$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa File: 3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa (raw, json) Hash identifier: 545N68NhfIEjquy2VSc1G+F/2d3hNuauzUOhp77xEyI= Subject key identifier: 57:88:7F:4D:61:B5:10:17:64:3F:1C:27:14:CF:43:9E:8A:A5:A2:E7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E5605B48AF2456909B102AD80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa Signing time: Mon 29 Jun 2026 20:19:32 +0000 ROA not before: Mon 29 Jun 2026 20:19:32 +0000 ROA not after: Sun 27 Sep 2026 20:19:32 +0000 asID: 273683 IP address blocks: 38.3.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:05:b4:8a:f2:45:69:09:b1:02:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 29 20:19:32 2026 GMT Not After : Sep 27 20:19:32 2026 GMT Subject: CN=279e6c5e-6ed7-48b8-a992-84f2c38f40db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:c4:94:94:32:9e:6f:23:9f:95:11:65:c0: e6:fc:4e:67:69:e9:5c:a3:48:6c:30:6d:6b:11:f3: df:03:2d:82:fc:bf:d4:26:ab:15:a0:0c:07:a6:d9: 59:1c:c8:6b:50:a1:9d:e2:03:51:12:f0:67:2e:a4: ed:5a:3d:d9:63:fe:ff:ca:8d:99:db:7f:a6:93:37: 51:97:b6:41:ee:74:59:65:58:7a:50:82:86:67:ea: 19:6a:91:4e:cf:0f:34:09:61:fc:af:80:71:4f:0b: be:f8:33:09:3a:d4:15:23:4c:2e:19:ec:cb:11:b4: 35:70:aa:07:cc:70:62:ea:4d:64:f6:ea:ba:6a:9e: 11:b5:a2:94:d8:e0:40:dc:d0:45:cf:23:91:2f:d2: ae:c1:21:77:12:ee:f5:a9:28:03:87:f2:50:7b:ae: f7:61:8b:bb:c9:67:a9:ce:80:72:7d:5e:dc:37:c2: 99:a0:f8:ce:57:05:02:0e:db:97:00:a1:c3:8c:6e: e1:e8:6b:dc:f1:84:07:c5:23:2c:25:06:90:c0:60: 5d:da:08:4b:e7:ce:3b:b9:71:09:ee:0e:95:62:c4: ce:5a:cf:a7:07:ff:a9:a2:69:80:20:d4:52:61:18: 80:96:4d:cb:34:7f:3f:e2:37:5e:a0:87:50:01:13: 58:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:7F:4D:61:B5:10:17:64:3F:1C:27:14:CF:43:9E:8A:A5:A2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:48:c7:30:a8:60:61:10:cf:3f:2a:e9:ba:51:9e:bd:56:27: 01:c9:4e:79:c1:b3:51:13:ad:ef:70:ea:bd:66:2a:79:3a:c8: 32:ab:c6:02:cf:9e:c9:18:6d:11:7f:64:c0:1f:7d:d1:d4:56: 6e:66:e5:2d:24:91:65:86:7e:ec:f2:2b:70:6b:9f:d3:39:9a: 61:cf:31:6b:1a:53:29:08:97:f7:83:6b:fd:60:82:16:90:7d: a0:a0:44:b6:9f:bb:98:7a:64:ad:33:6e:ca:3d:6b:17:54:b1: c6:48:d6:3c:60:84:9f:00:0c:71:f7:eb:7b:85:17:b6:bf:b9: 56:f1:5f:be:7d:3d:35:87:98:4d:38:b2:ac:59:14:78:c9:8e: aa:90:f7:02:90:44:fb:bf:d4:34:6c:29:0b:ff:33:37:1f:95: 20:26:63:3e:ff:a5:1c:4c:cc:ef:33:82:25:73:21:33:32:6e: dc:c4:0c:95:42:5c:dd:5d:46:53:8f:ef:24:67:2a:c5:16:99: 0a:45:36:5f:8d:fe:6d:13:0f:47:ed:4f:ed:60:6a:49:86:aa: dc:66:36:ae:58:59:9d:ac:31:23:03:7c:a1:ec:35:90:d9:b5: dd:88:fc:40:cf:4f:87:fb:68:84:fe:ed:63:bb:6c:f8:97:cd: ff:d0:b6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WBbSK8kVpCbECrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYyOTIwMTkzMloXDTI2MDkyNzIwMTkzMlowLzEtMCsGA1UEAxMk Mjc5ZTZjNWUtNmVkNy00OGI4LWE5OTItODRmMmMzOGY0MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrElJQynm8jn5URZcDm/E5naelco0hsMG1r EfPfAy2C/L/UJqsVoAwHptlZHMhrUKGd4gNREvBnLqTtWj3ZY/7/yo2Z23+mkzdR l7ZB7nRZZVh6UIKGZ+oZapFOzw80CWH8r4BxTwu++DMJOtQVI0wuGezLEbQ1cKoH zHBi6k1k9uq6ap4RtaKU2OBA3NBFzyORL9KuwSF3Eu71qSgDh/JQe673YYu7yWep zoByfV7cN8KZoPjOVwUCDtuXAKHDjG7h6Gvc8YQHxSMsJQaQwGBd2ghL5847uXEJ 7g6VYsTOWs+nB/+pommAINRSYRiAlk3LNH8/4jdeoIdQARNYpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeIf01htRAXZD8cJxTPQ56KpaLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2NkZDA5MWUtMDJlZC0z ZGMzLTk1NDgtYjBmZmFjODhjMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9IxzCoYGEQzz8q6bpRnr1WJwHJTnnBs1ETre9w6r1mKnk6yDKrxgLP nskYbRF/ZMAffdHUVm5m5S0kkWWGfuzyK3Brn9M5mmHPMWsaUykIl/eDa/1gghaQ faCgRLafu5h6ZK0zbso9axdUscZI1jxghJ8ADHH363uFF7a/uVbxX759PTWHmE04 sqxZFHjJjqqQ9wKQRPu/1DRsKQv/MzcflSAmYz7/pRxMzO8zgiVzITMybtzEDJVC XN1dRlOP7yRnKsUWmQpFNl+N/m0TD0ftT+1gakmGqtxmNq5YWZ2sMSMDfKHsNZDZ td2I/EDPT4f7aIT+7WO7bPiXzf/QtqI= -----END CERTIFICATE-----Generated at Wed Jul 8 23:54:58 2026 by rpki-client