$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa File: c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa (raw, json) Hash identifier: ah/MY73AInocyEY4ULkcFBpz4trAbZ0BbzNawvADgdE= Subject key identifier: 89:F4:B9:87:87:86:EC:2F:80:B1:7F:48:E5:EE:51:51:3E:0B:7B:B2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE3D054189837EF497CD2DD80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa Signing time: Wed 19 Aug 2026 15:16:46 +0000 ROA not before: Wed 19 Aug 2026 15:16:46 +0000 ROA not after: Tue 17 Nov 2026 16:16:46 +0000 asID: 264814 IP address blocks: 38.250.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:d0:54:18:98:37:ef:49:7c:d2:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 19 15:16:46 2026 GMT Not After : Nov 17 16:16:46 2026 GMT Subject: CN=b96a01f1-a34a-4ca8-963c-bc7c93600bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:58:c0:8a:02:21:f9:34:f0:bb:d0:50:7f: 7e:25:7c:08:05:28:26:08:f1:b3:c8:cc:5b:e2:76: ad:32:d4:15:b2:67:40:cf:03:6c:ed:89:99:f6:09: e0:7f:21:c7:97:b7:b4:b9:7b:cd:72:61:0c:dd:49: 6e:f3:0d:91:0c:40:08:30:86:fd:cd:a7:d4:29:77: da:59:d8:7c:d2:f9:44:f8:db:8c:01:6f:a0:5c:a9: 62:2e:65:7b:fe:dc:a5:fb:9a:58:de:14:b6:8a:cf: a3:c9:3e:53:d9:d4:89:2a:78:38:ec:eb:e9:f0:b6: 41:4e:3f:ee:f3:56:dc:e5:54:dc:5a:a4:11:d8:0b: c6:5e:36:b0:c2:e1:9a:6a:98:a2:d7:0d:bd:11:5d: 6f:41:67:f6:1f:0a:d9:1f:01:70:dc:d8:8f:3b:b6: 48:60:8a:37:5c:09:d0:70:aa:20:1d:e2:a2:91:6c: d8:52:7c:4f:c5:48:7f:4c:a2:10:69:62:bb:36:1a: f9:27:5b:2c:eb:25:f3:96:77:91:4c:71:30:77:a6: 5a:90:89:17:1f:45:15:22:83:6c:a4:bf:18:b4:33: 49:07:0e:bb:25:d0:99:81:eb:dc:05:f4:64:26:b4: 94:31:35:b2:34:b5:67:11:fa:f0:e6:6e:82:be:df: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:B9:87:87:86:EC:2F:80:B1:7F:48:E5:EE:51:51:3E:0B:7B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:be:73:4a:2c:5a:59:8c:35:d6:84:ee:30:78:ad:df:8b:55: 08:d1:6e:84:9d:c8:cb:39:76:ab:83:b7:c5:6a:00:ba:49:82: 66:6d:96:7f:62:17:7b:21:5f:81:40:c4:3a:d9:65:50:15:e7: 7a:3a:c3:85:92:b0:38:80:08:68:87:36:1c:df:cf:6b:0c:57: 10:e6:4e:de:89:da:31:a3:ed:ec:d0:61:ec:0a:32:af:1d:8a: 94:15:f3:7e:01:8b:7e:6f:6b:96:7a:40:03:15:3d:17:cc:e9: b1:9f:21:85:1f:68:c1:21:6a:62:4d:19:7e:f7:2d:d2:88:31: 7c:e4:ad:8d:17:d0:59:53:2e:7c:79:f6:9a:14:43:35:03:06: ca:a0:5a:5f:ae:0b:4c:c7:fc:0b:ba:f5:61:67:64:59:f7:d2: 67:a1:a0:97:a0:c1:7e:58:87:37:c5:5c:25:53:1f:76:f0:11: f2:2b:b0:b9:0c:97:62:55:2b:b4:2d:e3:11:68:9c:20:5d:3f: f1:85:23:9b:5c:99:8f:e3:6f:6a:fd:25:64:86:45:a6:cd:d2: a3:93:b3:20:94:10:ca:af:4e:11:0b:a3:ea:2d:3d:96:77:3b: 6d:41:50:d5:94:f1:d4:79:40:bd:75:52:48:82:58:19:51:d8: 74:10:07:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7j0FQYmDfvSXzS3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxOTE1MTY0NloXDTI2MTExNzE2MTY0NlowLzEtMCsGA1UEAxMk Yjk2YTAxZjEtYTM0YS00Y2E4LTk2M2MtYmM3YzkzNjAwYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGtYwIoCIfk08LvQUH9+JXwIBSgmCPGzyMxb 4natMtQVsmdAzwNs7YmZ9gngfyHHl7e0uXvNcmEM3Ulu8w2RDEAIMIb9zafUKXfa Wdh80vlE+NuMAW+gXKliLmV7/tyl+5pY3hS2is+jyT5T2dSJKng47Ovp8LZBTj/u 81bc5VTcWqQR2AvGXjawwuGaapii1w29EV1vQWf2HwrZHwFw3NiPO7ZIYIo3XAnQ cKogHeKikWzYUnxPxUh/TKIQaWK7Nhr5J1ss6yXzlneRTHEwd6ZakIkXH0UVIoNs pL8YtDNJBw67JdCZgevcBfRkJrSUMTWyNLVnEfrw5m6Cvt+a+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn0uYeHhuwvgLF/SOXuUVE+C3uyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzRjZjNmNmUtNTU3Zi0z MGI5LWJiNDQtNTA0ZDk5N2M0ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG+c0osWlmMNdaE7jB4rd+LVQjRboSdyMs5dquDt8VqALpJgmZtln9i F3shX4FAxDrZZVAV53o6w4WSsDiACGiHNhzfz2sMVxDmTt6J2jGj7ezQYewKMq8d ipQV834Bi35va5Z6QAMVPRfM6bGfIYUfaMEhamJNGX73LdKIMXzkrY0X0FlTLnx5 9poUQzUDBsqgWl+uC0zH/Au69WFnZFn30mehoJegwX5YhzfFXCVTH3bwEfIrsLkM l2JVK7Qt4xFonCBdP/GFI5tcmY/jb2r9JWSGRabN0qOTsyCUEMqvThELo+otPZZ3 O21BUNWU8dR5QL11UkiCWBlR2HQQB74= -----END CERTIFICATE-----Generated at Thu Sep 3 17:43:22 2026 by rpki-client