$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8314696-7a2d-3ada-a082-00b85e4276af.roa File: a8314696-7a2d-3ada-a082-00b85e4276af.roa (raw, json) Hash identifier: nQeN0wZyqxcaYBiDg6FKuBfIt8n0LYkmwLQ4H/599YA= Subject key identifier: 9D:72:F2:6D:21:57:7C:A4:99:2C:F3:EF:5B:12:B3:78:D7:C1:1A:CB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E736A142CED30EAE9E478E240 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8314696-7a2d-3ada-a082-00b85e4276af.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 0 IP address blocks: 38.246.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:14:2c:ed:30:ea:e9:e4:78:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=54644293-4ca7-4232-9e64-3a23ca920604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:90:b4:27:ef:fb:94:1f:e2:ae:59:be:f7: 55:3a:a6:b3:53:34:62:2d:d3:dc:73:60:61:ed:aa: 90:80:79:de:7a:35:b9:1e:74:8f:ef:e9:b6:84:46: df:bd:2a:12:48:4c:59:c6:dc:23:1f:10:04:8a:4b: 01:a6:63:c0:fd:a9:19:0e:79:38:3a:fc:82:71:67: ff:6f:e9:c8:2d:d1:dc:32:84:b1:24:37:b4:ea:c1: c5:6d:19:31:6b:d3:7a:fd:0a:91:65:48:3b:01:8a: b7:5f:e3:96:33:94:14:b6:f5:ca:cd:32:00:cc:c3: db:f6:d4:b2:a6:bf:6e:7b:cb:02:ca:30:67:70:93: 87:fb:bf:2d:a2:08:29:5b:02:60:06:03:e0:a2:32: a8:d3:f2:b9:3c:c9:b8:10:7d:66:7e:7b:92:2e:a2: f7:51:65:0b:3f:dc:a8:08:d5:35:a0:70:87:53:ab: 4e:cd:ff:44:60:b8:4e:ae:5b:a7:82:89:7d:ac:a8: b3:1a:e4:81:d1:d5:34:14:a9:4d:e3:c8:92:92:20: 32:d1:8c:07:45:5e:8b:00:34:05:33:3f:eb:a1:fd: 7f:9d:87:2b:f6:b4:74:54:13:3b:0c:33:09:e0:41: 64:68:bf:4c:de:5b:b4:e4:88:cc:4c:cd:34:bc:43: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:72:F2:6D:21:57:7C:A4:99:2C:F3:EF:5B:12:B3:78:D7:C1:1A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8314696-7a2d-3ada-a082-00b85e4276af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:92:b3:b8:8d:56:b5:d1:ea:63:7a:63:4c:47:49:01:75:d7: 45:7e:9c:e3:3d:a4:dc:4b:42:54:8c:ee:91:30:c8:dd:7b:18: 42:08:1b:f7:65:ba:23:bb:a3:4b:26:fd:46:de:7b:cb:d3:90: cf:de:d8:e7:18:84:d3:e0:4b:f7:eb:f1:78:80:5a:25:67:e8: a3:81:e9:47:98:2b:13:ee:45:22:0e:c5:2a:fb:97:70:51:42: da:fb:c3:4b:ce:9d:0f:59:ad:61:68:39:dd:74:68:eb:cb:88: 65:cb:71:fd:ec:ff:39:8a:29:8c:32:96:d1:04:fe:71:44:2e: 1d:ea:cd:e2:ba:94:df:8d:c0:dd:8f:e1:b2:6b:d4:fb:ca:e8: 2c:d2:5e:31:c9:1e:d5:96:59:e8:16:52:13:c3:3e:4a:7a:82: e6:b6:8e:20:61:48:cf:ca:32:34:57:55:52:ae:4f:b1:f0:e0: ea:1d:56:87:86:1d:ed:18:69:44:bd:bb:87:36:9a:f3:c2:69: e3:d5:77:6c:e7:bb:72:c3:57:45:a5:47:24:e1:50:99:d4:23: ca:70:89:14:a3:02:8e:e1:a4:51:9b:f4:9d:a1:26:fd:5b:92: 7b:41:f2:b4:3e:f5:f2:f7:02:cf:70:db:69:ce:a6:d4:49:65: ce:03:a9:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zahQs7TDq6eR44kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NTQ2NDQyOTMtNGNhNy00MjMyLTllNjQtM2EyM2NhOTIwNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWGQtCfv+5Qf4q5ZvvdVOqazUzRiLdPcc2Bh 7aqQgHneejW5HnSP7+m2hEbfvSoSSExZxtwjHxAEiksBpmPA/akZDnk4OvyCcWf/ b+nILdHcMoSxJDe06sHFbRkxa9N6/QqRZUg7AYq3X+OWM5QUtvXKzTIAzMPb9tSy pr9ue8sCyjBncJOH+78toggpWwJgBgPgojKo0/K5PMm4EH1mfnuSLqL3UWULP9yo CNU1oHCHU6tOzf9EYLhOrlungol9rKizGuSB0dU0FKlN48iSkiAy0YwHRV6LADQF Mz/rof1/nYcr9rR0VBM7DDMJ4EFkaL9M3lu05IjMTM00vEOugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1y8m0hV3ykmSzz71sSs3jXwRrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTgzMTQ2OTYtN2EyZC0z YWRhLWEwODItMDBiODVlNDI3NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJvZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiSs7iNVrXR6mN6Y0xHSQF110V+nOM9pNxLQlSM7pEwyN17GEIIG/dl uiO7o0sm/Ubee8vTkM/e2OcYhNPgS/fr8XiAWiVn6KOB6UeYKxPuRSIOxSr7l3BR Qtr7w0vOnQ9ZrWFoOd10aOvLiGXLcf3s/zmKKYwyltEE/nFELh3qzeK6lN+NwN2P 4bJr1PvK6CzSXjHJHtWWWegWUhPDPkp6gua2jiBhSM/KMjRXVVKuT7Hw4OodVoeG He0YaUS9u4c2mvPCaePVd2znu3LDV0WlRyThUJnUI8pwiRSjAo7hpFGb9J2hJv1b kntB8rQ+9fL3As9w22nOptRJZc4DqQw= -----END CERTIFICATE-----Generated at Thu Jul 23 21:48:35 2026 by rpki-client