$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2e210b2-1d15-3824-b624-299b448d33a1.roa File: b2e210b2-1d15-3824-b624-299b448d33a1.roa (raw, json) Hash identifier: 4JDwgMyOGojUre4Oq1Z+9dXyZV1EXVkLELjVhYSh0B4= Subject key identifier: 9B:53:5A:91:8B:CF:51:58:FB:88:BB:4F:A0:BD:24:E6:E1:D5:B0:58 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E2AD4690A296CEE15B86C57E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2e210b2-1d15-3824-b624-299b448d33a1.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 271907 IP address blocks: 38.41.188.0/22 maxlen: 24 38.51.236.0/22 maxlen: 24 206.0.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:69:0a:29:6c:ee:15:b8:6c:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=b5ef17ed-f983-4f7b-ae4c-1c88037cdf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:57:9c:36:b2:cc:53:17:ca:dd:9b:36:39: 48:56:c1:f0:1a:cd:7d:f7:b2:97:a6:1e:c2:e9:29: 26:d5:62:1f:eb:90:62:6d:35:c0:29:b5:bc:2d:55: 5f:d4:9c:b9:89:31:e8:bc:63:bd:82:d0:0f:14:7f: 5f:05:86:a3:77:ec:2e:b9:f7:e4:39:63:35:5b:23: cd:1c:bb:a1:3b:13:88:d6:72:87:a0:a6:4f:ba:bc: 5e:c0:69:e7:25:ba:81:c3:5a:84:31:5f:55:89:b2: 45:14:a1:27:b2:57:05:6e:c3:b8:c3:15:6f:86:ef: c4:9b:48:1a:dd:a3:da:fb:3e:16:0b:6e:2b:05:22: 95:bd:52:de:21:43:41:e5:82:74:21:bc:c1:65:6a: 25:41:f5:dd:bb:e4:e6:75:16:4d:79:fa:bf:c1:2a: b5:8b:b0:fd:ab:c5:ef:2b:0d:e9:a1:73:22:be:73: c3:a1:b4:14:8d:6a:e4:a7:9c:7d:ba:66:92:24:bb: a1:4c:de:75:ff:50:96:e7:94:30:96:fd:ee:9f:ae: bc:9c:d6:31:78:41:a4:73:22:10:00:b7:9a:75:1e: f7:fd:8e:49:b6:db:ac:69:2a:75:89:27:dc:e3:df: f2:9e:05:c7:09:d6:67:97:f9:29:f0:56:be:44:5c: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:53:5A:91:8B:CF:51:58:FB:88:BB:4F:A0:BD:24:E6:E1:D5:B0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2e210b2-1d15-3824-b624-299b448d33a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.41.188.0/22 38.51.236.0/22 206.0.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ac:05:33:59:87:17:ea:63:c6:28:db:b4:b9:ae:4c:d6:02: 69:78:63:93:c2:4a:0d:b7:15:5e:8b:f7:38:6b:c9:e9:64:de: 25:21:b6:79:d5:70:47:22:76:10:10:9d:54:a9:ff:d8:e1:21: 83:2c:70:97:15:ce:44:28:31:20:b3:ac:df:40:28:0d:15:0c: 35:f4:f6:5b:fa:d7:08:c1:43:88:b4:18:a9:87:83:01:f7:ac: f2:2a:1b:43:35:60:59:8f:71:5c:1e:15:fd:20:3e:05:04:86: 11:e1:6e:84:05:3d:2f:27:13:0a:3a:3a:7f:ad:56:30:7f:16: 22:40:f5:bc:2d:59:de:ba:c0:f7:bb:35:f2:29:b7:d6:10:b6: 2f:16:d0:55:58:d7:f1:63:5d:18:26:0a:f4:f0:3b:11:7a:b6: e2:e6:28:e5:8f:e9:e6:01:41:7f:86:5a:1d:d8:95:e4:fb:ea: 57:41:61:bd:5d:9f:df:15:a5:1d:3e:1b:3b:ee:cc:72:d3:a0: aa:36:86:a8:b1:b0:33:09:fa:69:d8:60:ca:4a:aa:d1:af:d6: 89:f8:4b:01:d3:cc:fa:6a:28:4f:5a:41:8a:d8:be:19:68:5c: e9:98:70:11:35:75:91:a8:29:5c:cd:3b:06:49:db:13:f5:9f: 63:3c:78:1e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4q1GkKKWzuFbhsV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk YjVlZjE3ZWQtZjk4My00ZjdiLWFlNGMtMWM4ODAzN2NkZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HNXnDayzFMXyt2bNjlIVsHwGs1997KXph7C 6Skm1WIf65BibTXAKbW8LVVf1Jy5iTHovGO9gtAPFH9fBYajd+wuuffkOWM1WyPN HLuhOxOI1nKHoKZPurxewGnnJbqBw1qEMV9VibJFFKEnslcFbsO4wxVvhu/Em0ga 3aPa+z4WC24rBSKVvVLeIUNB5YJ0IbzBZWolQfXdu+TmdRZNefq/wSq1i7D9q8Xv Kw3poXMivnPDobQUjWrkp5x9umaSJLuhTN51/1CW55Qwlv3un668nNYxeEGkcyIQ ALeadR73/Y5JttusaSp1iSfc49/yngXHCdZnl/kp8Fa+RFzuVwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJtTWpGLz1FY+4i7T6C9JObh1bBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjJlMjEwYjItMWQxNS0z ODI0LWI2MjQtMjk5YjQ0OGQzM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJim8AwQC JjPsAwQFzgCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALusBTNZhxfqY8Yo27S5rkzWAml4Y5PCSg23FV6L 9zhryelk3iUhtnnVcEcidhAQnVSp/9jhIYMscJcVzkQoMSCzrN9AKA0VDDX09lv6 1wjBQ4i0GKmHgwH3rPIqG0M1YFmPcVweFf0gPgUEhhHhboQFPS8nEwo6On+tVjB/ FiJA9bwtWd66wPe7NfIpt9YQti8W0FVY1/FjXRgmCvTwOxF6tuLmKOWP6eYBQX+G Wh3YleT76ldBYb1dn98VpR0+GzvuzHLToKo2hqixsDMJ+mnYYMpKqtGv1on4SwHT zPpqKE9aQYrYvhloXOmYcBE1dZGoKVzNOwZJ2xP1n2M8eB4= -----END CERTIFICATE-----Generated at Thu Jul 23 20:23:23 2026 by rpki-client