$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa File: 38eed031-2f26-37d2-9433-38e44e47e238.roa (raw, json) Hash identifier: Yv+uxp7otACWjnFc9k4WoYAjEjVP590NO12/kwSuX50= Subject key identifier: 43:CC:FC:A6:E2:F5:CB:04:87:D0:60:D0:BE:52:E1:D7:C2:85:19:87 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584EF18204B5975908553FB6A100 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 51964 IP address blocks: 196.27.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:04:b5:97:59:08:55:3f:b6:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=bb15dae1-892e-4a7b-9583-76bafd6af1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:b9:97:ad:1c:06:f6:f6:00:d7:78:22:83: 9a:87:c6:a7:7d:cb:04:80:56:30:70:58:57:5c:bb: f1:a2:a7:95:cc:fe:c8:60:7d:58:f4:b9:de:ef:65: 04:ea:01:b7:21:d1:db:1c:a4:22:68:af:ec:77:da: 16:2a:dc:8d:91:e9:b5:74:0b:ef:0d:0d:02:ae:03: ab:a8:97:e8:4d:16:0f:c0:4f:f8:69:33:65:29:60: 2e:52:51:94:07:c8:e8:26:7e:3a:a7:9f:bc:0b:47: 09:42:b5:08:fe:1a:1e:ba:ff:e5:8a:9a:a0:3d:2a: 83:af:4a:6d:f7:c6:bf:e2:75:e0:c6:7b:c0:2e:8a: 4c:82:c2:8e:27:65:c1:11:0d:0e:84:81:25:96:df: 99:ee:53:0e:51:f6:e4:02:d5:04:2f:ea:7a:d6:40: c9:2c:d1:26:87:f1:5e:de:f3:56:31:4c:3c:0c:f6: 15:10:3f:6d:71:1c:22:03:e4:18:be:f6:a9:b7:04: 0e:70:41:bb:e3:9e:6a:71:3e:17:03:ea:39:7d:6d: 14:3d:13:70:7a:90:90:28:46:39:a7:e9:00:ff:e5: 52:ce:a2:86:26:db:59:34:d9:a3:36:f1:16:91:03: b4:cd:6a:8b:28:15:f9:3d:24:99:d3:c7:51:c3:0e: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:FC:A6:E2:F5:CB:04:87:D0:60:D0:BE:52:E1:D7:C2:85:19:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 196.27.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:08:2f:64:15:97:b9:d8:0f:5d:0a:cf:c8:15:00:16:24:73: 2a:51:a9:80:bb:24:6b:6f:82:5f:8c:a4:16:f8:20:d4:58:98: 5b:ad:0b:66:80:58:9c:ca:a4:4c:35:3c:b6:96:3c:0b:ca:68: 2f:fb:fe:db:f4:3c:01:47:c4:a1:af:10:d6:de:53:f8:bd:3f: 88:eb:06:bc:2c:e2:3b:b7:b0:db:6d:66:59:d7:f4:d6:06:1c: 83:95:ae:cb:9e:25:e2:1e:d8:03:50:ef:01:04:21:05:54:d7: 72:51:b5:dd:b8:99:16:07:8b:fd:df:80:4e:84:70:0b:9c:03: 8f:cd:87:30:f2:86:c0:a2:93:9f:83:f6:6d:f2:a8:d3:10:55: 99:f6:ba:95:04:93:22:e4:5b:7b:50:2a:f3:2c:25:fc:19:3a: 48:ad:d6:91:1a:0a:73:4d:a7:66:00:3a:e5:69:86:4d:01:32: 73:a5:63:4d:5f:a3:39:8b:73:d9:4c:b0:33:ae:21:ed:f8:2a: 75:30:71:28:65:9a:19:58:b2:6e:24:f1:3d:20:c9:e7:6e:6d: ce:cf:01:a4:a3:08:7f:95:a4:cc:69:6f:06:47:88:3d:a1:22: 73:da:d9:44:12:b3:17:0b:99:11:d8:b7:38:8f:80:02:71:32: 30:f7:41:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggS1l1kIVT+2oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YmIxNWRhZTEtODkyZS00YTdiLTk1ODMtNzZiYWZkNmFmMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yC5l60cBvb2ANd4IoOah8anfcsEgFYwcFhX XLvxoqeVzP7IYH1Y9Lne72UE6gG3IdHbHKQiaK/sd9oWKtyNkem1dAvvDQ0CrgOr qJfoTRYPwE/4aTNlKWAuUlGUB8joJn46p5+8C0cJQrUI/hoeuv/lipqgPSqDr0pt 98a/4nXgxnvALopMgsKOJ2XBEQ0OhIEllt+Z7lMOUfbkAtUEL+p61kDJLNEmh/Fe 3vNWMUw8DPYVED9tcRwiA+QYvvaptwQOcEG7455qcT4XA+o5fW0UPRNwepCQKEY5 p+kA/+VSzqKGJttZNNmjNvEWkQO0zWqLKBX5PSSZ08dRww7VdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPM/Kbi9csEh9Bg0L5S4dfChRmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMzhlZWQwMzEtMmYyNi0z N2QyLTk0MzMtMzhlNDRlNDdlMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxBsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQIL2QVl7nYD10Kz8gVABYkcypRqYC7JGtvgl+MpBb4INRYmFutC2aA WJzKpEw1PLaWPAvKaC/7/tv0PAFHxKGvENbeU/i9P4jrBrws4ju3sNttZlnX9NYG HIOVrsueJeIe2ANQ7wEEIQVU13JRtd24mRYHi/3fgE6EcAucA4/NhzDyhsCik5+D 9m3yqNMQVZn2upUEkyLkW3tQKvMsJfwZOkit1pEaCnNNp2YAOuVphk0BMnOlY01f ozmLc9lMsDOuIe34KnUwcShlmhlYsm4k8T0gyedubc7PAaSjCH+VpMxpbwZHiD2h InPa2UQSsxcLmRHYtziPgAJxMjD3QR4= -----END CERTIFICATE-----Generated at Thu Sep 10 20:41:54 2026 by rpki-client