$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/423e3f76-60e3-3f66-be38-96385d0af921.roa File: 423e3f76-60e3-3f66-be38-96385d0af921.roa (raw, json) Hash identifier: ww96ud4GGwRBkzEwmAkGnwdK6IIcUV7o+4Un70DbU00= Subject key identifier: E7:02:62:49:52:CC:96:B3:A8:5E:1F:DE:13:51:15:3F:0B:AB:B0:B4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E6E55D859CDE9C684A52CDE80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/423e3f76-60e3-3f66-be38-96385d0af921.roa Signing time: Wed 08 Jul 2026 13:20:24 +0000 ROA not before: Wed 08 Jul 2026 13:20:24 +0000 ROA not after: Tue 06 Oct 2026 13:20:24 +0000 asID: 219307 IP address blocks: 38.123.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:55:d8:59:cd:e9:c6:84:a5:2c:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 8 13:20:24 2026 GMT Not After : Oct 6 13:20:24 2026 GMT Subject: CN=b7def463-4071-4b96-aef4-ecabcb22d6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:77:3d:d1:a1:56:5c:56:be:57:2f:ea:49:39: fb:fc:8c:db:11:a3:a8:81:88:36:de:1a:db:3f:02: df:bc:de:23:c0:71:76:24:b4:83:1f:eb:87:21:ae: 0e:e2:a0:37:30:51:67:83:76:24:2e:44:d7:be:b4: bd:44:b4:76:01:1c:56:1f:05:b3:b2:d3:13:ad:fa: ed:d3:30:d8:7b:13:ad:cb:6f:92:7d:a3:6c:8f:38: af:ac:bb:be:1c:4b:69:fb:9d:bc:af:f8:2d:98:d2: 5e:75:4b:31:5b:6f:c4:da:0e:71:f4:dc:2b:ba:0a: b8:46:71:4c:80:39:55:7b:72:13:bb:c3:83:71:b3: c7:51:35:1c:53:5e:c3:bf:98:85:e2:8d:29:dd:42: 87:28:20:3a:b3:b2:1a:4b:5a:f9:cc:f1:b4:cc:43: 5d:a9:27:7d:eb:cb:b2:95:d1:bd:0b:e2:54:44:c0: fe:40:9b:e7:57:fa:5a:46:87:8b:5f:e8:35:90:ca: 0a:de:0c:83:84:6d:51:15:ba:89:bc:16:d3:f6:6c: a8:14:4a:da:ca:bd:fe:43:15:20:99:62:0c:ee:c4: 01:73:a5:36:81:5a:de:cc:a4:7a:bd:8d:89:46:fb: 8e:1b:59:75:9e:e9:cf:d5:08:95:8f:5b:c1:53:62: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:62:49:52:CC:96:B3:A8:5E:1F:DE:13:51:15:3F:0B:AB:B0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/423e3f76-60e3-3f66-be38-96385d0af921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.123.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:84:82:02:33:87:23:b2:7b:35:90:98:ab:46:12:36:a4:eb: b4:5f:0d:e7:c1:30:58:f0:49:51:b9:3d:44:a1:ad:af:a9:cd: ef:f8:96:21:1d:fb:af:ed:67:b4:6e:cc:0e:9e:f1:36:86:27: 3d:16:a6:a8:20:5f:dc:80:13:f7:9c:ff:31:c4:86:74:e8:8e: 9b:4c:95:2c:54:16:06:b2:06:14:62:3c:41:78:a9:10:14:ed: 74:dc:43:63:99:41:75:5d:21:62:3f:67:e5:a0:57:97:e7:41: c3:f5:24:c4:d4:a7:af:e1:93:c9:67:12:8f:ec:46:dd:48:59: ee:0d:90:ef:f4:02:9d:b8:a4:0a:61:1f:28:45:05:c9:19:82: 07:6a:c7:6b:61:48:1c:24:ba:87:58:ee:75:ea:97:54:34:f2: bc:0f:51:97:1e:20:22:74:4f:6a:91:03:ad:89:f7:53:1a:47: 27:1a:97:1c:33:4c:2f:91:42:a0:f6:d6:a3:65:29:6a:5f:3a: 2b:e9:f7:55:cc:ce:9e:6d:52:58:3a:ad:a2:9c:7a:07:34:56: 2d:76:ef:b3:da:a6:fd:f3:68:ba:a6:1e:53:fd:66:e7:0b:92: 9f:ca:6f:0f:77:7c:24:f7:a0:9c:c7:c6:cc:4c:e7:7c:5b:38: b8:ee:70:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5uVdhZzenGhKUs3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcwODEzMjAyNFoXDTI2MTAwNjEzMjAyNFowLzEtMCsGA1UEAxMk YjdkZWY0NjMtNDA3MS00Yjk2LWFlZjQtZWNhYmNiMjJkNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nc90aFWXFa+Vy/qSTn7/IzbEaOogYg23hrb PwLfvN4jwHF2JLSDH+uHIa4O4qA3MFFng3YkLkTXvrS9RLR2ARxWHwWzstMTrfrt 0zDYexOty2+SfaNsjzivrLu+HEtp+528r/gtmNJedUsxW2/E2g5x9Nwrugq4RnFM gDlVe3ITu8ODcbPHUTUcU17Dv5iF4o0p3UKHKCA6s7IaS1r5zPG0zENdqSd968uy ldG9C+JURMD+QJvnV/paRoeLX+g1kMoK3gyDhG1RFbqJvBbT9myoFErayr3+QxUg mWIM7sQBc6U2gVrezKR6vY2JRvuOG1l1nunP1QiVj1vBU2IyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcCYklSzJazqF4f3hNRFT8Lq7C0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDIzZTNmNzYtNjBlMy0z ZjY2LWJlMzgtOTYzODVkMGFmOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyEggIzhyOyezWQmKtGEjak67RfDefBMFjwSVG5PUShra+pze/4liEd +6/tZ7RuzA6e8TaGJz0WpqggX9yAE/ec/zHEhnTojptMlSxUFgayBhRiPEF4qRAU 7XTcQ2OZQXVdIWI/Z+WgV5fnQcP1JMTUp6/hk8lnEo/sRt1IWe4NkO/0Ap24pAph HyhFBckZggdqx2thSBwkuodY7nXql1Q08rwPUZceICJ0T2qRA62J91MaRycalxwz TC+RQqD21qNlKWpfOivp91XMzp5tUlg6raKcegc0Vi1277Papv3zaLqmHlP9ZucL kp/Kbw93fCT3oJzHxsxM53xbOLjucJs= -----END CERTIFICATE-----Generated at Tue Jul 21 23:43:58 2026 by rpki-client