$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bbff5ae4-ce48-3624-a1ba-0e45e20c6a26.roa File: bbff5ae4-ce48-3624-a1ba-0e45e20c6a26.roa (raw, json) Hash identifier: m+oy8ln4oh4bv2opHlngroO0rc03N314ktPhjyV9D9w= Subject key identifier: FC:58:DE:A3:03:71:73:5C:5D:8B:32:FE:A9:61:B6:FF:5B:57:34:19 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E906193DBE369C09414806680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bbff5ae4-ce48-3624-a1ba-0e45e20c6a26.roa Signing time: Mon 20 Jul 2026 18:01:31 +0000 ROA not before: Mon 20 Jul 2026 18:01:31 +0000 ROA not after: Sun 18 Oct 2026 18:01:31 +0000 asID: 272993 IP address blocks: 38.253.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:61:93:db:e3:69:c0:94:14:80:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 20 18:01:31 2026 GMT Not After : Oct 18 18:01:31 2026 GMT Subject: CN=ae6c18c2-0aaf-4a03-ae7b-2e0c032a782d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:e7:8d:51:8b:84:4d:d5:7f:e1:b1:8e:dc: ae:d8:b1:50:59:d6:c6:a6:e1:c8:53:0e:3e:e6:1e: d8:69:cb:c3:63:fb:ea:05:54:72:45:6b:84:96:d8: 2c:e3:c6:28:7f:36:3c:5a:3c:a7:0d:da:13:0b:45: 4b:9d:5d:16:e8:a8:e4:d0:22:fc:f8:15:64:f1:3f: 0e:e2:af:6f:1d:d1:d5:af:7d:4e:da:a3:a2:60:20: 8d:a3:9b:b9:8c:ed:fe:55:81:59:72:89:d2:17:47: 8e:96:f9:2e:31:95:8b:c1:79:6a:88:a3:06:27:85: c0:2b:f6:c2:f6:e2:c9:d1:90:06:9d:d7:4e:21:53: 41:98:32:6c:ff:24:77:90:4e:b6:0c:ba:a4:09:0a: c6:0d:c5:06:21:61:58:e6:9c:af:77:81:17:e5:df: 6b:f4:ce:06:58:58:0c:0a:52:78:ed:64:f8:3b:b9: 06:32:49:4f:3d:69:cf:a4:7d:ec:01:61:84:fe:4c: 0c:eb:ee:6f:99:b4:21:ba:de:23:7e:78:20:f8:12: 84:c0:25:74:da:38:24:26:c3:ba:3b:34:49:96:57: a0:4b:a7:34:11:2a:9b:d1:dc:62:24:53:ff:0c:55: cd:9f:10:08:70:25:f9:55:e1:da:0d:15:e1:6e:36: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:58:DE:A3:03:71:73:5C:5D:8B:32:FE:A9:61:B6:FF:5B:57:34:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bbff5ae4-ce48-3624-a1ba-0e45e20c6a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:eb:16:2c:96:ce:c2:c1:3d:c6:7e:b9:b6:20:8b:c8:34:4e: f4:26:aa:18:91:fb:2c:e0:dd:d5:cf:b0:17:27:08:19:51:68: 74:46:30:ee:0d:e8:7a:f8:94:67:db:29:e1:8b:1a:96:e3:d9: 9a:53:03:db:8d:ae:f0:52:b4:82:60:85:44:6d:4f:c2:fc:2f: 36:f0:2f:4a:11:29:65:d5:77:c9:6a:3f:b4:e6:42:4b:fa:97: eb:20:92:19:62:95:73:da:46:ff:eb:65:54:55:ff:ee:5f:1d: b0:8b:c3:f8:2e:c2:c4:8b:fc:50:0c:30:74:5c:70:ff:9c:5a: 74:a4:b1:e6:69:14:46:8b:7c:6e:7d:8c:43:d2:a9:c9:bc:71: 5c:bb:0c:2b:f3:71:8b:45:6d:07:0d:78:f3:b3:97:77:3e:04: 29:65:0c:51:a3:30:ac:37:ff:86:83:38:12:68:8c:d6:49:65: a1:30:5f:e1:7e:2e:39:29:01:19:c0:7d:32:64:f9:c2:87:a6: 7c:61:78:b1:f6:28:a2:44:00:66:49:95:b3:3a:0b:34:6d:19: 17:5d:0d:42:f1:17:df:36:4c:a4:c3:ba:f6:4b:36:9b:16:bc: eb:99:66:88:d7:c5:e3:4b:77:ea:cc:21:02:81:95:f4:e4:f0: ef:d7:af:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QYZPb42nAlBSAZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMDE4MDEzMVoXDTI2MTAxODE4MDEzMVowLzEtMCsGA1UEAxMk YWU2YzE4YzItMGFhZi00YTAzLWFlN2ItMmUwYzAzMmE3ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX/njVGLhE3Vf+Gxjtyu2LFQWdbGpuHIUw4+ 5h7YacvDY/vqBVRyRWuEltgs48YofzY8WjynDdoTC0VLnV0W6Kjk0CL8+BVk8T8O 4q9vHdHVr31O2qOiYCCNo5u5jO3+VYFZconSF0eOlvkuMZWLwXlqiKMGJ4XAK/bC 9uLJ0ZAGnddOIVNBmDJs/yR3kE62DLqkCQrGDcUGIWFY5pyvd4EX5d9r9M4GWFgM ClJ47WT4O7kGMklPPWnPpH3sAWGE/kwM6+5vmbQhut4jfngg+BKEwCV02jgkJsO6 OzRJllegS6c0ESqb0dxiJFP/DFXNnxAIcCX5VeHaDRXhbjYDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxY3qMDcXNcXYsy/qlhtv9bVzQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmJmZjVhZTQtY2U0OC0z NjI0LWExYmEtMGU0NWUyMGM2YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJv1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjrFiyWzsLBPcZ+ubYgi8g0TvQmqhiR+yzg3dXPsBcnCBlRaHRGMO4N 6Hr4lGfbKeGLGpbj2ZpTA9uNrvBStIJghURtT8L8LzbwL0oRKWXVd8lqP7TmQkv6 l+sgkhlilXPaRv/rZVRV/+5fHbCLw/guwsSL/FAMMHRccP+cWnSkseZpFEaLfG59 jEPSqcm8cVy7DCvzcYtFbQcNePOzl3c+BCllDFGjMKw3/4aDOBJojNZJZaEwX+F+ LjkpARnAfTJk+cKHpnxheLH2KKJEAGZJlbM6CzRtGRddDULxF982TKTDuvZLNpsW vOuZZojXxeNLd+rMIQKBlfTk8O/Xr1Y= -----END CERTIFICATE-----Generated at Thu Jul 23 20:19:57 2026 by rpki-client