$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e77f1eb-2365-36ff-846c-6a30978e9961.roa File: 3e77f1eb-2365-36ff-846c-6a30978e9961.roa (raw, json) Hash identifier: uNHGbOOVtVarzKhabk4ZJkd9r1oJoTkAD8QO01AwzpE= Subject key identifier: B7:B2:F2:06:3F:54:52:A8:38:80:F1:55:BE:60:F4:72:0F:15:23:60 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E508497D2F4A141DBB84AD200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e77f1eb-2365-36ff-846c-6a30978e9961.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 273595 IP address blocks: 38.56.200.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:97:d2:f4:a1:41:db:b8:4a:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=b3158d68-6dc0-4e7b-bd36-41c4351e0acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:a6:70:c2:bb:d0:94:b6:9b:d3:f7:f0:72: 6a:06:f9:a9:9f:a3:fa:fe:72:d3:e5:90:3a:11:2f: 31:e3:d4:bb:28:f0:9e:df:ec:05:0b:6a:d2:43:eb: de:d3:cf:ba:71:cc:e0:65:17:50:41:34:4a:bc:12: 10:16:a0:65:31:eb:00:f0:14:53:39:38:7a:24:5a: be:f7:78:71:9e:e3:94:ac:18:c4:e4:0f:96:36:52: 13:11:a4:7a:91:40:f7:eb:50:dd:5f:29:e6:1a:4a: 43:6c:b2:60:a0:65:c1:a5:d8:b7:8e:1f:2b:82:e9: 1a:2c:5c:3b:04:70:46:ab:e1:46:12:0f:af:86:26: 31:6a:6e:0a:a7:4a:f5:0e:d9:2d:2c:06:05:3e:2e: cf:59:2b:2f:6e:9a:42:80:ff:7a:7b:b0:87:06:65: b1:98:31:f6:47:e7:b9:6f:60:cb:ff:10:23:8c:11: 22:fb:2a:12:2c:ec:b2:19:0f:73:99:4e:9f:6f:64: 3b:c0:52:87:67:99:6f:2c:96:fa:35:d0:13:82:eb: 02:4e:65:cc:d4:c8:21:26:33:d6:0e:aa:82:25:64: 3e:7e:5a:ac:ba:b9:e8:8c:3c:32:9e:3c:a5:f9:37: a3:d5:a5:26:56:81:06:c6:53:73:52:15:64:23:13: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B2:F2:06:3F:54:52:A8:38:80:F1:55:BE:60:F4:72:0F:15:23:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e77f1eb-2365-36ff-846c-6a30978e9961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ef:e0:c6:b9:98:ec:5b:0b:cf:90:a5:0d:f9:46:14:7c:8e: ea:46:4e:e8:ed:db:48:6e:1b:54:13:1e:3b:10:85:9f:22:7c: 5c:7b:aa:d5:1e:88:19:88:53:24:40:ae:c4:0e:22:f6:42:44: d8:bd:40:26:be:8c:cb:9c:0a:f3:2b:7b:d5:9b:31:f6:c3:75: 41:c9:4c:58:94:90:89:95:44:5b:36:ab:91:cc:2f:94:c1:a3: 78:b2:3e:e1:54:9c:66:3e:71:34:74:3f:40:9e:30:7f:f5:0b: ed:f3:80:25:9b:5e:64:ee:b6:86:c2:b1:e7:4d:5c:1c:dd:42: 10:2e:10:9e:99:c2:54:52:58:70:3d:5e:72:d6:52:b5:9d:e3: 79:7b:42:c2:4d:34:b4:21:7c:54:c7:51:28:fa:5d:4f:a4:e4: 9b:ef:ed:0e:47:3d:5d:20:46:df:f5:75:df:8f:9d:b8:a7:d3: 9e:44:4f:e1:32:86:89:a2:1d:51:e1:13:ef:fe:76:b9:a9:94: 1f:9f:da:ba:75:3d:28:c4:8f:6f:38:68:cf:04:19:5e:2e:23: 96:b5:e1:23:8a:f8:be:08:64:ce:f9:02:76:d9:30:68:39:87: 87:13:f0:76:4c:03:97:df:63:96:bc:90:1c:51:7c:ba:c9:7e: bb:11:4a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJfS9KFB27hK0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk YjMxNThkNjgtNmRjMC00ZTdiLWJkMzYtNDFjNDM1MWUwYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFymcMK70JS2m9P38HJqBvmpn6P6/nLT5ZA6 ES8x49S7KPCe3+wFC2rSQ+ve08+6cczgZRdQQTRKvBIQFqBlMesA8BRTOTh6JFq+ 93hxnuOUrBjE5A+WNlITEaR6kUD361DdXynmGkpDbLJgoGXBpdi3jh8rgukaLFw7 BHBGq+FGEg+vhiYxam4Kp0r1DtktLAYFPi7PWSsvbppCgP96e7CHBmWxmDH2R+e5 b2DL/xAjjBEi+yoSLOyyGQ9zmU6fb2Q7wFKHZ5lvLJb6NdATgusCTmXM1MghJjPW DqqCJWQ+flqsurnojDwynjyl+Tej1aUmVoEGxlNzUhVkIxPSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLey8gY/VFKoOIDxVb5g9HIPFSNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2U3N2YxZWItMjM2NS0z NmZmLTg0NmMtNmEzMDk3OGU5OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDv4Ma5mOxbC8+QpQ35RhR8jupGTujt20huG1QTHjsQhZ8ifFx7qtUe iBmIUyRArsQOIvZCRNi9QCa+jMucCvMre9WbMfbDdUHJTFiUkImVRFs2q5HML5TB o3iyPuFUnGY+cTR0P0CeMH/1C+3zgCWbXmTutobCsedNXBzdQhAuEJ6ZwlRSWHA9 XnLWUrWd43l7QsJNNLQhfFTHUSj6XU+k5Jvv7Q5HPV0gRt/1dd+Pnbin055ET+Ey homiHVHhE+/+drmplB+f2rp1PSjEj284aM8EGV4uI5a14SOK+L4IZM75AnbZMGg5 h4cT8HZMA5ffY5a8kBxRfLrJfrsRSns= -----END CERTIFICATE-----Generated at Thu Jul 23 23:17:56 2026 by rpki-client