$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f3cb3ba3-333e-3e51-b0b9-4d6240cb0d61.roa File: f3cb3ba3-333e-3e51-b0b9-4d6240cb0d61.roa (raw, json) Hash identifier: iZIV5C7mfNQCcx+7GG4N++60Ty8FKEg+5nxJAn2Ip9E= Subject key identifier: 33:04:BF:C0:DB:01:BB:B1:57:4D:E7:B8:9E:53:85:C6:A5:5A:94:2D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E97B4FA84DA458F41F8944200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f3cb3ba3-333e-3e51-b0b9-4d6240cb0d61.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 399064 IP address blocks: 38.3.220.0/24 maxlen: 24 38.19.249.0/24 maxlen: 24 38.65.7.0/24 maxlen: 24 38.111.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:fa:84:da:45:8f:41:f8:94:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=9ac7e154-4327-4137-bc35-eb2371c40211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:18:72:dc:d6:7f:f1:22:d3:72:06:53:42: 73:4d:ec:87:fa:64:49:83:18:3c:8c:86:31:78:02: 0c:c8:c6:ed:2f:91:3b:48:5b:2d:11:d3:ce:c0:7b: 07:10:4f:2d:e1:92:c9:85:5b:2b:2a:0d:06:6b:3f: 2b:8a:22:82:70:1a:40:4f:ec:5b:bd:d7:c8:36:22: 8a:90:47:1a:1e:ad:a0:e4:f7:8c:bc:0e:20:3c:f8: d9:4e:37:9b:4f:df:b6:1e:37:13:31:fe:3a:e4:9c: 2d:87:6f:5a:a9:77:cc:08:38:ff:e6:36:8c:dc:bf: c8:d9:fd:a4:4c:9c:b3:43:96:d8:36:f6:1b:7a:26: 41:5e:9f:c4:a6:c3:1c:f9:69:f3:62:a8:ae:d5:7c: 46:8f:b9:92:f7:2d:c9:78:5c:37:37:e4:18:fe:ad: f2:e5:ee:07:25:cb:7d:58:22:01:6b:8c:7a:bf:3a: b1:b9:c5:81:af:4b:fd:c3:5e:06:4d:3f:c6:29:01: 68:f8:2b:58:80:d2:f4:b0:c5:d2:dd:e2:a2:d7:cc: e0:51:f1:c9:e1:aa:6d:f9:f4:3c:df:9e:29:d5:1b: 80:d8:7c:2a:cf:d8:2f:cc:1a:85:ab:53:07:a2:c1: 83:61:22:8e:b9:13:40:72:0d:7d:c9:5f:b0:81:5e: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:BF:C0:DB:01:BB:B1:57:4D:E7:B8:9E:53:85:C6:A5:5A:94:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f3cb3ba3-333e-3e51-b0b9-4d6240cb0d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.220.0/24 38.19.249.0/24 38.65.7.0/24 38.111.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f5:a5:80:dd:60:3d:78:e6:14:ca:90:58:34:ba:55:10:fb: 29:bc:0a:17:8a:7d:50:1b:ab:4a:29:54:ad:37:72:ef:af:b4: e4:e4:6e:02:65:5c:65:ea:60:be:33:8b:5c:c2:b6:14:91:4d: 73:b6:bb:fe:4f:a8:65:f1:17:df:44:a1:17:5b:f4:3a:b1:d8: 58:62:a4:29:0d:75:42:d1:76:87:c3:01:33:d3:6d:63:60:c2: f0:48:ae:55:b9:c1:84:6d:13:38:93:e4:e1:ba:4d:7e:be:ab: 3f:d0:c3:ca:31:54:a2:fd:2a:42:ad:e1:53:9a:17:b6:da:9c: 79:e8:a0:59:eb:e0:b9:cc:7c:c4:d3:65:6b:39:aa:b6:4b:f0: 40:a6:78:b9:b7:53:fd:00:82:19:31:9b:e1:f0:39:d7:e4:18: 7f:3a:f4:16:85:d6:6f:52:f3:41:fa:de:a2:19:fb:67:ab:17: 48:0f:42:0c:c7:6c:53:2d:1f:4e:f3:05:b0:b2:be:17:a8:16: ff:6a:70:89:11:2a:41:49:6b:77:27:a2:9b:32:e2:90:ea:b2: 35:cd:40:d9:c6:6e:5c:97:fb:85:57:33:30:cc:6b:03:80:a9: dc:a4:cf:76:de:bf:00:e0:ce:47:02:07:14:1a:fd:65:3d:13: 61:0a:24:22 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE6XtPqE2kWPQfiUQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk OWFjN2UxNTQtNDMyNy00MTM3LWJjMzUtZWIyMzcxYzQwMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQUYctzWf/Ei03IGU0JzTeyH+mRJgxg8jIYx eAIMyMbtL5E7SFstEdPOwHsHEE8t4ZLJhVsrKg0Gaz8riiKCcBpAT+xbvdfINiKK kEcaHq2g5PeMvA4gPPjZTjebT9+2HjcTMf465Jwth29aqXfMCDj/5jaM3L/I2f2k TJyzQ5bYNvYbeiZBXp/EpsMc+WnzYqiu1XxGj7mS9y3JeFw3N+QY/q3y5e4HJct9 WCIBa4x6vzqxucWBr0v9w14GTT/GKQFo+CtYgNL0sMXS3eKi18zgUfHJ4apt+fQ8 354p1RuA2Hwqz9gvzBqFq1MHosGDYSKOuRNAcg19yV+wgV6a1wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFDMEv8DbAbuxV03nuJ5ThcalWpQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjNjYjNiYTMtMzMzZS0z ZTUxLWIwYjktNGQ2MjQwY2IwZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJgPcAwQA JhP5AwQAJkEHAwQAJm/KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEj1pYDdYD145hTKkFg0ulUQ+ym8CheK fVAbq0opVK03cu+vtOTkbgJlXGXqYL4zi1zCthSRTXO2u/5PqGXxF99EoRdb9Dqx 2FhipCkNdULRdofDATPTbWNgwvBIrlW5wYRtEziT5OG6TX6+qz/Qw8oxVKL9KkKt 4VOaF7banHnooFnr4LnMfMTTZWs5qrZL8ECmeLm3U/0Aghkxm+HwOdfkGH869BaF 1m9S80H63qIZ+2erF0gPQgzHbFMtH07zBbCyvheoFv9qcIkRKkFJa3cnopsy4pDq sjXNQNnGblyX+4VXMzDMawOAqdykz3bevwDgzkcCBxQa/WU9E2EKJCI= -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:56 2026 by rpki-client