$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8234b229-334e-3774-afdd-ca5208ee6a4a.roa File: 8234b229-334e-3774-afdd-ca5208ee6a4a.roa (raw, json) Hash identifier: c3wiEAmR3sfBh8i2Snj/s6Y99oSQOemE3YwBmbCTZyE= Subject key identifier: C0:AF:1C:00:5F:13:EA:DC:89:E7:75:C8:8F:4A:A8:D2:64:C7:35:CD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E8B2513F5EE15430D9D7E64B0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8234b229-334e-3774-afdd-ca5208ee6a4a.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 31775 IP address blocks: 38.49.64.0/19 maxlen: 24 38.130.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:25:13:f5:ee:15:43:0d:9d:7e:64:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=f32773bf-eb42-4279-a347-8a33ffad9512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:c1:55:5b:c5:0a:60:36:79:3e:51:43:33: dc:13:b9:aa:4d:bd:25:4a:7a:b7:3a:e6:0a:b5:1a: 9e:0f:44:df:53:59:32:49:55:fa:24:4d:46:2b:b7: 6a:8b:1c:7e:f8:4d:2e:47:78:e7:62:fc:1c:a2:83: d9:20:1d:65:28:01:b3:e3:48:c6:f2:ad:fb:d2:96: 3c:36:ba:32:70:9d:b5:fb:2a:76:3d:68:87:df:14: f4:c9:7d:06:d5:f2:6d:64:cd:90:f0:b3:54:09:d7: 86:4d:04:79:12:c8:86:05:49:56:e9:8b:63:2b:6a: ae:62:c6:07:0c:59:43:6f:ba:97:ff:6c:05:3d:83: e3:e7:c7:ce:1d:48:ff:57:cd:bd:51:87:60:96:62: 89:34:f9:42:e9:ec:15:e3:25:89:9e:e5:21:dc:82: d6:57:68:51:76:09:26:b1:b6:e5:fd:1d:a8:4e:3d: 9c:48:eb:5e:5b:c3:47:41:85:69:21:55:8e:5c:83: 62:95:8c:ab:0c:28:1f:54:c4:69:b0:16:cb:75:13: fa:7e:ce:b2:9d:fa:f9:1d:4c:d7:74:b9:4e:e8:9c: 49:69:b7:58:30:e3:81:cf:fa:ad:92:25:d5:44:ac: 38:61:0d:a0:f3:ae:ce:e7:6c:f7:5d:e8:be:e0:c7: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AF:1C:00:5F:13:EA:DC:89:E7:75:C8:8F:4A:A8:D2:64:C7:35:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8234b229-334e-3774-afdd-ca5208ee6a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.49.64.0/19 38.130.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c5:b9:b5:43:f6:71:b1:f8:89:fb:ba:19:fd:88:93:e5:95: fe:49:62:ec:bd:25:c1:0f:36:c4:63:b1:de:f0:2b:d8:18:17: 7f:23:58:ca:23:36:42:9d:52:b1:9a:ba:81:b6:61:50:28:16: dd:ff:33:7e:98:10:7e:14:5a:0a:da:43:0a:7c:a4:39:08:e1: b8:fe:ee:c0:9e:04:d1:c3:9d:de:cb:20:fd:ab:0b:1f:8d:a3: d0:e7:a5:58:2a:ff:e0:d4:63:0a:ff:a7:24:51:07:b3:af:ab: 30:45:d8:fa:35:32:59:96:18:51:60:fd:44:6c:93:b0:7e:8c: 2d:fc:5d:5b:a0:ce:e0:46:55:31:f2:15:54:d9:77:91:2f:59: 3f:a8:00:0c:57:e9:b2:c6:e8:56:ad:ef:33:ac:e1:2b:2a:b3: 7a:92:53:07:12:78:f2:1d:b5:0b:d1:55:48:fd:37:a9:62:58: a6:68:2e:4a:b0:9b:bb:b6:fb:4d:39:0f:99:0f:6e:fe:27:37: 9d:81:09:6c:70:42:33:2b:8e:d7:2b:b0:dc:8a:35:1a:eb:73: 0a:85:2f:c9:01:fa:67:93:f6:0b:f2:87:14:5a:6b:43:27:48: 71:e3:f7:de:62:66:7a:ba:93:ac:8f:ff:93:aa:df:5b:09:02: a4:b6:eb:e3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6LJRP17hVDDZ1+ZLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk ZjMyNzczYmYtZWI0Mi00Mjc5LWEzNDctOGEzM2ZmYWQ5NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHBVVvFCmA2eT5RQzPcE7mqTb0lSnq3OuYK tRqeD0TfU1kySVX6JE1GK7dqixx++E0uR3jnYvwcooPZIB1lKAGz40jG8q370pY8 NroycJ21+yp2PWiH3xT0yX0G1fJtZM2Q8LNUCdeGTQR5EsiGBUlW6YtjK2quYsYH DFlDb7qX/2wFPYPj58fOHUj/V829UYdglmKJNPlC6ewV4yWJnuUh3ILWV2hRdgkm sbbl/R2oTj2cSOteW8NHQYVpIVWOXINilYyrDCgfVMRpsBbLdRP6fs6ynfr5HUzX dLlO6JxJabdYMOOBz/qtkiXVRKw4YQ2g867O52z3Xei+4Me4KwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMCvHABfE+rcied1yI9KqNJkxzXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODIzNGIyMjktMzM0ZS0z Nzc0LWFmZGQtY2E1MjA4ZWU2YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJjFAAwQF JoLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGfFubVD9nGx+In7uhn9iJPllf5JYuy9JcEPNsRjsd7wK9gY F38jWMojNkKdUrGauoG2YVAoFt3/M36YEH4UWgraQwp8pDkI4bj+7sCeBNHDnd7L IP2rCx+No9DnpVgq/+DUYwr/pyRRB7OvqzBF2Po1MlmWGFFg/URsk7B+jC38XVug zuBGVTHyFVTZd5EvWT+oAAxX6bLG6Fat7zOs4Ssqs3qSUwcSePIdtQvRVUj9N6li WKZoLkqwm7u2+005D5kPbv4nN52BCWxwQjMrjtcrsNyKNRrrcwqFL8kB+meT9gvy hxRaa0MnSHHj995iZnq6k6yP/5Oq31sJAqS26+M= -----END CERTIFICATE-----Generated at Fri Jul 24 00:42:42 2026 by rpki-client