$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a66c770-b964-381d-895e-6501b4a4de25.roa File: 9a66c770-b964-381d-895e-6501b4a4de25.roa (raw, json) Hash identifier: fAz1HTT4CzxBkvwejNRjUuGBDC+AWyLBFqCYf2r6OIs= Subject key identifier: FC:24:9A:41:79:73:E5:DC:6C:4B:CF:DC:35:8E:49:EF:D3:97:E4:98 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E376489B4D9793A9008EBF580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a66c770-b964-381d-895e-6501b4a4de25.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 53107 IP address blocks: 38.20.0.0/23 maxlen: 24 38.51.134.0/23 maxlen: 24 38.52.128.0/23 maxlen: 24 38.210.208.0/22 maxlen: 24 38.210.212.0/23 maxlen: 24 38.211.128.0/22 maxlen: 24 38.255.122.0/23 maxlen: 24 204.157.108.0/22 maxlen: 24 209.61.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:89:b4:d9:79:3a:90:08:eb:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=99448337-6210-4d6e-885f-07d0a62ef36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:93:4f:79:7f:ea:32:3a:df:fa:fd:7e:4a: 60:0e:ad:52:fb:80:c7:b5:a0:91:e7:bf:25:d1:5b: fe:45:2e:2c:6f:7f:7c:1c:7e:dc:a1:c1:2c:4b:67: 3a:4b:d4:a5:0f:05:eb:5c:ba:90:3f:e6:25:ca:a4: a6:9a:3e:8a:5d:67:55:6c:52:55:68:08:48:ab:7a: 81:dc:32:c7:82:63:ff:07:40:96:db:e8:5f:e8:58: 28:cf:17:ee:46:78:ea:60:eb:54:85:aa:20:25:d3: ce:e8:28:5a:89:40:48:79:ab:29:24:c1:a8:1f:13: ae:5d:cf:ba:ae:d4:04:2f:81:9f:f1:bd:94:2b:e8: ea:cd:ae:c2:20:31:c0:61:f5:5c:01:17:20:0b:a7: a4:42:1a:5c:97:50:43:bf:ce:05:c2:b7:d8:ea:97: 1e:4e:63:78:99:07:78:4b:23:5b:0f:bb:76:6c:d8: 86:da:d4:ff:27:fb:d3:63:d5:c3:fb:af:70:82:ae: ad:ec:3b:a8:ef:04:3a:5e:a2:ad:ae:a0:54:c2:3b: 31:28:1b:20:81:86:0a:46:ba:85:d7:18:bb:99:46: 37:2e:af:41:9c:5a:2e:22:0a:3a:1b:d8:07:ed:dc: 04:e8:1f:3e:fe:a1:1f:bd:5e:47:f8:e3:56:00:25: 43:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:24:9A:41:79:73:E5:DC:6C:4B:CF:DC:35:8E:49:EF:D3:97:E4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a66c770-b964-381d-895e-6501b4a4de25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.0.0/23 38.51.134.0/23 38.52.128.0/23 38.210.208.0-38.210.213.255 38.211.128.0/22 38.255.122.0/23 204.157.108.0/22 209.61.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:77:c5:90:cb:a0:4b:93:ae:22:41:04:70:34:35:89:44:c7: 17:d3:8c:1c:5c:fa:9a:40:a1:b3:9f:92:ec:06:60:c4:3d:a8: 7c:d5:34:ff:e5:22:ac:96:a9:44:24:5e:b1:20:84:59:fc:26: af:c3:04:04:68:6c:f5:16:97:22:47:36:c3:a6:35:8f:da:f1: 30:74:e7:43:01:a4:93:e2:0a:d6:03:3b:df:18:e6:57:d3:6e: 35:ca:4f:50:03:0e:36:24:9a:72:d2:55:4c:5b:15:20:e5:68: 3d:66:41:d2:bb:9d:d5:1c:8a:2a:3f:f0:ac:1d:d2:7c:77:9e: c0:23:7b:43:97:4c:ec:68:93:ac:79:d5:78:ce:4d:d4:8c:86: ee:3a:d1:6f:3c:93:ce:13:a6:ae:98:17:93:ff:9b:2d:c0:77: de:15:24:2e:77:86:52:19:fb:54:12:ab:9e:8e:b8:a2:dc:a8: 14:06:0b:4d:19:b1:08:e6:2e:34:bd:23:60:f2:85:28:a8:88: cf:24:77:e8:0b:21:d2:cb:b4:fd:7a:4d:9b:77:45:a9:9f:db: ae:92:f5:b4:b2:12:ff:08:5a:bd:78:29:ca:26:4d:51:ca:b4: 15:53:9d:59:d7:19:3a:48:bd:6f:2a:a2:d3:e4:4a:f9:41:4b: 43:c7:e1:42 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE43ZIm02Xk6kAjr9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk OTk0NDgzMzctNjIxMC00ZDZlLTg4NWYtMDdkMGE2MmVmMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvKTT3l/6jI63/r9fkpgDq1S+4DHtaCR578l 0Vv+RS4sb398HH7cocEsS2c6S9SlDwXrXLqQP+YlyqSmmj6KXWdVbFJVaAhIq3qB 3DLHgmP/B0CW2+hf6FgozxfuRnjqYOtUhaogJdPO6ChaiUBIeaspJMGoHxOuXc+6 rtQEL4Gf8b2UK+jqza7CIDHAYfVcARcgC6ekQhpcl1BDv84FwrfY6pceTmN4mQd4 SyNbD7t2bNiG2tT/J/vTY9XD+69wgq6t7Duo7wQ6XqKtrqBUwjsxKBsggYYKRrqF 1xi7mUY3Lq9BnFouIgo6G9gH7dwE6B8+/qEfvV5H+ONWACVDoQIDAQABo4IDhzCC A4MwHQYDVR0OBBYEFPwkmkF5c+XcbEvP3DWOSe/Tl+SYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWE2NmM3NzAtYjk2NC0z ODFkLTg5NWUtNjUwMWI0YTRkZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBJhQAAwQB JjOGAwQBJjSAMAwDBAQm0tADBAEm0tQDBAIm04ADBAEm/3oDBALMnWwDBALRPSQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVHfFkMugS5OuIkEEcDQ1iUTHF9OMHFz6mkChs5+S7AZgxD2ofNU0 /+UirJapRCResSCEWfwmr8MEBGhs9RaXIkc2w6Y1j9rxMHTnQwGkk+IK1gM73xjm V9NuNcpPUAMONiSactJVTFsVIOVoPWZB0rud1RyKKj/wrB3SfHeewCN7Q5dM7GiT rHnVeM5N1IyG7jrRbzyTzhOmrpgXk/+bLcB33hUkLneGUhn7VBKrno64otyoFAYL TRmxCOYuNL0jYPKFKKiIzyR36Ash0su0/XpNm3dFqZ/brpL1tLIS/whavXgpyiZN Ucq0FVOdWdcZOki9byqi0+RK+UFLQ8fhQg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:23:45 2026 by rpki-client