$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78a2af95-1d85-336f-aba6-539b5835ba9c.roa File: 78a2af95-1d85-336f-aba6-539b5835ba9c.roa (raw, json) Hash identifier: VfPG1otqIHzZ6tLtMoQsh9exWePeJ6zbIQHcLbgxDhc= Subject key identifier: D3:E9:97:0A:06:DC:AC:53:F0:6F:C9:2A:AE:F4:F2:4E:73:00:EC:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E534F3C1F2DE163C8720D65E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78a2af95-1d85-336f-aba6-539b5835ba9c.roa Signing time: Sun 28 Jun 2026 21:00:11 +0000 ROA not before: Sun 28 Jun 2026 21:00:11 +0000 ROA not after: Sat 26 Sep 2026 21:00:11 +0000 asID: 272339 IP address blocks: 38.236.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:53:4f:3c:1f:2d:e1:63:c8:72:0d:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 28 21:00:11 2026 GMT Not After : Sep 26 21:00:11 2026 GMT Subject: CN=fdb997be-5e6a-44ba-8c75-397130fe48ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:e3:37:76:04:12:9d:fc:ba:76:2d:5e:31: 6c:b5:ca:20:11:32:28:d9:b7:0e:ee:52:c7:78:40: 30:ce:06:3b:d9:db:46:86:0c:2d:6b:54:c0:84:72: ec:94:dc:20:bb:7a:09:b6:28:aa:ff:48:2a:35:1a: dd:4e:7c:1e:fe:51:b9:18:e6:41:13:9d:7d:75:c8: 2a:59:71:7e:32:74:ae:e2:c6:ba:bb:34:96:15:fd: 46:6b:01:69:33:df:bf:c0:54:80:96:3a:ee:cf:97: 8e:24:24:fa:95:75:cb:89:b0:61:93:4a:37:51:7d: 37:53:a9:c4:5d:d9:b2:7a:fc:56:55:e4:5b:18:be: b0:80:1f:b3:64:27:09:bd:18:fa:39:db:7a:ca:54: 28:d7:8c:7b:92:f8:8e:15:b3:58:83:4d:18:e5:a0: 2a:9a:0e:78:0f:09:86:92:7f:25:c2:85:0d:99:05: 0a:f9:a4:10:a0:b2:1e:5f:cd:3e:ba:52:3d:79:3a: 06:85:5a:14:f3:d6:6e:02:bd:bc:09:b4:ae:25:d3: 3b:a3:93:df:6a:2d:81:32:be:e8:9c:67:0e:6b:42: 1b:d8:9f:8c:57:76:8c:24:79:1d:9d:7e:7b:dc:6c: 69:b9:0d:be:f5:ae:be:66:28:6e:37:0a:69:e8:96: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:97:0A:06:DC:AC:53:F0:6F:C9:2A:AE:F4:F2:4E:73:00:EC:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78a2af95-1d85-336f-aba6-539b5835ba9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:32:72:65:60:ec:35:e2:30:81:38:92:ca:26:f7:c2:3c:e0: 00:0d:56:cb:0e:56:73:0c:2b:81:71:de:90:a0:85:e9:51:2e: 8b:34:53:c1:75:13:5e:33:62:db:1e:bb:d7:fc:25:d3:dd:46: 47:e4:9f:c4:77:c5:a0:ba:ef:19:d3:3f:00:04:b7:95:06:d6: 9b:8d:7d:c3:74:46:53:54:67:a7:aa:af:18:c7:14:b9:98:3b: 0b:57:d8:c9:15:ac:24:ff:a1:43:9b:20:50:43:01:ca:46:5f: 1d:93:eb:5e:26:05:39:e9:66:fd:b1:eb:3b:dc:40:75:91:4e: 1b:73:73:d8:c6:c0:74:1a:fb:fc:28:0b:dc:e2:b6:60:51:2e: 37:0d:39:77:4b:7b:78:d9:ef:71:6e:5c:7d:21:6e:21:75:05: af:71:c7:e7:cf:1e:7e:28:7d:45:01:ef:a4:73:20:19:aa:70: da:5d:76:c6:60:cb:d5:12:21:a8:27:35:3a:4a:93:f4:06:15: 3c:b4:71:52:7e:f8:0f:48:89:8d:52:42:c7:05:21:38:d8:d1: a8:2e:42:eb:b4:c4:29:3c:af:69:56:84:54:6b:36:23:3b:7a: 99:d1:e7:73:b9:2f:78:be:73:6d:1c:4e:06:83:a7:86:a3:94: 42:d4:71:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5TTzwfLeFjyHINZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk ZmRiOTk3YmUtNWU2YS00NGJhLThjNzUtMzk3MTMwZmU0OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpTjN3YEEp38unYtXjFstcogETIo2bcO7lLH eEAwzgY72dtGhgwta1TAhHLslNwgu3oJtiiq/0gqNRrdTnwe/lG5GOZBE519dcgq WXF+MnSu4sa6uzSWFf1GawFpM9+/wFSAljruz5eOJCT6lXXLibBhk0o3UX03U6nE XdmyevxWVeRbGL6wgB+zZCcJvRj6Odt6ylQo14x7kviOFbNYg00Y5aAqmg54DwmG kn8lwoUNmQUK+aQQoLIeX80+ulI9eToGhVoU89ZuAr28CbSuJdM7o5Pfai2BMr7o nGcOa0Ib2J+MV3aMJHkdnX573GxpuQ2+9a6+ZihuNwpp6JYCXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPplwoG3KxT8G/JKq708k5zAOz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzhhMmFmOTUtMWQ4NS0z MzZmLWFiYTYtNTM5YjU4MzViYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJux4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAycmVg7DXiMIE4ksom98I84AANVssOVnMMK4Fx3pCghelRLos0U8F1 E14zYtseu9f8JdPdRkfkn8R3xaC67xnTPwAEt5UG1puNfcN0RlNUZ6eqrxjHFLmY OwtX2MkVrCT/oUObIFBDAcpGXx2T614mBTnpZv2x6zvcQHWRThtzc9jGwHQa+/wo C9zitmBRLjcNOXdLe3jZ73FuXH0hbiF1Ba9xx+fPHn4ofUUB76RzIBmqcNpddsZg y9USIagnNTpKk/QGFTy0cVJ++A9IiY1SQscFITjY0aguQuu0xCk8r2lWhFRrNiM7 epnR53O5L3i+c20cTgaDp4ajlELUcTY= -----END CERTIFICATE-----Generated at Thu Jul 23 23:18:18 2026 by rpki-client