$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ab27bb29-befe-3162-b463-1a67bff54f4a.roa File: ab27bb29-befe-3162-b463-1a67bff54f4a.roa (raw, json) Hash identifier: eMCC6LAyNPCIaBwJkH7/nCrw3AuHrc2Rp3YkxmmCmPk= Subject key identifier: B1:C4:7B:68:01:1C:C8:28:39:98:EF:27:59:90:F9:13:85:48:9D:16 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E3A2F7280F9C96083D545AEC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ab27bb29-befe-3162-b463-1a67bff54f4a.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 273207 IP address blocks: 38.66.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:72:80:f9:c9:60:83:d5:45:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=eeb0d278-ef75-4a41-8827-99e1acb0833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:05:b8:04:45:33:a9:81:af:17:ae:c1:b1: a7:43:ed:dc:0c:16:76:c0:74:7e:5b:82:c0:cf:3b: a7:e1:ad:bf:93:1a:f5:8d:c2:7b:5a:7a:ee:15:73: 42:6c:8a:75:8c:fb:ea:e5:7c:75:22:d8:23:d1:f8: 87:17:e1:f9:95:55:bb:54:95:f8:a1:ff:4c:19:2d: 31:19:56:6d:e8:d1:2c:4e:e8:f7:cc:64:4b:38:6f: b7:25:52:e0:fd:11:e9:0c:2c:57:9d:af:bd:77:75: 6a:15:29:95:e5:54:eb:09:b9:fd:58:cd:35:73:a7: 1a:ce:fb:3a:de:b0:55:99:c6:23:a9:e2:55:7a:e5: 4e:12:0d:63:fe:0f:e1:d6:b4:dc:b7:69:ac:79:05: 09:de:6c:6e:a2:2a:67:23:42:bd:7f:17:20:8a:84: db:b4:44:69:70:e2:d3:dd:7e:ac:e3:f2:96:dc:a4: 94:bd:c7:ac:94:3d:93:d9:00:40:47:ef:d7:ca:12: 1d:e0:7e:ef:65:05:d4:38:4a:9f:d5:f2:9b:66:48: 54:ed:9c:1e:e6:6d:7d:67:d2:40:bc:e0:d8:ad:7b: 23:fe:6d:92:a6:b6:63:b0:d2:28:a0:cb:a6:33:5a: 78:e8:66:86:5d:c2:38:54:81:6f:2d:0a:69:1f:c3: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C4:7B:68:01:1C:C8:28:39:98:EF:27:59:90:F9:13:85:48:9D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ab27bb29-befe-3162-b463-1a67bff54f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.66.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:46:8f:90:89:6f:03:c8:3f:da:1b:0d:bd:1f:49:96:e9:9e: a1:85:14:df:6a:c8:a4:5f:df:dc:19:b5:ef:fc:b0:c4:15:52: 8b:37:17:28:c7:59:d5:17:d5:80:b3:39:cd:1e:e7:d3:09:c1: b1:2c:07:f6:1a:95:a3:45:db:0c:5e:2b:45:fe:9e:28:37:b3: 8b:96:be:f2:0f:d2:1e:9e:e8:c3:e3:64:6b:97:10:ee:e1:4c: 39:23:9e:63:be:f9:fa:6b:48:87:68:87:e8:54:62:a7:43:29: ad:6f:a0:21:43:fb:77:dd:a7:cf:c8:c4:1e:95:f7:25:06:d1: b2:8a:3e:df:70:c9:de:49:78:d2:02:d4:5f:fa:b9:75:f0:34: 01:1d:58:27:56:23:5e:1f:a9:cf:27:7e:f2:8c:8c:f9:72:98: f6:88:3e:1b:ad:e1:04:17:75:0d:42:e2:22:15:e5:eb:e0:1b: f2:54:0d:ed:7c:df:cd:d6:90:1c:46:44:48:98:06:85:42:cf: cb:de:a7:8c:2d:4d:3e:db:62:79:be:99:1a:db:52:91:35:6c: ba:3f:be:6a:01:35:0b:6d:6d:78:80:55:af:14:01:43:f1:6a: 0b:c4:cb:2e:d9:5e:1c:7f:42:9e:5d:e6:bc:4f:00:d3:6f:94: dd:cc:0c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L3KA+clgg9VFrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZWViMGQyNzgtZWY3NS00YTQxLTg4MjctOTllMWFjYjA4MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibgFuARFM6mBrxeuwbGnQ+3cDBZ2wHR+W4LA zzun4a2/kxr1jcJ7WnruFXNCbIp1jPvq5Xx1Itgj0fiHF+H5lVW7VJX4of9MGS0x GVZt6NEsTuj3zGRLOG+3JVLg/RHpDCxXna+9d3VqFSmV5VTrCbn9WM01c6cazvs6 3rBVmcYjqeJVeuVOEg1j/g/h1rTct2mseQUJ3mxuoipnI0K9fxcgioTbtERpcOLT 3X6s4/KW3KSUvceslD2T2QBAR+/XyhId4H7vZQXUOEqf1fKbZkhU7Zwe5m19Z9JA vODYrXsj/m2SprZjsNIooMumM1p46GaGXcI4VIFvLQppH8O8jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHEe2gBHMgoOZjvJ1mQ+ROFSJ0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWIyN2JiMjktYmVmZS0z MTYyLWI0NjMtMWE2N2JmZjU0ZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkLOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFGj5CJbwPIP9obDb0fSZbpnqGFFN9qyKRf39wZte/8sMQVUos3FyjH WdUX1YCzOc0e59MJwbEsB/YalaNF2wxeK0X+nig3s4uWvvIP0h6e6MPjZGuXEO7h TDkjnmO++fprSIdoh+hUYqdDKa1voCFD+3fdp8/IxB6V9yUG0bKKPt9wyd5JeNIC 1F/6uXXwNAEdWCdWI14fqc8nfvKMjPlymPaIPhut4QQXdQ1C4iIV5evgG/JUDe18 383WkBxGREiYBoVCz8vep4wtTT7bYnm+mRrbUpE1bLo/vmoBNQttbXiAVa8UAUPx agvEyy7ZXhx/Qp5d5rxPANNvlN3MDFU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:23:04 2026 by rpki-client