$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa File: 1c61dbca-9697-3772-bedc-7110ec7888ea.roa (raw, json) Hash identifier: DeYEUkwtYlnHCVGs++hrMiMTwGcF5TjO0CQwaGUKXq8= Subject key identifier: E5:B3:CB:73:87:69:1C:9D:F0:8E:23:BB:28:F7:E5:53:57:8A:25:42 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA8EC4D74EC48F5959798D380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 265622 IP address blocks: 38.158.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:4d:74:ec:48:f5:95:97:98:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=06ca4388-cc7d-4acb-b62c-04cc327fe5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:17:09:e3:15:45:13:d8:e6:5b:08:65:9b: 6d:74:1d:a4:0f:d7:4b:0e:e9:21:a9:3d:77:71:1d: f1:fc:e1:19:fa:1f:c1:cf:2a:92:69:de:da:d2:dd: e7:d7:18:1b:b1:91:73:2a:db:0d:a3:65:ec:14:bf: bb:78:09:42:90:fc:7f:16:6b:c6:7b:6d:f2:f2:69: 0f:c8:86:5d:50:1c:b4:00:73:f9:5b:cc:74:a9:55: 82:c0:bc:11:58:8d:76:9c:e4:fe:43:7f:52:3e:b6: 4d:d9:1b:7e:e0:cd:ef:98:69:59:e8:ab:04:6a:3b: d6:10:f9:72:11:20:00:fc:49:db:94:ae:27:8c:a7: a0:28:bf:85:86:08:71:1c:b4:4a:a2:c0:d0:2c:f9: 3f:cf:39:20:48:57:0f:07:96:fe:98:70:f8:90:de: 6c:7b:4f:4f:eb:36:bd:12:fc:d0:fe:38:ae:3d:75: 11:f4:e0:cf:d9:e3:78:46:45:8e:73:99:e7:eb:1e: 31:25:66:5f:80:b5:e6:33:5e:24:e4:51:e6:15:8c: 89:ed:2f:4d:a4:0f:72:13:43:3f:45:0b:4a:bd:3b: d9:f5:8e:39:f3:c5:0a:0c:b4:d8:a6:99:ca:15:d9: d3:b7:e3:66:dd:c2:55:71:8e:f1:6d:16:d9:85:2e: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:CB:73:87:69:1C:9D:F0:8E:23:BB:28:F7:E5:53:57:8A:25:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:08:88:10:51:7f:7f:5e:20:ec:f0:17:91:11:23:47:aa:71: fb:e2:25:c7:4d:2e:c8:a5:82:a2:6c:30:a5:a2:a5:1d:46:9d: df:c6:97:2c:5c:5c:80:b2:5e:fd:8a:86:94:be:26:bd:dc:7b: 27:2d:cc:9b:d9:dd:46:9e:63:9a:7a:73:a7:43:de:d5:b3:4b: 32:45:14:58:a4:47:fd:e1:9e:58:a1:db:2b:61:2d:6e:16:23: b9:ae:13:49:9e:e1:b2:9d:00:8e:a4:b1:0f:69:43:c1:a0:72: 32:23:14:45:e6:26:0c:ba:13:b5:af:ed:84:49:73:35:0f:45: 1c:91:58:d5:41:2a:47:40:24:f6:cd:7f:58:7d:78:01:3f:d0: 85:8d:d3:f3:a7:79:09:04:d1:c0:7d:5f:13:01:f9:70:65:5e: 0b:1d:76:52:59:5a:84:4a:04:8e:56:62:4e:ce:80:72:1d:ee: b0:de:38:3a:db:f4:ca:e2:70:9b:f7:67:84:44:65:7d:5e:b6: fb:35:d5:9f:95:60:86:80:14:7e:cd:f3:2d:95:94:be:b9:05: 9c:ad:75:37:3f:fe:4d:55:c1:fb:75:3b:cb:bd:51:de:bb:4b: 0c:cb:54:cd:11:09:b6:b0:20:4f:8a:13:cf:4a:65:fa:58:f2: ab:da:ef:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7E107Ej1lZeY04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk MDZjYTQzODgtY2M3ZC00YWNiLWI2MmMtMDRjYzMyN2ZlNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVUXCeMVRRPY5lsIZZttdB2kD9dLDukhqT13 cR3x/OEZ+h/BzyqSad7a0t3n1xgbsZFzKtsNo2XsFL+7eAlCkPx/FmvGe23y8mkP yIZdUBy0AHP5W8x0qVWCwLwRWI12nOT+Q39SPrZN2Rt+4M3vmGlZ6KsEajvWEPly ESAA/EnblK4njKegKL+FhghxHLRKosDQLPk/zzkgSFcPB5b+mHD4kN5se09P6za9 EvzQ/jiuPXUR9ODP2eN4RkWOc5nn6x4xJWZfgLXmM14k5FHmFYyJ7S9NpA9yE0M/ RQtKvTvZ9Y4588UKDLTYppnKFdnTt+Nm3cJVcY7xbRbZhS6IKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWzy3OHaRyd8I4juyj35VNXiiVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWM2MWRiY2EtOTY5Ny0z NzcyLWJlZGMtNzExMGVjNzg4OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJp70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4IiBBRf39eIOzwF5ERI0eqcfviJcdNLsilgqJsMKWipR1Gnd/Glyxc XICyXv2KhpS+Jr3ceyctzJvZ3UaeY5p6c6dD3tWzSzJFFFikR/3hnlih2ythLW4W I7muE0me4bKdAI6ksQ9pQ8GgcjIjFEXmJgy6E7Wv7YRJczUPRRyRWNVBKkdAJPbN f1h9eAE/0IWN0/OneQkE0cB9XxMB+XBlXgsddlJZWoRKBI5WYk7OgHId7rDeODrb 9MricJv3Z4REZX1etvs11Z+VYIaAFH7N8y2VlL65BZytdTc//k1Vwft1O8u9Ud67 SwzLVM0RCbawIE+KE89KZfpY8qva728= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:56 2026 by rpki-client