$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24fcfab1-479f-310b-a1a1-ce190369e22e.roa File: 24fcfab1-479f-310b-a1a1-ce190369e22e.roa (raw, json) Hash identifier: 8OtWnrP5lxi+kDIzCuUL6Xo47w+8pO6S4kZDF4VK7sA= Subject key identifier: 3D:44:B9:6E:D0:6C:2E:AF:EC:55:4A:C1:CD:72:18:69:31:77:AD:16 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB57C461E3E6A398831B5EF00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24fcfab1-479f-310b-a1a1-ce190369e22e.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 203206 IP address blocks: 38.19.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:46:1e:3e:6a:39:88:31:b5:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=9c1b8aa7-8266-407c-8257-204606e1b6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:b8:cc:51:b6:4d:e9:12:94:c8:d1:2a:14: 6a:5c:2c:9e:bf:8f:4c:6b:47:43:f8:01:bf:1e:e5: 50:fe:9f:b0:7e:4b:ee:b8:c6:c1:3e:4e:7e:d9:b2: f4:59:fa:80:c8:6b:0b:64:51:83:2d:2d:8d:16:45: 33:8c:cc:ad:d2:ae:51:be:1c:83:02:a9:36:f7:a4: 62:e3:36:d8:e7:4e:b8:72:a3:52:f3:27:93:e7:53: 04:38:86:cf:95:fb:f7:d2:0a:6a:73:67:1d:5c:b2: a7:2d:f7:2c:0c:e3:84:62:e4:ab:c7:18:45:d0:4d: 47:fe:0e:53:b2:dc:87:f7:c7:91:30:eb:77:13:7c: 51:a7:f5:ee:1d:7e:65:90:69:c1:2b:c0:2e:4b:87: 5d:2e:56:e0:24:bb:b9:5c:b3:80:b1:04:41:8c:00: 56:bc:cd:10:b2:af:ed:d0:2d:77:7b:02:c7:7f:fb: 08:74:5b:b6:41:8f:b6:40:89:3c:8b:34:8f:bb:02: f1:54:76:69:81:eb:b8:a5:b6:4b:67:ec:2e:13:c0: 56:14:ad:c9:8c:5c:24:bf:9e:b5:2a:98:e6:37:71: 68:b4:ab:27:7d:d2:1b:df:70:b0:2c:ff:20:b1:25: b8:f9:83:15:7c:3c:9e:56:86:23:83:e9:6a:7b:58: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:B9:6E:D0:6C:2E:AF:EC:55:4A:C1:CD:72:18:69:31:77:AD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24fcfab1-479f-310b-a1a1-ce190369e22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:70:26:9d:26:8c:8e:78:c8:c9:27:61:92:ea:fd:45:d7:7a: ab:b5:03:71:aa:3a:e7:97:0a:38:f4:ff:1a:b0:69:be:ed:ec: 4c:e8:c6:bb:90:8d:2a:a5:0e:94:59:23:a9:bb:c2:57:11:ab: 51:df:cb:61:71:f1:c3:16:ed:17:d3:33:d4:8c:59:54:b7:a2: 0c:12:0b:00:c4:1f:a7:b6:e2:d5:51:0d:62:43:75:96:5c:54: 34:20:db:7d:fa:a7:f7:3c:97:a4:b4:20:43:39:ba:77:a3:5c: af:dd:08:e2:dd:73:c3:5b:9a:75:95:c0:38:6e:3a:c5:62:fc: 02:4a:b2:9a:88:9e:bc:73:3c:ff:5b:aa:1e:c4:3e:72:f3:9a: d5:9f:bc:c7:a2:5b:b9:c3:23:15:fd:d9:21:bd:38:c0:74:87: 42:01:b2:59:6c:17:b6:c8:29:10:7c:14:74:e1:4f:02:d5:45: f3:0c:35:77:74:35:91:0e:bf:a1:b8:07:eb:6f:23:a2:8e:7f: d7:24:45:40:31:54:3c:b6:90:6e:47:4c:d9:19:78:fc:c0:55: 7d:05:a9:ce:95:25:a6:ba:7a:27:18:4c:13:47:8d:4c:a9:93: c9:28:dd:a3:97:cc:11:12:fe:c3:38:16:d7:3a:e3:c1:30:38: ab:e2:53:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fEYePmo5iDG17wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk OWMxYjhhYTctODI2Ni00MDdjLTgyNTctMjA0NjA2ZTFiNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJm4zFG2TekSlMjRKhRqXCyev49Ma0dD+AG/ HuVQ/p+wfkvuuMbBPk5+2bL0WfqAyGsLZFGDLS2NFkUzjMyt0q5RvhyDAqk296Ri 4zbY5064cqNS8yeT51MEOIbPlfv30gpqc2cdXLKnLfcsDOOEYuSrxxhF0E1H/g5T styH98eRMOt3E3xRp/XuHX5lkGnBK8AuS4ddLlbgJLu5XLOAsQRBjABWvM0Qsq/t 0C13ewLHf/sIdFu2QY+2QIk8izSPuwLxVHZpgeu4pbZLZ+wuE8BWFK3JjFwkv561 KpjmN3FotKsnfdIb33CwLP8gsSW4+YMVfDyeVoYjg+lqe1hDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1EuW7QbC6v7FVKwc1yGGkxd60WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjRmY2ZhYjEtNDc5Zi0z MTBiLWExYTEtY2UxOTAzNjllMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdwJp0mjI54yMknYZLq/UXXequ1A3GqOueXCjj0/xqwab7t7EzoxruQ jSqlDpRZI6m7wlcRq1Hfy2Fx8cMW7RfTM9SMWVS3ogwSCwDEH6e24tVRDWJDdZZc VDQg2336p/c8l6S0IEM5unejXK/dCOLdc8NbmnWVwDhuOsVi/AJKspqInrxzPP9b qh7EPnLzmtWfvMeiW7nDIxX92SG9OMB0h0IBsllsF7bIKRB8FHThTwLVRfMMNXd0 NZEOv6G4B+tvI6KOf9ckRUAxVDy2kG5HTNkZePzAVX0Fqc6VJaa6eicYTBNHjUyp k8ko3aOXzBES/sM4Ftc648EwOKviU4Q= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:45 2026 by rpki-client