$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd458920-69ef-3576-8a89-be965d41c608.roa File: dd458920-69ef-3576-8a89-be965d41c608.roa (raw, json) Hash identifier: PRBEs/mXK9dWisRhO83xX7ai4qCTjPt6ApRB+KMrB0g= Subject key identifier: B2:32:04:F3:1A:07:29:90:46:2C:9D:25:39:57:68:62:DE:48:2E:3A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E5D14A00CB303547BA444EB80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd458920-69ef-3576-8a89-be965d41c608.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 401479 IP address blocks: 38.247.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a0:0c:b3:03:54:7b:a4:44:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=76ddf67f-5dba-4291-874b-59908d4d3fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:00:e6:c1:97:ab:ce:f1:28:90:4a:32:2e: 70:b7:ac:6d:8f:6c:29:95:43:2f:61:49:4e:66:ea: fb:4d:56:27:7f:23:b9:ce:8e:12:33:bf:f4:74:07: b5:63:89:73:5d:0f:85:e3:07:19:f2:5d:db:58:f6: f5:8c:73:fb:c2:31:80:f8:cd:f8:65:85:63:67:d1: c4:f3:2d:ca:a2:df:e1:be:06:0e:5d:b7:2e:15:14: a3:bf:f7:de:5f:0d:ad:82:94:0b:f2:88:ec:2e:bc: 02:25:1a:08:f7:69:86:2d:7a:ce:06:44:bb:74:4d: d6:39:c8:b7:79:97:a8:a6:2b:ec:bc:f7:69:33:61: c1:c3:58:fc:f7:ef:96:cb:b7:91:7e:85:73:ad:9f: fd:a9:be:d6:cf:98:12:f7:c7:be:ca:7c:51:dc:b2: 41:91:96:89:d2:a5:73:f2:e5:f6:71:2e:64:18:1e: 81:75:d3:ea:03:11:dc:76:f9:b3:4e:d5:82:6e:5d: 63:f1:d8:a0:9c:07:83:41:3d:60:c1:8f:47:f0:ab: 67:09:37:ef:e6:9a:01:6a:bd:82:85:7e:1a:b3:67: 69:49:51:e8:a5:e7:1c:5b:3f:c1:93:c4:f8:56:f3: 20:29:93:7e:2e:b5:a3:3a:19:ac:20:13:83:90:af: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:32:04:F3:1A:07:29:90:46:2C:9D:25:39:57:68:62:DE:48:2E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd458920-69ef-3576-8a89-be965d41c608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.247.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f7:23:3b:fb:52:d0:cd:d3:8f:b5:f8:ac:cc:3e:77:d4:34: 8e:33:12:3b:db:b2:f2:74:4f:6c:c5:fa:b5:07:d8:d1:0f:84: 68:f6:1f:07:1d:5d:0a:27:e6:91:29:b7:9b:b6:75:77:6e:46: 01:89:5d:4b:26:33:48:b5:48:c8:3b:9c:b1:c4:4d:38:31:28: 26:84:a0:3e:2f:b0:9b:a9:3b:a0:ca:05:a1:a6:2c:ae:bd:f2: 5d:cd:a5:71:19:b3:63:54:4b:d1:a9:72:9a:c7:f6:d9:08:8f: 84:13:13:66:1a:fe:09:d8:83:cd:aa:47:30:15:9f:e7:0f:72: 51:da:7a:54:17:87:31:86:5a:2c:5c:11:55:7c:b7:f4:e7:e5: 2d:77:f6:32:ea:5d:22:89:ee:71:09:3f:8f:eb:bc:ce:7c:9d: 2a:37:fa:da:9f:77:05:08:47:b8:5d:e8:aa:de:35:3c:82:c5: 7d:d1:46:d4:1c:a7:61:9a:4e:c3:f7:0d:a5:03:bd:55:6e:cd: ab:c6:10:9e:84:f5:17:f6:19:be:d4:4a:90:4f:35:e5:41:f3: d5:b3:78:e6:c1:3b:7d:94:a1:ed:06:ba:68:fe:49:0f:d1:33: 53:ba:8c:47:02:b6:2d:40:b6:4b:64:0b:60:f2:62:de:b2:05: a6:c4:2b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKAMswNUe6RE64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk NzZkZGY2N2YtNWRiYS00MjkxLTg3NGItNTk5MDhkNGQzZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS0A5sGXq87xKJBKMi5wt6xtj2wplUMvYUlO Zur7TVYnfyO5zo4SM7/0dAe1Y4lzXQ+F4wcZ8l3bWPb1jHP7wjGA+M34ZYVjZ9HE 8y3Kot/hvgYOXbcuFRSjv/feXw2tgpQL8ojsLrwCJRoI92mGLXrOBkS7dE3WOci3 eZeopivsvPdpM2HBw1j89++Wy7eRfoVzrZ/9qb7Wz5gS98e+ynxR3LJBkZaJ0qVz 8uX2cS5kGB6BddPqAxHcdvmzTtWCbl1j8dignAeDQT1gwY9H8KtnCTfv5poBar2C hX4as2dpSVHopeccWz/Bk8T4VvMgKZN+LrWjOhmsIBODkK/UOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIyBPMaBymQRiydJTlXaGLeSC46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGQ0NTg5MjAtNjllZi0z NTc2LThhODktYmU5NjVkNDFjNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJveAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj3Izv7UtDN04+1+KzMPnfUNI4zEjvbsvJ0T2zF+rUH2NEPhGj2Hwcd XQon5pEpt5u2dXduRgGJXUsmM0i1SMg7nLHETTgxKCaEoD4vsJupO6DKBaGmLK69 8l3NpXEZs2NUS9GpcprH9tkIj4QTE2Ya/gnYg82qRzAVn+cPclHaelQXhzGGWixc EVV8t/Tn5S139jLqXSKJ7nEJP4/rvM58nSo3+tqfdwUIR7hd6KreNTyCxX3RRtQc p2GaTsP3DaUDvVVuzavGEJ6E9Rf2Gb7USpBPNeVB89WzeObBO32Uoe0Gumj+SQ/R M1O6jEcCti1AtktkC2DyYt6yBabEK2Q= -----END CERTIFICATE-----Generated at Fri Jul 24 06:06:18 2026 by rpki-client