$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa File: 25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa (raw, json) Hash identifier: Qzs6FmN3esrLnf/WQEfJi4fRlV8VwNE95itXITuNpl0= Subject key identifier: 55:76:9E:81:39:7D:19:24:96:9E:01:EF:A5:B0:EE:71:0F:37:8E:8C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED1671A644010BEFEDB355C00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 139058 IP address blocks: 38.56.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:1a:64:40:10:be:fe:db:35:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=c8db2744-87b4-4367-9126-00358f47ea99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:05:96:16:90:c7:30:ad:d1:af:3f:5c:03: 4c:94:d8:1b:7e:71:e8:2d:cf:da:35:7a:bd:5a:86: 1f:f6:e3:c4:ec:0e:40:94:db:a5:19:ef:2a:33:64: 38:6b:6d:a2:59:c6:4e:27:36:f7:16:0e:7e:9a:73: 4e:5c:38:01:ea:90:2a:8d:01:95:e8:8a:f4:fd:a1: 3e:5a:02:50:ea:f9:4e:b2:d4:31:35:2e:b0:b4:22: 6b:29:fe:0e:b8:8d:9e:22:2d:ac:20:44:29:d7:f6: 20:5a:6c:1f:c4:d1:0b:65:7c:86:eb:86:99:31:b2: 00:22:c7:e4:13:1e:4b:8f:53:f7:3a:29:64:76:3a: bb:b5:3b:4c:85:df:42:ab:97:ec:25:b1:e9:47:3c: cf:cd:25:f8:d8:97:dc:ff:0c:c8:cb:54:9e:ed:ca: 79:bc:93:c5:30:7f:a8:ea:a4:94:a8:db:b8:c5:63: f5:09:4a:60:cb:a9:55:75:0d:93:c8:87:70:af:74: 22:67:72:1c:07:5b:c6:6b:d9:95:a0:39:aa:cc:0d: c7:e8:49:b9:32:62:49:8f:af:fb:f1:6c:22:53:80: 2f:da:ec:a0:c0:07:cb:bf:c0:56:38:05:ba:79:4d: 8a:16:d1:77:f8:41:60:6c:71:0f:4f:3a:7d:10:85: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:9E:81:39:7D:19:24:96:9E:01:EF:A5:B0:EE:71:0F:37:8E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:07:ca:ba:4f:43:60:8a:79:37:16:14:8a:83:e4:c7:4e:b1: 29:9a:e3:b9:dd:bc:7e:47:af:12:3f:63:4a:78:1b:cf:a6:86: d3:8b:5c:48:e9:57:e2:8e:50:9c:d0:e1:25:a0:89:28:0b:aa: 02:02:9b:3d:a1:e6:3e:8d:2e:92:71:1a:2e:5c:53:a8:b5:78: 25:fb:bc:f8:e9:cd:42:0e:51:32:d3:ea:bf:13:50:cf:c9:24: 92:47:29:a3:a6:b6:a8:e4:00:42:9f:a2:e9:04:42:3c:40:15: 49:b3:d1:74:76:5a:2f:cb:a7:b1:71:d2:d6:2b:6a:ee:35:40: 13:f2:da:77:50:55:ab:86:95:7b:ba:44:cd:71:f7:1c:af:7a: 14:63:80:d3:e6:b7:78:41:d5:93:be:1e:af:2d:f1:77:00:34: c2:9e:91:49:60:6a:8d:b9:0f:4e:f4:77:47:13:a7:38:45:f6: fc:b5:68:7b:73:64:20:f6:26:40:6f:bc:13:0d:48:5c:45:c6: ed:f2:28:e5:89:ae:cb:60:99:4a:76:ab:56:54:21:8e:03:17: 4b:1f:4d:e5:05:42:db:d7:71:61:ba:0f:f0:d1:c3:41:d2:df: 53:b9:55:23:55:f2:e8:74:2f:ca:f6:3a:58:f2:86:bd:a7:84: 49:55:cf:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZxpkQBC+/ts1XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk YzhkYjI3NDQtODdiNC00MzY3LTkxMjYtMDAzNThmNDdlYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIcFlhaQxzCt0a8/XANMlNgbfnHoLc/aNXq9 WoYf9uPE7A5AlNulGe8qM2Q4a22iWcZOJzb3Fg5+mnNOXDgB6pAqjQGV6Ir0/aE+ WgJQ6vlOstQxNS6wtCJrKf4OuI2eIi2sIEQp1/YgWmwfxNELZXyG64aZMbIAIsfk Ex5Lj1P3Oilkdjq7tTtMhd9Cq5fsJbHpRzzPzSX42Jfc/wzIy1Se7cp5vJPFMH+o 6qSUqNu4xWP1CUpgy6lVdQ2TyIdwr3QiZ3IcB1vGa9mVoDmqzA3H6Em5MmJJj6/7 8WwiU4Av2uygwAfLv8BWOAW6eU2KFtF3+EFgbHEPTzp9EIW8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV2noE5fRkklp4B76Ww7nEPN46MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjVjMGM1ZDUtOTRiZi0z YjhhLTk3MDAtMzNjM2NmNGNmMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwHyrpPQ2CKeTcWFIqD5MdOsSma47ndvH5HrxI/Y0p4G8+mhtOLXEjp V+KOUJzQ4SWgiSgLqgICmz2h5j6NLpJxGi5cU6i1eCX7vPjpzUIOUTLT6r8TUM/J JJJHKaOmtqjkAEKfoukEQjxAFUmz0XR2Wi/Lp7Fx0tYrau41QBPy2ndQVauGlXu6 RM1x9xyvehRjgNPmt3hB1ZO+Hq8t8XcANMKekUlgao25D070d0cTpzhF9vy1aHtz ZCD2JkBvvBMNSFxFxu3yKOWJrstgmUp2q1ZUIY4DF0sfTeUFQtvXcWG6D/DRw0HS 31O5VSNV8uh0L8r2Oljyhr2nhElVzzU= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:17 2026 by rpki-client