$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa File: e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa (raw, json) Hash identifier: oSnsq3mcOv3hrwhUBSCOg5mNVbDcFuvv8O4qdZu95q8= Subject key identifier: A9:2D:0E:C5:20:D4:DB:D1:58:36:DD:D1:FC:E7:A8:BE:3A:CF:34:C2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E991A52CF558B9590E4E24880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa Signing time: Thu 23 Jul 2026 21:00:11 +0000 ROA not before: Thu 23 Jul 2026 21:00:11 +0000 ROA not after: Wed 21 Oct 2026 21:00:11 +0000 asID: 273300 IP address blocks: 38.19.111.0/24 maxlen: 24 38.236.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:1a:52:cf:55:8b:95:90:e4:e2:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 23 21:00:11 2026 GMT Not After : Oct 21 21:00:11 2026 GMT Subject: CN=f7a7879d-53a8-4116-9a54-b710da5df524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:60:ab:48:7c:84:e8:7c:b4:9e:0a:28:25: 44:a3:f1:4c:a3:24:ca:ec:cd:a4:7c:20:a3:20:6a: 50:ea:d8:de:8f:7a:24:ac:e5:3c:5c:3e:c6:14:38: 7f:d4:2e:0d:5e:6d:91:f4:d1:cb:1e:1f:fe:be:cf: 8f:e0:0e:cd:da:c4:0f:49:93:c0:d7:60:3d:b9:bf: 93:e7:70:e0:c5:eb:51:03:18:ab:0f:db:08:bb:18: a0:a8:4b:bd:a7:24:da:37:07:ac:24:6e:55:2a:9b: d7:df:7b:d2:a2:c1:a0:44:c1:a8:32:d2:e8:96:89: 81:36:fc:1f:5e:0e:df:97:fc:5f:7b:ce:a3:10:57: a4:fe:41:05:74:07:76:59:71:69:3d:0b:84:05:22: 71:b6:5e:5b:ca:98:e4:0f:da:22:45:7f:b6:8b:67: cd:38:e5:45:9c:3a:54:16:6c:7f:c8:61:9d:9b:6f: c3:c9:0b:2d:f5:42:96:af:b3:d8:59:c9:d8:f3:34: 9f:58:7f:ed:d3:9d:70:bb:99:ff:5c:cc:68:31:33: 06:d1:52:5a:a7:a9:a1:05:13:09:87:6f:d8:92:cf: 26:15:80:b5:2c:83:33:99:44:e9:14:2c:fb:82:ce: 0c:00:17:87:7a:b2:9a:5c:9f:d9:dd:f1:78:a3:29: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2D:0E:C5:20:D4:DB:D1:58:36:DD:D1:FC:E7:A8:BE:3A:CF:34:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.111.0/24 38.236.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:07:3d:76:06:45:ae:02:62:dc:02:4d:87:a6:ea:ba:26:22: ec:a7:78:ae:b4:4a:7f:2b:7a:0d:90:c6:54:99:a0:02:46:e6: 56:ef:1d:c2:f8:d3:3d:c6:87:aa:06:4a:6e:47:cb:a3:33:a0: 09:6f:41:74:75:a1:44:99:eb:cc:0a:c6:b4:b5:ff:b6:a4:11: 63:7b:99:7b:11:af:53:f9:da:90:03:13:bd:ae:d8:23:69:fa: a7:63:28:db:79:20:ab:c6:b5:00:43:b2:cd:f4:fd:f6:54:be: 08:66:56:89:de:d7:80:b2:f3:77:aa:a7:62:63:c1:4c:9f:81: 79:87:82:d6:fd:f7:13:26:67:12:86:8a:9f:61:da:13:45:16: a1:a8:5a:40:d9:79:3f:cd:90:1e:87:25:39:ea:5b:3a:ed:54: 79:30:91:8e:71:0b:e0:04:c4:df:e3:73:c7:1b:63:30:2b:81: 98:13:c3:3d:77:b5:fa:98:ca:1e:cd:b7:3e:a3:c9:30:8f:1a: 4d:1b:ff:71:09:9a:3c:a9:32:e0:77:57:50:1e:01:c2:ca:01: 0c:5c:43:fe:74:e8:bd:d3:c5:7c:6b:83:b0:af:10:39:b9:81: 4f:f0:c5:f9:8e:69:cc:b1:30:73:3c:29:f9:cf:09:eb:3a:a2: 3f:c2:ac:86 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6ZGlLPVYuVkOTiSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMzIxMDAxMVoXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk ZjdhNzg3OWQtNTNhOC00MTE2LTlhNTQtYjcxMGRhNWRmNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Vgq0h8hOh8tJ4KKCVEo/FMoyTK7M2kfCCj IGpQ6tjej3okrOU8XD7GFDh/1C4NXm2R9NHLHh/+vs+P4A7N2sQPSZPA12A9ub+T 53DgxetRAxirD9sIuxigqEu9pyTaNwesJG5VKpvX33vSosGgRMGoMtLolomBNvwf Xg7fl/xfe86jEFek/kEFdAd2WXFpPQuEBSJxtl5bypjkD9oiRX+2i2fNOOVFnDpU Fmx/yGGdm2/DyQst9UKWr7PYWcnY8zSfWH/t051wu5n/XMxoMTMG0VJap6mhBRMJ h2/Yks8mFYC1LIMzmUTpFCz7gs4MABeHerKaXJ/Z3fF4oynaIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKktDsUg1NvRWDbd0fznqL46zzTCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTY3MGRiZDgtZWU3ZC0z NzM2LWJhZjAtNTVhMWRkYTBjYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJhNvAwQB JuyoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKYHPXYGRa4CYtwCTYem6romIuyneK60Sn8reg2QxlSZoAJG 5lbvHcL40z3Gh6oGSm5Hy6MzoAlvQXR1oUSZ68wKxrS1/7akEWN7mXsRr1P52pAD E72u2CNp+qdjKNt5IKvGtQBDss30/fZUvghmVone14Cy83eqp2JjwUyfgXmHgtb9 9xMmZxKGip9h2hNFFqGoWkDZeT/NkB6HJTnqWzrtVHkwkY5xC+AExN/jc8cbYzAr gZgTwz13tfqYyh7Ntz6jyTCPGk0b/3EJmjypMuB3V1AeAcLKAQxcQ/506L3TxXxr g7CvEDm5gU/wxfmOacyxMHM8KfnPCes6oj/CrIY= -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:35 2026 by rpki-client