$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa File: 0952f43e-16b7-3030-95a3-48a989059742.roa (raw, json) Hash identifier: CIc2TZ/JqkAJ0PsnMwYB5P0Ow8rzWqju4c077Rz0O20= Subject key identifier: 33:A9:90:A1:FC:65:2A:FA:CD:AC:8E:22:1C:12:3E:E9:55:CF:0C:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E09E96E0181E4719742F4E000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa Signing time: Tue 02 Jun 2026 14:01:07 +0000 ROA not before: Tue 02 Jun 2026 14:01:07 +0000 ROA not after: Thu 27 Aug 2026 13:00:10 +0000 asID: 270165 IP address blocks: 38.19.204.0/22 maxlen: 24 38.43.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:e9:6e:01:81:e4:71:97:42:f4:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 2 14:01:07 2026 GMT Not After : Aug 27 13:00:10 2026 GMT Subject: CN=12752744-7611-489f-a7d6-c6c6caf0ee2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:ce:5a:37:dc:45:b7:81:6b:e7:83:4e:d5: 5a:90:ba:c4:14:d9:82:eb:47:0d:3d:41:ac:55:54: 5e:e6:be:07:b1:bc:ac:81:5f:68:74:cb:c1:55:59: 48:d7:1e:19:27:e1:d7:46:0d:6d:c3:d5:b8:31:35: ae:6c:19:87:f6:51:d5:05:99:24:65:e5:e9:3b:01: 04:24:48:6e:62:b3:12:95:40:b5:1d:5e:d3:68:2b: d0:22:d3:fd:ac:f4:8f:5f:c9:ed:68:60:25:9d:62: a7:4e:ec:1d:3a:53:36:96:f7:cf:7e:2a:d7:79:d5: 40:b4:f7:11:77:5c:fc:b7:0b:6f:62:4f:67:77:cc: 6b:cd:bb:2f:ca:00:41:f5:1a:68:33:87:65:86:17: ce:e8:c9:af:b0:f3:52:95:3e:39:46:94:05:eb:45: e3:ab:5b:8a:41:41:e3:20:9a:e7:e1:4d:04:15:32: 03:fd:90:ad:29:1e:f0:ad:16:ac:08:27:93:35:74: 49:c9:72:1b:28:18:a8:5c:a8:45:b4:77:88:71:e5: ed:dd:b6:04:aa:6a:0f:f6:f0:67:a3:10:0d:b2:31: 29:86:a9:6a:73:5a:83:ba:4c:a8:c7:8f:8b:d3:81: f5:f3:7b:e9:b8:69:f0:2a:7e:8f:10:c6:b0:46:41: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:90:A1:FC:65:2A:FA:CD:AC:8E:22:1C:12:3E:E9:55:CF:0C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.204.0/22 38.43.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:33:e8:2a:7e:1d:25:5e:b2:1a:ac:ab:61:10:24:a6:ea:e5: 87:13:25:d8:15:83:a6:67:98:d8:e6:73:0c:58:8c:bf:35:62: 5f:87:bd:22:0c:6d:77:96:6e:71:88:c4:89:2a:48:8f:4a:44: 70:cc:08:bb:57:fd:02:c4:12:ec:3e:3f:24:a0:03:4a:64:82: e7:b4:84:8a:cb:1b:39:6f:4c:12:df:b5:2f:33:a2:91:5a:bf: e4:7e:c1:fd:73:48:80:7a:9a:df:a7:21:85:00:cd:fe:c2:52: b0:1f:84:02:be:6b:96:48:1d:4f:46:18:96:d2:8e:45:5c:77: 36:2f:be:80:2a:93:13:28:c6:6b:df:3a:84:d8:ed:f0:6a:34: 4b:10:40:7a:02:ee:5b:d7:97:c3:c3:0f:cc:37:de:4c:78:56: 90:53:91:cc:f4:4c:6b:06:08:d9:c2:bb:19:42:3c:ab:72:6e: 59:e9:2e:53:34:85:07:29:d6:28:0e:4c:2a:1e:4c:8b:1d:69: a5:7a:d0:44:de:cc:40:0c:3a:f3:1c:5e:6b:3b:64:1a:97:17: d5:c5:56:e3:16:44:81:02:51:d2:d2:bf:78:a6:17:7f:35:51: 26:74:31:8e:5e:41:0b:11:bc:05:f2:80:9d:02:b9:15:5b:2d: 75:29:c9:f0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4J6W4BgeRxl0L04AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYwMjE0MDEwN1oXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk MTI3NTI3NDQtNzYxMS00ODlmLWE3ZDYtYzZjNmNhZjBlZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVjOWjfcRbeBa+eDTtVakLrEFNmC60cNPUGs VVRe5r4HsbysgV9odMvBVVlI1x4ZJ+HXRg1tw9W4MTWubBmH9lHVBZkkZeXpOwEE JEhuYrMSlUC1HV7TaCvQItP9rPSPX8ntaGAlnWKnTuwdOlM2lvfPfirXedVAtPcR d1z8twtvYk9nd8xrzbsvygBB9RpoM4dlhhfO6MmvsPNSlT45RpQF60Xjq1uKQUHj IJrn4U0EFTID/ZCtKR7wrRasCCeTNXRJyXIbKBioXKhFtHeIceXt3bYEqmoP9vBn oxANsjEphqlqc1qDukyox4+L04H183vpuGnwKn6PEMawRkERhwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDOpkKH8ZSr6zayOIhwSPulVzwwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDk1MmY0M2UtMTZiNy0z MDMwLTk1YTMtNDhhOTg5MDU5NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJhPMAwQC JitgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABUz6Cp+HSVeshqsq2EQJKbq5YcTJdgVg6ZnmNjmcwxYjL81 Yl+HvSIMbXeWbnGIxIkqSI9KRHDMCLtX/QLEEuw+PySgA0pkgue0hIrLGzlvTBLf tS8zopFav+R+wf1zSIB6mt+nIYUAzf7CUrAfhAK+a5ZIHU9GGJbSjkVcdzYvvoAq kxMoxmvfOoTY7fBqNEsQQHoC7lvXl8PDD8w33kx4VpBTkcz0TGsGCNnCuxlCPKty blnpLlM0hQcp1igOTCoeTIsdaaV60ETezEAMOvMcXms7ZBqXF9XFVuMWRIECUdLS v3imF381USZ0MY5eQQsRvAXygJ0CuRVbLXUpyfA= -----END CERTIFICATE-----Generated at Fri Jun 12 22:40:47 2026 by rpki-client