$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2685c6f6-acf2-333c-a8f4-9c56f043ee57.roa File: 2685c6f6-acf2-333c-a8f4-9c56f043ee57.roa (raw, json) Hash identifier: IEJF5uxodJnTKqa7kyAckJpbbyUuRzPMGWDehMGN5PY= Subject key identifier: EB:DB:28:59:4C:FD:26:4F:67:22:AA:01:8D:7C:93:74:C1:D2:95:CD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E5826ADCC429F84E39676A180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2685c6f6-acf2-333c-a8f4-9c56f043ee57.roa Signing time: Tue 30 Jun 2026 14:37:35 +0000 ROA not before: Tue 30 Jun 2026 14:37:35 +0000 ROA not after: Mon 28 Sep 2026 14:37:35 +0000 asID: 136334 IP address blocks: 38.35.96.0/19 maxlen: 24 38.121.240.0/20 maxlen: 24 206.84.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:58:26:ad:cc:42:9f:84:e3:96:76:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 30 14:37:35 2026 GMT Not After : Sep 28 14:37:35 2026 GMT Subject: CN=0b06f5a6-afa3-4e84-ae76-b2dbad2549b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:f8:b3:84:ab:cf:2b:2d:f4:a9:49:13:26: 00:9a:6e:8b:73:d1:5e:61:29:59:96:f5:4e:ba:05: 2c:de:74:2a:b8:ab:65:e8:d9:d7:dc:7e:8f:d6:7f: 75:f2:10:29:41:7f:85:68:d2:57:78:31:fd:48:bf: 4d:0f:b9:0d:ed:7c:3c:4c:34:d1:a3:af:95:d5:0f: be:29:41:f6:96:8b:84:08:7d:27:1f:ae:ac:4e:08: 74:70:44:b0:59:53:4d:da:98:3e:e4:75:d3:d6:d2: 80:ab:31:9b:97:3b:b9:90:0d:f2:47:fe:fe:ac:5c: f9:c1:f6:d5:09:0f:1f:4d:6b:86:ad:a9:26:4f:48: ef:e2:03:d4:f7:94:b0:73:9c:c4:b9:14:f1:ee:23: 11:e1:4f:24:58:13:ed:82:fd:5b:18:3c:fe:82:02: 21:2a:83:97:a0:48:3e:47:9f:ab:ad:c3:3a:6f:7c: 74:f5:9c:fc:68:21:2e:6f:65:eb:a5:34:0f:37:07: fd:bc:6f:d5:36:ba:55:be:59:35:af:a3:13:3e:9d: f2:ba:f4:34:b9:20:48:56:4f:33:c0:aa:5e:7c:a2: 1a:92:81:43:2d:35:24:cf:a1:b2:2b:23:4a:1c:d2: fa:6f:31:18:9a:04:df:35:fa:f4:45:28:45:58:6d: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:28:59:4C:FD:26:4F:67:22:AA:01:8D:7C:93:74:C1:D2:95:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2685c6f6-acf2-333c-a8f4-9c56f043ee57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.35.96.0/19 38.121.240.0/20 206.84.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5f:ab:22:b5:21:72:bf:42:a5:94:3e:91:cb:f1:11:6c:d5: 37:e9:01:bc:da:f5:47:0f:d8:48:4e:fe:05:66:89:f0:66:aa: cb:87:41:86:93:b6:e4:3b:7d:d5:56:0c:b4:59:41:97:5b:66: 8c:01:39:f4:1d:1f:d0:1a:64:5d:82:de:8d:b1:13:cb:13:fd: 0f:08:df:af:1e:6d:fb:3f:97:56:b4:30:73:6b:44:4e:7c:f0: a2:ba:e3:13:c1:83:b2:21:6f:77:c9:39:b9:1c:c6:a6:e3:90: e1:66:53:25:2a:39:a5:dc:79:ad:15:fc:ce:df:7e:64:e5:ed: 21:89:ca:05:50:e9:b0:6c:18:78:70:0c:83:5b:d2:db:53:e2: 26:9b:9d:76:74:2b:42:18:ef:ca:ec:8b:76:cd:12:61:79:2e: f3:67:51:2e:a3:42:02:79:d0:f7:dd:b3:c2:a3:f3:25:80:2e: c6:ab:53:64:8c:4e:95:89:06:28:ec:23:aa:ae:3f:31:87:b8: ae:5f:b8:55:d5:19:4c:1a:6e:08:4a:1e:99:63:a9:1e:94:37: fa:5e:59:1d:66:3d:47:bc:9e:7e:54:a9:d0:b6:2e:0e:e5:d1: e3:dc:14:4e:8d:15:ee:6f:26:43:27:0b:c7:59:e7:fb:85:d4: dd:f3:9b:03 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5YJq3MQp+E45Z2oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYzMDE0MzczNVoXDTI2MDkyODE0MzczNVowLzEtMCsGA1UEAxMk MGIwNmY1YTYtYWZhMy00ZTg0LWFlNzYtYjJkYmFkMjU0OWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWD4s4Srzyst9KlJEyYAmm6Lc9FeYSlZlvVO ugUs3nQquKtl6NnX3H6P1n918hApQX+FaNJXeDH9SL9ND7kN7Xw8TDTRo6+V1Q++ KUH2louECH0nH66sTgh0cESwWVNN2pg+5HXT1tKAqzGblzu5kA3yR/7+rFz5wfbV CQ8fTWuGrakmT0jv4gPU95Swc5zEuRTx7iMR4U8kWBPtgv1bGDz+ggIhKoOXoEg+ R5+rrcM6b3x09Zz8aCEub2XrpTQPNwf9vG/VNrpVvlk1r6MTPp3yuvQ0uSBIVk8z wKpefKIakoFDLTUkz6GyKyNKHNL6bzEYmgTfNfr0RShFWG00EwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOvbKFlM/SZPZyKqAY18k3TB0pXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjY4NWM2ZjYtYWNmMi0z MzNjLWE4ZjQtOWM1NmYwNDNlZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFJiNgAwQE JnnwAwQEzlTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAERfqyK1IXK/QqWUPpHL8RFs1TfpAbza9UcP2EhO /gVmifBmqsuHQYaTtuQ7fdVWDLRZQZdbZowBOfQdH9AaZF2C3o2xE8sT/Q8I368e bfs/l1a0MHNrRE588KK64xPBg7Ihb3fJObkcxqbjkOFmUyUqOaXcea0V/M7ffmTl 7SGJygVQ6bBsGHhwDINb0ttT4iabnXZ0K0IY78rsi3bNEmF5LvNnUS6jQgJ50Pfd s8Kj8yWALsarU2SMTpWJBijsI6quPzGHuK5fuFXVGUwabghKHpljqR6UN/peWR1m PUe8nn5UqdC2Lg7l0ePcFE6NFe5vJkMnC8dZ5/uF1N3zmwM= -----END CERTIFICATE-----Generated at Tue Jul 21 18:14:11 2026 by rpki-client