$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87f1437b-697e-3322-948a-6e6ab77d1297.roa File: 87f1437b-697e-3322-948a-6e6ab77d1297.roa (raw, json) Hash identifier: tm21LHeBBGmukv8Z0asAPPByPfaNyQqmVM0oAphy2b0= Subject key identifier: FB:78:42:16:5F:96:FC:B9:A4:E5:0C:91:9E:1A:DE:52:3B:23:6C:E8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E8DEFBC27B3C36E3FC1CE0980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87f1437b-697e-3322-948a-6e6ab77d1297.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 273950 IP address blocks: 38.56.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bc:27:b3:c3:6e:3f:c1:ce:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=e3b11648-7009-4e2b-ad11-76e24e0fdde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:d0:0d:3a:72:2b:3f:76:6e:ef:22:c3:93: 19:d6:33:fa:8d:ef:c4:3a:31:35:3f:3f:8e:20:c8: 7e:80:59:57:85:de:26:70:4b:11:26:0a:2a:97:ab: 71:30:27:e2:55:ae:74:f1:90:ab:b7:56:dd:38:cf: bc:ce:9d:89:83:d7:e5:ec:5c:e0:11:f2:21:14:44: 1d:99:cb:ea:d6:19:b6:6f:f5:8b:a9:23:3c:97:d0: d5:13:23:4f:3b:eb:80:a8:18:38:3f:90:dc:f0:8c: 6b:41:5e:9e:d9:1c:89:29:13:c8:cd:77:1f:2b:4c: ad:68:ac:15:cf:51:63:58:55:d1:03:81:af:c3:61: f9:1a:88:30:e3:b8:78:a2:49:47:f0:2f:96:6b:7a: e8:f7:cd:dd:7b:82:2c:03:1e:08:b9:ec:36:2b:84: ab:3a:97:f5:c0:eb:82:f4:f4:56:60:85:48:63:9b: cf:de:77:4f:b0:ef:95:4d:7a:81:fa:65:ba:93:c4: 11:49:c6:7d:59:7f:b7:16:05:36:5d:ff:b2:65:22: ba:37:68:5d:d3:f1:8b:46:59:51:e2:c5:56:48:e8: 39:81:b4:86:ce:8b:18:58:aa:41:47:9d:2f:33:b8: 4d:c2:1c:69:d3:70:3c:f9:0a:1f:db:c5:23:b4:b8: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:42:16:5F:96:FC:B9:A4:E5:0C:91:9E:1A:DE:52:3B:23:6C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87f1437b-697e-3322-948a-6e6ab77d1297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:26:ad:eb:e7:cc:d3:8f:da:38:3d:53:96:12:22:e2:ee:ed: 3d:45:7a:88:3a:21:9d:c6:46:25:dc:f4:70:74:1d:88:94:c6: 64:f2:83:4b:e1:b5:da:9d:9e:40:b7:f9:46:2c:37:08:c4:45: d0:18:8c:af:27:69:dd:3e:5a:5a:44:a7:24:05:f4:64:86:8c: ce:6a:d0:ef:f3:63:8c:d5:fb:cb:9a:b9:8e:cc:e1:8d:59:4b: 65:99:1d:45:9f:35:57:6f:ea:d0:77:fb:6c:71:9a:7a:6f:14: 68:52:85:4e:cb:5b:ca:99:fc:6a:24:94:fc:e7:2b:de:df:97: 8e:35:05:5b:88:9f:59:27:58:07:dc:a5:4a:9f:3a:2c:d8:b2: 8b:c1:05:a4:d5:c3:fd:16:d2:74:92:7c:cd:a0:e0:2c:a0:01: 98:7a:89:a4:69:cb:a5:6f:e1:53:ef:67:49:f4:96:eb:ab:bc: 6c:96:40:03:fc:42:5d:87:81:b3:fd:95:74:71:e3:be:a3:3d: 1e:c5:10:b2:c4:e7:5f:db:a5:cf:78:7e:f8:27:89:d3:c6:cc: cc:8b:d1:3f:03:54:56:38:44:24:34:1e:6f:8f:0a:7c:26:64: 0e:13:2f:24:ee:8d:67:d6:4e:93:3d:0d:03:0a:bd:0a:4c:d7: ec:9a:d4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77wns8NuP8HOCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZTNiMTE2NDgtNzAwOS00ZTJiLWFkMTEtNzZlMjRlMGZkZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIHQDTpyKz92bu8iw5MZ1jP6je/EOjE1Pz+O IMh+gFlXhd4mcEsRJgoql6txMCfiVa508ZCrt1bdOM+8zp2Jg9fl7FzgEfIhFEQd mcvq1hm2b/WLqSM8l9DVEyNPO+uAqBg4P5Dc8IxrQV6e2RyJKRPIzXcfK0ytaKwV z1FjWFXRA4Gvw2H5Gogw47h4oklH8C+Wa3ro983de4IsAx4Iuew2K4SrOpf1wOuC 9PRWYIVIY5vP3ndPsO+VTXqB+mW6k8QRScZ9WX+3FgU2Xf+yZSK6N2hd0/GLRllR 4sVWSOg5gbSGzosYWKpBR50vM7hNwhxp03A8+Qof28UjtLhnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt4QhZflvy5pOUMkZ4a3lI7I2zoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdmMTQzN2ItNjk3ZS0z MzIyLTk0OGEtNmU2YWI3N2QxMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgmrevnzNOP2jg9U5YSIuLu7T1Feog6IZ3GRiXc9HB0HYiUxmTyg0vh tdqdnkC3+UYsNwjERdAYjK8nad0+WlpEpyQF9GSGjM5q0O/zY4zV+8uauY7M4Y1Z S2WZHUWfNVdv6tB3+2xxmnpvFGhShU7LW8qZ/GoklPznK97fl441BVuIn1knWAfc pUqfOizYsovBBaTVw/0W0nSSfM2g4CygAZh6iaRpy6Vv4VPvZ0n0luurvGyWQAP8 Ql2HgbP9lXRx476jPR7FELLE51/bpc94fvgnidPGzMyL0T8DVFY4RCQ0Hm+PCnwm ZA4TLyTujWfWTpM9DQMKvQpM1+ya1BM= -----END CERTIFICATE-----Generated at Tue Jul 21 20:53:39 2026 by rpki-client