$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/652820d5-cd52-3cd7-88eb-e66f27e49326.roa File: 652820d5-cd52-3cd7-88eb-e66f27e49326.roa (raw, json) Hash identifier: gUllY3fl5OiigjEi4nQBg7WbCtHT4hm8QYXoc1IY19o= Subject key identifier: F9:88:59:7A:1F:CC:FF:F8:06:0B:15:E2:C2:D6:B6:BB:03:43:4C:30 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DCF57F18DDCB08FADE834D4C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/652820d5-cd52-3cd7-88eb-e66f27e49326.roa Signing time: Tue 12 May 2026 14:31:06 +0000 ROA not before: Tue 12 May 2026 14:31:06 +0000 ROA not after: Mon 10 Aug 2026 14:31:06 +0000 asID: 147237 IP address blocks: 38.109.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:57:f1:8d:dc:b0:8f:ad:e8:34:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 12 14:31:06 2026 GMT Not After : Aug 10 14:31:06 2026 GMT Subject: CN=8d72d877-e0de-4968-a1d4-cc0d740257f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:43:f4:ec:bf:bf:4d:0e:a9:a6:cc:b2:d8: f2:76:04:3b:ee:ce:a5:24:da:df:c3:8c:2c:8b:29: c4:7e:37:fb:34:2b:1b:5e:54:35:66:7d:22:97:d3: a9:0a:12:2c:b1:38:15:06:24:4b:8f:a1:e9:a7:06: 02:0d:a5:dc:7d:b5:03:6f:c4:01:cb:46:19:03:d4: a9:d6:4d:c3:ec:75:9b:92:6f:58:1b:7a:04:5b:0e: 35:66:25:c7:7e:43:2d:88:a9:31:40:cf:d7:03:16: 00:b7:9b:73:8f:17:59:57:bf:51:23:10:be:61:f9: 4f:a5:3c:ed:ba:a4:de:1d:7a:d9:21:11:e9:02:ca: 5b:95:b6:f5:92:52:6a:43:77:6a:f8:e7:d2:6f:d5: 3a:a1:eb:56:05:76:99:88:39:cc:e8:7c:a9:e1:b7: 98:e0:91:5a:28:09:42:2c:94:14:d8:f0:43:99:75: 5a:c1:b0:2b:00:03:b1:7b:e6:c8:c5:b2:5d:c0:37: d1:d0:f5:87:27:0a:7c:54:1d:2d:3a:28:49:14:5a: 59:a7:e9:dc:f7:bc:c9:31:3b:e7:4c:ee:64:63:5f: 05:bb:fa:43:46:33:e0:9c:ce:6b:76:d3:5e:72:fe: 9d:9c:5e:39:97:85:72:db:79:7e:c0:30:f0:b7:cc: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:59:7A:1F:CC:FF:F8:06:0B:15:E2:C2:D6:B6:BB:03:43:4C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/652820d5-cd52-3cd7-88eb-e66f27e49326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.109.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b6:8d:b6:bc:ef:99:7e:2b:8e:29:6c:1c:42:39:06:72:1d: e5:18:1c:e8:09:a9:bf:07:c8:b5:5f:d8:ae:80:00:23:0a:9b: 0b:aa:2b:f2:f8:fd:06:d0:c7:e5:6d:b1:65:69:31:e6:6e:62: db:a8:ba:db:da:38:f1:c7:bb:ad:3d:36:a6:9a:7f:85:80:02: 66:18:0d:fd:a5:7d:63:81:87:0b:92:9a:eb:17:ea:bb:39:34: a0:e0:3c:28:b6:6e:37:00:f7:d5:1d:de:65:58:ff:53:7f:9e: 0e:64:ec:1e:2e:ea:d0:10:80:01:e2:e6:c9:43:7c:86:63:1d: 34:8e:f4:d5:85:47:ff:3a:b8:82:bb:8a:44:f4:4d:c2:e1:cd: 5d:fe:4e:c7:07:bc:ad:5b:be:e3:73:bc:0d:f4:82:8c:f8:d3: 6e:60:3e:92:e0:03:be:fd:e3:79:12:45:e9:21:d1:67:df:9a: 15:48:df:22:33:b9:3e:33:f7:8d:3e:74:f5:cc:b8:9d:4e:e8: 2a:9e:96:52:bc:c6:cc:a2:5b:7e:56:0d:a4:01:8d:3c:b5:33: a3:24:53:8d:6d:0f:33:d0:58:2b:03:7c:bf:4c:72:e3:c3:45: 8f:2b:6c:1c:0f:f9:ca:cf:d8:2a:b5:6f:d7:71:f4:03:dc:c9: 18:66:dc:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PV/GN3LCPreg01MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUxMjE0MzEwNloXDTI2MDgxMDE0MzEwNlowLzEtMCsGA1UEAxMk OGQ3MmQ4NzctZTBkZS00OTY4LWExZDQtY2MwZDc0MDI1N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqND9Oy/v00OqabMstjydgQ77s6lJNrfw4ws iynEfjf7NCsbXlQ1Zn0il9OpChIssTgVBiRLj6HppwYCDaXcfbUDb8QBy0YZA9Sp 1k3D7HWbkm9YG3oEWw41ZiXHfkMtiKkxQM/XAxYAt5tzjxdZV79RIxC+YflPpTzt uqTeHXrZIRHpAspblbb1klJqQ3dq+OfSb9U6oetWBXaZiDnM6Hyp4beY4JFaKAlC LJQU2PBDmXVawbArAAOxe+bIxbJdwDfR0PWHJwp8VB0tOihJFFpZp+nc97zJMTvn TO5kY18Fu/pDRjPgnM5rdtNecv6dnF45l4Vy23l+wDDwt8z91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmIWXofzP/4BgsV4sLWtrsDQ0wwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjUyODIwZDUtY2Q1Mi0z Y2Q3LTg4ZWItZTY2ZjI3ZTQ5MzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa2jba875l+K44pbBxCOQZyHeUYHOgJqb8HyLVf2K6AACMKmwuqK/L4 /QbQx+VtsWVpMeZuYtuoutvaOPHHu609Nqaaf4WAAmYYDf2lfWOBhwuSmusX6rs5 NKDgPCi2bjcA99Ud3mVY/1N/ng5k7B4u6tAQgAHi5slDfIZjHTSO9NWFR/86uIK7 ikT0TcLhzV3+TscHvK1bvuNzvA30goz4025gPpLgA77943kSRekh0WffmhVI3yIz uT4z940+dPXMuJ1O6CqellK8xsyiW35WDaQBjTy1M6MkU41tDzPQWCsDfL9McuPD RY8rbBwP+crP2Cq1b9dx9APcyRhm3BI= -----END CERTIFICATE-----Generated at Wed May 13 04:54:36 2026 by rpki-client