$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/98d3aa1a-780b-372b-a64f-2921aa5cfe73.roa File: 98d3aa1a-780b-372b-a64f-2921aa5cfe73.roa (raw, json) Hash identifier: +OLLpOzVKYZhI1b7HQ71dN5idrEXehvrG+JDv+AmZCA= Subject key identifier: 53:EB:4E:02:F1:68:F5:B5:2C:4C:68:C4:86:F9:BC:15:82:9B:8D:38 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E90BA56E829DCD6E328734400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/98d3aa1a-780b-372b-a64f-2921aa5cfe73.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 273183 IP address blocks: 38.254.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:56:e8:29:dc:d6:e3:28:73:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=e49d22f1-fe36-4372-9f43-76754d67ac84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:93:73:f8:b1:4f:f8:72:3a:dd:9c:a8:4a: 96:86:17:e8:43:e6:68:a7:0f:c5:2a:ee:38:14:94: 82:f5:af:72:0d:c7:7b:46:4a:4a:8a:24:d0:9a:c1: 9e:62:e8:aa:63:6e:b8:25:8e:ac:4a:c3:c8:88:a5: ba:c1:75:3c:04:16:7a:e2:ab:11:c4:7d:b9:ac:4c: 54:e9:84:38:ad:65:24:9f:d0:15:30:a2:07:2d:6e: f7:11:5b:c1:ac:2f:62:63:59:3f:b2:9f:6d:4b:01: b6:18:db:dc:a5:cb:b3:65:60:36:39:37:17:39:f6: 74:a9:58:fc:92:17:96:d1:f0:c3:34:72:ee:a7:29: 9f:c9:b1:12:fe:18:d7:10:79:0e:35:02:6a:95:60: 07:0c:b5:fa:50:4a:6c:63:76:6b:1b:f2:f6:7c:e7: d2:4f:f4:a7:1a:ac:fb:33:a2:c2:41:b7:bd:72:dd: b5:95:28:56:ca:e5:47:b3:33:a4:21:76:5d:16:ed: a0:21:6b:58:13:77:74:22:3f:ce:f6:83:88:ff:99: 97:be:0b:31:89:fc:e7:c9:c8:b5:9a:dc:60:78:f2: fb:5a:97:a5:06:83:42:96:86:98:bc:dd:14:8a:6d: bc:2d:0b:aa:f8:c5:c6:57:bf:0f:45:b4:79:b6:a1: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:4E:02:F1:68:F5:B5:2C:4C:68:C4:86:F9:BC:15:82:9B:8D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/98d3aa1a-780b-372b-a64f-2921aa5cfe73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7d:10:c3:b5:80:eb:a6:98:7f:90:b4:79:dd:d9:9e:21:e2: 3b:f0:aa:a8:9b:06:74:b3:43:ff:d9:bc:f9:de:0d:ed:42:20: 1d:e4:98:98:07:c3:e7:ac:64:b7:a9:1b:ee:88:d5:78:49:28: ed:83:87:a4:1a:20:93:0f:1e:64:e3:7b:83:2c:70:92:f2:b9: 7b:1d:1a:18:cd:46:e7:bc:28:df:f0:e8:08:70:42:dc:dc:2b: 9d:c4:f6:8c:7e:36:0e:79:c7:b8:ce:e1:8a:a2:cc:44:fb:cd: 1d:47:2f:94:b3:7b:78:0e:d9:15:c2:86:b9:95:4a:f0:c2:26: 38:97:89:a9:2d:7c:00:35:0a:ab:6f:73:3f:cc:26:da:b4:5e: 36:1d:22:f4:d7:62:68:29:c1:5a:e7:49:5d:41:8e:53:26:ae: 54:e5:e9:cd:7c:11:8d:d2:31:b5:6a:37:15:56:e2:bc:14:3e: a7:e0:66:ae:f8:5b:71:7d:4f:92:3d:19:3d:25:fe:bc:dc:ba: 04:76:19:03:d1:ae:ad:78:f7:a9:c8:df:2b:ac:b7:8e:02:55: e0:c5:1b:67:0a:97:e4:9c:66:1d:fd:2b:15:46:90:58:20:bf: 68:c4:ed:53:69:be:31:17:ff:2d:6c:94:db:92:00:6b:17:fc: 78:f1:ae:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulboKdzW4yhzRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk ZTQ5ZDIyZjEtZmUzNi00MzcyLTlmNDMtNzY3NTRkNjdhYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4qTc/ixT/hyOt2cqEqWhhfoQ+Zopw/FKu44 FJSC9a9yDcd7RkpKiiTQmsGeYuiqY264JY6sSsPIiKW6wXU8BBZ64qsRxH25rExU 6YQ4rWUkn9AVMKIHLW73EVvBrC9iY1k/sp9tSwG2GNvcpcuzZWA2OTcXOfZ0qVj8 kheW0fDDNHLupymfybES/hjXEHkONQJqlWAHDLX6UEpsY3ZrG/L2fOfST/SnGqz7 M6LCQbe9ct21lShWyuVHszOkIXZdFu2gIWtYE3d0Ij/O9oOI/5mXvgsxifznyci1 mtxgePL7WpelBoNCloaYvN0Uim28LQuq+MXGV78PRbR5tqHgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPrTgLxaPW1LExoxIb5vBWCm404MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOThkM2FhMWEtNzgwYi0z NzJiLWE2NGYtMjkyMWFhNWNmZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJv58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV9EMO1gOummH+QtHnd2Z4h4jvwqqibBnSzQ//ZvPneDe1CIB3kmJgH w+esZLepG+6I1XhJKO2Dh6QaIJMPHmTje4MscJLyuXsdGhjNRue8KN/w6AhwQtzc K53E9ox+Ng55x7jO4YqizET7zR1HL5Sze3gO2RXChrmVSvDCJjiXiaktfAA1Cqtv cz/MJtq0XjYdIvTXYmgpwVrnSV1BjlMmrlTl6c18EY3SMbVqNxVW4rwUPqfgZq74 W3F9T5I9GT0l/rzcugR2GQPRrq1496nI3yust44CVeDFG2cKl+ScZh39KxVGkFgg v2jE7VNpvjEX/y1slNuSAGsX/HjxrpM= -----END CERTIFICATE-----Generated at Fri Jul 24 09:02:17 2026 by rpki-client