$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ac9d9668-88b5-3af6-8980-55aed7c67c88.roa File: ac9d9668-88b5-3af6-8980-55aed7c67c88.roa (raw, json) Hash identifier: vcKe4jT8j/RrsqvCr182yIsph5I8h2IRzZxw6NLt6wY= Subject key identifier: CA:E6:5C:8F:61:2A:67:11:9C:3E:71:E8:C2:97:EE:07:FE:53:B0:92 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E989B6EF8AB9DBDDF043D6A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ac9d9668-88b5-3af6-8980-55aed7c67c88.roa Signing time: Thu 23 Jul 2026 16:44:34 +0000 ROA not before: Thu 23 Jul 2026 16:44:34 +0000 ROA not after: Wed 21 Oct 2026 16:44:34 +0000 asID: 397924 IP address blocks: 38.111.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:9b:6e:f8:ab:9d:bd:df:04:3d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 23 16:44:34 2026 GMT Not After : Oct 21 16:44:34 2026 GMT Subject: CN=2383595b-74a6-471f-ac4e-64d3281d1800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:f0:fe:2b:0e:33:08:66:21:13:04:60:34: aa:ea:1f:42:e8:a7:21:10:01:ce:00:cf:60:19:bc: a5:a8:8d:06:ed:4c:b0:09:93:9e:49:78:da:f3:49: 00:9d:36:8c:09:8f:71:87:54:38:2d:55:4d:66:24: b7:ed:2f:f2:88:8b:89:7b:b3:f5:b0:0a:0c:0c:19: 44:37:10:22:f3:7f:90:ab:5e:01:d4:e6:4e:dd:0a: c4:f6:b1:4f:ba:5f:80:83:e5:fb:19:a8:b1:de:e2: ab:c1:f3:03:17:47:c6:05:79:50:c8:c6:fb:50:ca: 4f:70:3d:0e:c5:61:4c:ce:4a:2d:de:bc:41:24:23: 64:21:d9:df:07:c7:d3:c0:34:7c:9d:6c:2c:45:24: 50:7c:f0:63:6f:cb:19:a6:9b:9f:e1:02:ef:ae:43: e1:a5:e4:42:aa:c9:62:6a:f3:4c:1a:ef:b0:17:3f: 59:bb:a7:8e:2d:47:c0:3d:2f:45:30:d8:24:70:98: 4a:0c:db:ac:4c:17:f9:05:31:12:51:9e:75:d8:0a: bc:db:ac:2f:05:8c:4c:4d:fa:38:ed:47:ef:29:6e: 67:c6:6b:e1:61:8d:28:88:24:70:17:b6:15:0c:85: a2:0a:80:cd:39:25:5e:53:01:5d:83:22:ca:8b:8a: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E6:5C:8F:61:2A:67:11:9C:3E:71:E8:C2:97:EE:07:FE:53:B0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ac9d9668-88b5-3af6-8980-55aed7c67c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.111.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:e7:54:86:ad:47:37:f5:74:a9:06:9c:ad:6a:fb:d8:2a:c4: 6f:f4:2c:5e:45:3e:4c:28:c6:d9:32:e0:ab:d2:ae:8e:4a:06: 87:eb:3c:e6:48:2a:b9:81:f3:90:12:4a:02:c3:b7:53:25:72: 7e:ba:6e:63:ed:bb:6e:2a:bd:3d:35:19:ef:96:46:17:36:70: 98:6c:16:4d:08:76:6f:2b:49:f2:8c:e9:15:e4:7d:95:77:b4: 88:e0:49:94:28:cb:90:08:cc:8e:df:90:0d:cd:ba:24:2d:68: d2:4d:88:67:09:9f:61:69:e1:61:47:50:41:13:08:84:6d:76: cb:29:b1:bb:a9:6f:a2:b5:c5:cd:d5:d4:ef:fc:da:84:6b:e6: c2:e0:7f:fc:ce:63:d1:b3:17:50:3e:78:16:ac:68:3c:71:e1: 93:66:19:ac:f6:93:d5:4e:8b:d0:f2:d0:4d:0a:bf:af:a1:f6: ac:98:76:de:3c:2b:7b:76:c9:94:27:4c:6f:7b:b3:4d:28:a3: e8:3f:be:c6:f4:3c:50:50:ec:a7:25:3b:58:70:90:ef:4b:95: e0:a7:0f:d3:ed:39:d1:26:4c:67:dc:ca:e7:b7:e1:a7:f6:86: 14:84:87:2b:59:6c:a0:39:c0:f1:82:1f:98:a0:41:8c:f2:a2: f3:09:c2:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Ym274q5293wQ9agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMzE2NDQzNFoXDTI2MTAyMTE2NDQzNFowLzEtMCsGA1UEAxMk MjM4MzU5NWItNzRhNi00NzFmLWFjNGUtNjRkMzI4MWQxODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLzw/isOMwhmIRMEYDSq6h9C6KchEAHOAM9g GbylqI0G7UywCZOeSXja80kAnTaMCY9xh1Q4LVVNZiS37S/yiIuJe7P1sAoMDBlE NxAi83+Qq14B1OZO3QrE9rFPul+Ag+X7Gaix3uKrwfMDF0fGBXlQyMb7UMpPcD0O xWFMzkot3rxBJCNkIdnfB8fTwDR8nWwsRSRQfPBjb8sZppuf4QLvrkPhpeRCqsli avNMGu+wFz9Zu6eOLUfAPS9FMNgkcJhKDNusTBf5BTESUZ512Aq826wvBYxMTfo4 7UfvKW5nxmvhYY0oiCRwF7YVDIWiCoDNOSVeUwFdgyLKi4p5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrmXI9hKmcRnD5x6MKX7gf+U7CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWM5ZDk2NjgtODhiNS0z YWY2LTg5ODAtNTVhZWQ3YzY3Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXnVIatRzf1dKkGnK1q+9gqxG/0LF5FPkwoxtky4KvSro5KBofrPOZI KrmB85ASSgLDt1Mlcn66bmPtu24qvT01Ge+WRhc2cJhsFk0Idm8rSfKM6RXkfZV3 tIjgSZQoy5AIzI7fkA3NuiQtaNJNiGcJn2Fp4WFHUEETCIRtdsspsbupb6K1xc3V 1O/82oRr5sLgf/zOY9GzF1A+eBasaDxx4ZNmGaz2k9VOi9Dy0E0Kv6+h9qyYdt48 K3t2yZQnTG97s00oo+g/vsb0PFBQ7KclO1hwkO9LleCnD9PtOdEmTGfcyue34af2 hhSEhytZbKA5wPGCH5igQYzyovMJwpA= -----END CERTIFICATE-----Generated at Thu Jul 23 20:19:40 2026 by rpki-client