$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2e33da4-95fa-3bcf-a77c-edb016639eca.roa File: d2e33da4-95fa-3bcf-a77c-edb016639eca.roa (raw, json) Hash identifier: 3FDayha6IpL8EFdRWJwCMA257ux+i+LOoKteIhycIMc= Subject key identifier: 13:EA:48:23:68:F7:98:A5:B9:81:CA:C4:D2:E4:81:85:B3:A6:29:F8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E577F416FED51FEEBF28FDB28 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2e33da4-95fa-3bcf-a77c-edb016639eca.roa Signing time: Tue 30 Jun 2026 09:00:12 +0000 ROA not before: Tue 30 Jun 2026 09:00:12 +0000 ROA not after: Mon 28 Sep 2026 09:00:12 +0000 asID: 266853 IP address blocks: 38.172.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:7f:41:6f:ed:51:fe:eb:f2:8f:db:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 30 09:00:12 2026 GMT Not After : Sep 28 09:00:12 2026 GMT Subject: CN=ba54195f-217d-43ca-b6bf-7d0f42461ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5d:8f:7b:c7:d1:ad:5b:5e:b7:e4:d7:de:6f: 07:ad:36:f1:e7:f6:ed:4f:0c:8d:6a:06:7e:f9:f4: 63:33:fa:e1:30:d2:c3:4c:b5:ba:db:84:63:d0:b9: 2e:c7:b6:01:71:d8:9b:15:1b:ce:e7:9f:56:13:e5: ba:2d:be:b2:fd:c1:65:73:8c:89:0f:72:2e:af:44: 65:62:84:d2:fe:86:4e:6f:2e:0b:20:51:08:8f:58: e6:10:19:4e:cc:f9:96:e8:71:41:64:01:65:50:a6: 8f:b9:08:c6:67:f9:44:44:44:8a:61:b0:5f:f7:c8: 63:bd:74:92:26:e4:f4:8d:b1:ac:35:20:ea:b1:42: 98:03:ac:e7:5a:e9:44:ff:0c:e5:4c:aa:ee:4c:13: e2:22:a7:58:2f:d4:77:4d:64:f1:d5:fd:4f:19:da: 00:b3:ee:8a:52:ba:c3:cf:a0:42:df:a9:02:eb:a2: 3e:6f:f3:01:5c:54:f4:67:bf:91:29:74:ef:71:88: df:2f:49:c6:28:12:68:7b:e9:7b:12:be:34:1b:bb: 2c:ec:f9:fb:5c:21:41:82:04:e5:3e:64:15:9c:23: da:bf:0a:b8:a6:39:25:eb:46:0f:c6:3e:81:21:97: 6f:7c:f8:3f:b1:c5:bf:99:a5:60:c4:fc:f2:8a:5e: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EA:48:23:68:F7:98:A5:B9:81:CA:C4:D2:E4:81:85:B3:A6:29:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2e33da4-95fa-3bcf-a77c-edb016639eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:06:c1:e5:8a:ec:cf:55:76:42:66:f1:71:c9:e4:f4:70:64: c7:83:a5:f0:f0:c7:29:8d:64:76:0c:79:2b:33:6d:6d:31:bb: ec:db:3b:8e:70:45:33:59:ac:bf:1d:5d:56:94:de:b8:8e:c7: a4:89:87:68:55:d7:b3:24:77:6e:c5:df:18:f6:3e:b0:49:f8: 61:b0:2c:9e:ef:9d:1f:9d:68:4e:35:90:e7:f6:ea:1e:e1:1b: 99:0e:38:d1:25:2c:a7:1a:df:ae:0d:50:c5:ea:b3:97:15:05: 64:ad:28:c3:85:27:71:a9:44:71:fc:8d:65:0a:83:29:6d:ae: 3c:95:e1:0a:d2:61:00:b0:a1:1b:49:82:c2:22:ef:fe:6d:05: 88:da:2e:99:1f:fd:42:99:e4:59:61:f4:42:de:eb:26:19:f1: 29:c5:2f:a3:37:e8:61:e5:9d:11:58:83:30:07:c7:75:a3:c1: 7a:16:35:c3:b4:59:08:5a:09:8b:25:b8:20:72:8d:aa:b3:87: 54:1c:a9:b0:70:11:f3:6a:08:a7:9f:aa:81:23:a7:5f:b4:0d: b3:c8:64:28:cf:27:0b:45:61:47:92:73:96:a2:3a:81:a9:13: ba:18:18:00:66:d8:be:02:fb:37:22:b1:0e:5a:33:88:81:d9: d5:b9:50:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0Fv7VH+6/KP2ygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk YmE1NDE5NWYtMjE3ZC00M2NhLWI2YmYtN2QwZjQyNDYxZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF2Pe8fRrVtet+TX3m8HrTbx5/btTwyNagZ+ +fRjM/rhMNLDTLW624Rj0Lkux7YBcdibFRvO559WE+W6Lb6y/cFlc4yJD3Iur0Rl YoTS/oZOby4LIFEIj1jmEBlOzPmW6HFBZAFlUKaPuQjGZ/lERESKYbBf98hjvXSS JuT0jbGsNSDqsUKYA6znWulE/wzlTKruTBPiIqdYL9R3TWTx1f1PGdoAs+6KUrrD z6BC36kC66I+b/MBXFT0Z7+RKXTvcYjfL0nGKBJoe+l7Er40G7ss7Pn7XCFBggTl PmQVnCPavwq4pjkl60YPxj6BIZdvfPg/scW/maVgxPzyil7LvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPqSCNo95iluYHKxNLkgYWzpin4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDJlMzNkYTQtOTVmYS0z YmNmLWE3N2MtZWRiMDE2NjM5ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcGweWK7M9VdkJm8XHJ5PRwZMeDpfDwxymNZHYMeSszbW0xu+zbO45w RTNZrL8dXVaU3riOx6SJh2hV17Mkd27F3xj2PrBJ+GGwLJ7vnR+daE41kOf26h7h G5kOONElLKca364NUMXqs5cVBWStKMOFJ3GpRHH8jWUKgyltrjyV4QrSYQCwoRtJ gsIi7/5tBYjaLpkf/UKZ5Flh9ELe6yYZ8SnFL6M36GHlnRFYgzAHx3WjwXoWNcO0 WQhaCYsluCByjaqzh1QcqbBwEfNqCKefqoEjp1+0DbPIZCjPJwtFYUeSc5aiOoGp E7oYGABm2L4C+zcisQ5aM4iB2dW5UMo= -----END CERTIFICATE-----Generated at Thu Jul 23 21:42:29 2026 by rpki-client