$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a424faa-f264-3c04-922d-fd422d38d88c.roa File: 0a424faa-f264-3c04-922d-fd422d38d88c.roa (raw, json) Hash identifier: Xni9QhxGf+rpomCEX9SupiCKfnHJ0+d0R0AnYTfHmf4= Subject key identifier: C2:CB:AB:A7:55:B8:82:58:BD:85:8F:C8:90:F7:1D:1B:1E:8D:6F:C9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E11B427C14B311F0207E435C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a424faa-f264-3c04-922d-fd422d38d88c.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 212238 IP address blocks: 38.75.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:27:c1:4b:31:1f:02:07:e4:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=c3d0be46-4f8f-4cf1-b14c-5184c951746d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:d2:fe:e0:93:b9:ce:f9:7d:6e:cd:f4:ef: 54:aa:6e:1e:3c:ea:4a:20:f9:4c:04:86:4b:b0:b2: 6b:dd:a0:41:8a:50:07:26:7f:7f:13:c1:ff:af:e7: 53:92:94:f5:24:10:f2:a8:f1:a2:a2:64:ed:79:a7: 1a:04:19:23:18:3f:8d:82:84:09:ba:cf:3d:a9:83: d7:9b:ca:b9:ce:61:20:18:2c:51:5f:27:f3:84:4a: 2f:f3:37:34:00:26:de:e5:e8:5b:3f:eb:77:87:f6: b7:03:bc:9f:75:af:4d:d0:23:93:d9:f4:a1:e9:54: 3e:0f:f3:b3:ce:30:3a:4c:67:29:38:cb:5c:29:8f: 50:05:3b:8d:77:68:20:2f:4d:94:d7:7e:77:2e:50: 88:8a:3d:fd:0d:bd:77:ef:96:95:05:e5:92:0f:0d: 54:2e:3a:dd:83:8a:76:a7:2f:7e:82:6f:a1:4f:39: df:8f:aa:0e:b5:7f:26:48:1b:83:d3:d8:d9:f5:d9: f7:d8:46:32:2c:b7:08:65:d0:0b:51:ce:ac:8a:19: 2e:fa:4c:77:bb:57:d9:72:eb:3b:99:8f:a3:55:40: 20:ef:cf:87:98:87:8f:31:73:86:9d:e9:9d:4d:27: c0:bf:b4:8d:e1:6d:a2:f2:f1:df:e3:8b:f2:f9:af: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CB:AB:A7:55:B8:82:58:BD:85:8F:C8:90:F7:1D:1B:1E:8D:6F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a424faa-f264-3c04-922d-fd422d38d88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.75.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4d:b7:42:57:32:8d:e5:bd:06:79:d4:33:83:2a:0b:40:5f: 29:8b:ed:bb:03:6a:6a:83:1e:cb:7e:95:e7:24:ce:fb:11:fd: 69:56:6a:36:67:95:a0:f6:2b:25:4b:44:4c:94:46:a3:15:ba: 89:fa:40:ad:01:03:e0:27:45:72:0b:a7:1e:71:8d:00:34:f7: f1:09:01:f0:5b:45:b2:24:37:32:36:68:82:8a:7f:2a:5a:ef: 65:8b:c4:e4:cd:0e:ca:25:e1:57:04:03:b8:62:2a:c9:00:35: 2c:b3:df:de:45:a4:21:33:32:47:a2:f0:05:36:02:73:9a:f2: e4:23:5e:49:95:83:b0:ee:87:d1:69:02:a6:a1:aa:4d:c6:7d: 2c:0b:3a:75:85:71:4d:26:b1:00:be:ee:2c:24:3f:4c:49:34: 2d:e8:07:13:d6:1d:d1:29:c2:b2:f2:84:3c:63:76:21:35:3d: 1f:4e:73:32:36:53:85:03:48:82:4e:e2:2c:17:11:c4:b1:4f: ee:62:0c:bf:a4:a6:59:d5:53:5c:4d:9c:89:b1:c4:73:24:16: 0f:82:96:d1:cb:bc:18:bc:88:4a:71:f8:96:aa:b7:a5:5f:31: 0c:36:b8:e2:c8:50:43:ab:2b:96:81:d4:cc:54:02:6e:7e:b2: 07:93:57:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtCfBSzEfAgfkNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk YzNkMGJlNDYtNGY4Zi00Y2YxLWIxNGMtNTE4NGM5NTE3NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+nS/uCTuc75fW7N9O9Uqm4ePOpKIPlMBIZL sLJr3aBBilAHJn9/E8H/r+dTkpT1JBDyqPGiomTteacaBBkjGD+NgoQJus89qYPX m8q5zmEgGCxRXyfzhEov8zc0ACbe5ehbP+t3h/a3A7yfda9N0COT2fSh6VQ+D/Oz zjA6TGcpOMtcKY9QBTuNd2ggL02U1353LlCIij39Db1375aVBeWSDw1ULjrdg4p2 py9+gm+hTznfj6oOtX8mSBuD09jZ9dn32EYyLLcIZdALUc6sihku+kx3u1fZcus7 mY+jVUAg78+HmIePMXOGnemdTSfAv7SN4W2i8vHf44vy+a/gHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLLq6dVuIJYvYWPyJD3HRsejW/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGE0MjRmYWEtZjI2NC0z YzA0LTkyMmQtZmQ0MjJkMzhkODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkvTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtNt0JXMo3lvQZ51DODKgtAXymL7bsDamqDHst+leckzvsR/WlWajZn laD2KyVLREyURqMVuon6QK0BA+AnRXILpx5xjQA09/EJAfBbRbIkNzI2aIKKfypa 72WLxOTNDsol4VcEA7hiKskANSyz395FpCEzMkei8AU2AnOa8uQjXkmVg7Duh9Fp Aqahqk3GfSwLOnWFcU0msQC+7iwkP0xJNC3oBxPWHdEpwrLyhDxjdiE1PR9OczI2 U4UDSIJO4iwXEcSxT+5iDL+kplnVU1xNnImxxHMkFg+CltHLvBi8iEpx+Jaqt6Vf MQw2uOLIUEOrK5aB1MxUAm5+sgeTV2o= -----END CERTIFICATE-----Generated at Fri Jun 12 22:40:55 2026 by rpki-client