGjULlZLVPZXz43Fs= -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:15 2026 by rpki-client