$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ab85b54-717e-3889-af58-44a5a627e0f7.roa File: 0ab85b54-717e-3889-af58-44a5a627e0f7.roa (raw, json) Hash identifier: 3oVo+M23OX01be2APPTkwxTS3JmR4HFvC+d9nmA1L0U= Subject key identifier: 06:6F:8F:3D:4D:99:0E:AC:47:7F:98:A6:F1:60:74:99:16:D7:29:23 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9BD5E89A07DB5EECBDFF1D60 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ab85b54-717e-3889-af58-44a5a627e0f7.roa Signing time: Fri 24 Jul 2026 20:29:48 +0000 ROA not before: Fri 24 Jul 2026 20:29:48 +0000 ROA not after: Thu 22 Oct 2026 20:29:48 +0000 asID: 272003 IP address blocks: 38.188.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:d5:e8:9a:07:db:5e:ec:bd:ff:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 24 20:29:48 2026 GMT Not After : Oct 22 20:29:48 2026 GMT Subject: CN=0d210ead-6764-47da-a4f2-a90290943551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:ee:7c:a1:ca:81:90:22:e1:6c:81:11:ea: e8:82:21:37:bf:9e:93:96:0d:91:68:70:2e:72:9d: d2:7d:19:35:d7:1c:64:80:c0:a2:4a:cc:5b:87:16: e6:ee:7f:00:f0:e0:96:87:f2:5c:aa:26:56:f3:e0: bf:db:8b:21:a6:4f:da:43:d2:24:85:4f:b4:a2:51: a6:32:ff:ba:84:8d:64:60:38:26:db:57:b0:f3:60: 5e:fc:ce:8f:54:c1:bc:03:0f:5d:39:80:ff:6f:5b: ca:4c:39:da:33:b2:cf:a5:3a:df:16:6d:7b:f2:52: fa:4a:80:f2:73:6d:d3:69:d1:42:65:dd:87:4a:73: bf:0b:8b:e7:b4:8c:ca:cd:36:6e:3e:e7:1b:c9:21: 04:b0:ed:42:de:f7:9a:64:0d:87:ea:f3:44:d0:b5: 54:3f:9c:d1:f2:c2:b6:e5:df:16:1c:de:c3:76:b2: a9:e9:65:92:7c:42:f5:75:14:23:a3:44:2d:92:38: 54:e9:0b:77:ad:a5:19:c0:76:23:06:4a:58:16:39: 36:a8:c0:0e:25:de:b5:9c:97:07:2e:86:38:d6:1b: fc:55:1c:51:e3:31:03:29:f7:68:a1:c9:59:f8:bd: de:ba:6a:d8:e0:bd:0b:b0:71:84:10:eb:df:83:9c: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6F:8F:3D:4D:99:0E:AC:47:7F:98:A6:F1:60:74:99:16:D7:29:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ab85b54-717e-3889-af58-44a5a627e0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.188.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3d:ea:8d:f2:0b:ad:ae:c6:99:66:60:9f:fe:5d:b2:42:df: 1f:88:55:75:b1:e7:5c:3b:bc:e7:04:54:b1:57:25:71:44:47: 61:ff:d5:02:d1:46:35:9b:a9:a6:8b:4b:30:2d:d4:94:0c:64: 0b:53:0a:06:0c:fc:1a:a8:0e:d6:f9:86:dd:93:2c:cc:94:88: 47:ca:da:9c:ec:3b:f0:87:8e:85:53:85:26:c6:09:fb:6e:3e: ce:70:9f:d5:d1:80:db:09:15:a8:41:68:dc:b3:41:0e:48:29: 9a:7f:bf:cb:2b:23:dc:cb:5c:c2:a6:92:5c:a0:fa:31:ab:e4: e8:74:4c:4c:0c:5f:bd:b4:99:78:45:3d:54:5a:44:f3:be:ea: b8:9a:b2:54:ee:f5:e0:34:0f:b5:a2:03:35:ad:8e:a5:03:cf: 30:b9:b1:37:2f:7f:64:0c:ab:ff:15:71:d5:3a:9d:6d:16:12: 36:c0:17:4e:44:5c:2c:42:6b:54:8f:9d:18:8c:6a:15:28:3d: f7:c9:98:a8:b9:e5:18:03:99:56:cc:52:61:a3:f2:10:eb:bf: 3d:81:f7:2f:30:80:ff:fd:37:63:9b:a2:5a:d9:ee:13:e2:4e: 09:88:65:ff:10:14:13:0a:b2:c7:0c:8e:8b:5c:5f:49:af:fd: 90:e3:d5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b1eiaB9te7L3/HWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNDIwMjk0OFoXDTI2MTAyMjIwMjk0OFowLzEtMCsGA1UEAxMk MGQyMTBlYWQtNjc2NC00N2RhLWE0ZjItYTkwMjkwOTQzNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HnufKHKgZAi4WyBEerogiE3v56Tlg2RaHAu cp3SfRk11xxkgMCiSsxbhxbm7n8A8OCWh/JcqiZW8+C/24shpk/aQ9IkhU+0olGm Mv+6hI1kYDgm21ew82Be/M6PVMG8Aw9dOYD/b1vKTDnaM7LPpTrfFm178lL6SoDy c23TadFCZd2HSnO/C4vntIzKzTZuPucbySEEsO1C3veaZA2H6vNE0LVUP5zR8sK2 5d8WHN7DdrKp6WWSfEL1dRQjo0QtkjhU6Qt3raUZwHYjBkpYFjk2qMAOJd61nJcH LoY41hv8VRxR4zEDKfdooclZ+L3eumrY4L0LsHGEEOvfg5xYrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZvjz1NmQ6sR3+YpvFgdJkW1ykjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGFiODViNTQtNzE3ZS0z ODg5LWFmNTgtNDRhNWE2MjdlMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJrzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo96o3yC62uxplmYJ/+XbJC3x+IVXWx51w7vOcEVLFXJXFER2H/1QLR RjWbqaaLSzAt1JQMZAtTCgYM/BqoDtb5ht2TLMyUiEfK2pzsO/CHjoVThSbGCftu Ps5wn9XRgNsJFahBaNyzQQ5IKZp/v8srI9zLXMKmklyg+jGr5Oh0TEwMX720mXhF PVRaRPO+6riaslTu9eA0D7WiAzWtjqUDzzC5sTcvf2QMq/8VcdU6nW0WEjbAF05E XCxCa1SPnRiMahUoPffJmKi55RgDmVbMUmGj8hDrvz2B9y8wgP/9N2ObolrZ7hPi TgmIZf8QFBMKsscMjotcX0mv/ZDj1Xc= -----END CERTIFICATE-----Generated at Tue Jul 28 00:16:30 2026 by rpki-client