$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa File: 35f8cbc4-68be-3123-b822-aef3426ff483.roa (raw, json) Hash identifier: Xn2VvQHFNf66JVRr9l99dE0RfiIWyeNOils+Ks2iEV0= Subject key identifier: 01:F4:2E:91:20:D8:DD:D7:31:7C:B9:48:24:72:12:E8:47:BE:A9:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E86F50E50A58974A9480FF180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 265693 IP address blocks: 38.253.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:0e:50:a5:89:74:a9:48:0f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=c52d41f0-b57a-43b4-9f9b-33a21931e9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:09:02:fc:09:f5:b1:bd:7b:e4:56:ff:75: 4c:cf:56:4d:b2:af:b8:74:86:c8:05:41:43:cc:2b: e9:89:16:c6:9a:af:c5:eb:e2:10:4e:61:3d:6f:47: d4:d3:f5:c7:b3:1d:bf:ab:f8:78:2b:72:a9:9c:43: 75:47:f0:a9:11:c6:5c:68:7c:39:86:69:ba:e0:fc: 6c:00:a8:85:5b:b9:c6:47:42:65:b8:55:09:70:ee: 97:e3:36:4f:e0:0b:6f:b7:0d:44:d7:da:d5:4f:c9: 02:08:b5:8e:80:d9:6a:ac:e5:43:54:91:48:88:22: f6:fc:8e:d2:6c:22:7f:b0:05:97:56:37:99:21:8e: e5:18:5c:33:ca:15:b3:e1:0c:49:63:0d:12:e5:c7: 17:31:05:8e:ca:63:60:9f:33:be:9a:df:58:c9:a2: 80:49:b5:7e:fc:16:55:eb:d0:cb:f0:29:e8:44:15: db:ac:ce:92:0b:68:16:8c:fb:77:54:be:eb:f2:9a: 28:1d:01:a0:b4:b1:d4:b8:07:ef:80:26:f8:4b:de: 8e:67:59:e3:77:f9:fe:58:d6:75:db:8a:a9:a0:59: 9d:dc:b9:3d:a5:0f:92:87:06:56:2e:cc:40:9f:06: 24:24:05:10:ee:8d:a5:74:ea:01:dd:64:7d:46:1e: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:2E:91:20:D8:DD:D7:31:7C:B9:48:24:72:12:E8:47:BE:A9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a3:72:6f:da:27:6e:f2:6a:da:24:53:e4:d4:c0:a0:d4:01: 71:33:aa:51:ba:d7:d6:b4:f3:0a:e3:57:25:c2:a6:40:c1:68: 17:40:3b:0c:ca:54:27:5c:29:ff:d2:29:5a:63:c7:ef:59:d8: 22:d8:d5:0a:dd:cd:1e:27:5c:01:b5:0e:97:81:a8:81:14:5b: 37:6d:2f:f2:8e:64:bd:37:d7:e4:42:81:78:74:20:21:47:70: b0:7e:d3:02:91:14:2a:50:e2:e4:31:85:ad:4d:f1:37:9a:05: 30:3f:88:8d:5b:c8:22:65:88:b7:1c:c4:70:62:ce:0b:87:35: 6b:5b:33:27:b0:b1:85:d0:98:20:2b:df:7d:70:77:c8:ea:7d: 1e:cc:64:22:08:0c:f7:0e:6e:14:61:79:97:f5:bd:7c:71:cd: a1:36:be:b1:d1:c0:78:f3:e0:3b:42:04:0f:c6:79:1a:26:09: 4d:d7:0b:d6:17:76:2e:41:60:01:59:c0:29:ae:60:85:60:87: eb:b3:16:61:6b:c3:2c:fe:d9:68:49:b6:8a:6f:9c:96:ed:9c: c0:b3:4c:e0:a9:10:9b:64:67:e6:8d:e9:4c:3a:48:aa:d4:24: 18:92:92:72:bc:70:83:aa:8c:ab:d1:7b:a9:37:3d:98:e5:20: b7:40:52:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9Q5QpYl0qUgP8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk YzUyZDQxZjAtYjU3YS00M2I0LTlmOWItMzNhMjE5MzFlOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHgJAvwJ9bG9e+RW/3VMz1ZNsq+4dIbIBUFD zCvpiRbGmq/F6+IQTmE9b0fU0/XHsx2/q/h4K3KpnEN1R/CpEcZcaHw5hmm64Pxs AKiFW7nGR0JluFUJcO6X4zZP4Atvtw1E19rVT8kCCLWOgNlqrOVDVJFIiCL2/I7S bCJ/sAWXVjeZIY7lGFwzyhWz4QxJYw0S5ccXMQWOymNgnzO+mt9YyaKASbV+/BZV 69DL8CnoRBXbrM6SC2gWjPt3VL7r8pooHQGgtLHUuAfvgCb4S96OZ1njd/n+WNZ1 24qpoFmd3Lk9pQ+ShwZWLsxAnwYkJAUQ7o2ldOoB3WR9Rh7uCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH0LpEg2N3XMXy5SCRyEuhHvqmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzVmOGNiYzQtNjhiZS0z MTIzLWI4MjItYWVmMzQyNmZmNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv1MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSjcm/aJ27yatokU+TUwKDUAXEzqlG619a08wrjVyXCpkDBaBdAOwzK VCdcKf/SKVpjx+9Z2CLY1QrdzR4nXAG1DpeBqIEUWzdtL/KOZL031+RCgXh0ICFH cLB+0wKRFCpQ4uQxha1N8TeaBTA/iI1byCJliLccxHBizguHNWtbMyewsYXQmCAr 331wd8jqfR7MZCIIDPcObhRheZf1vXxxzaE2vrHRwHjz4DtCBA/GeRomCU3XC9YX di5BYAFZwCmuYIVgh+uzFmFrwyz+2WhJtopvnJbtnMCzTOCpEJtkZ+aN6Uw6SKrU JBiSknK8cIOqjKvRe6k3PZjlILdAUr8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:19:29 2026 by rpki-client