$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa File: 5aa6ef72-237e-3afb-88b6-12fde469da44.roa (raw, json) Hash identifier: 2lyK759SA+u0jgd5L/SftX19kL/k69bPS+KLCtGWHPY= Subject key identifier: 52:37:46:8D:C0:A9:45:D7:64:39:BD:CE:E2:B2:CA:40:4F:D8:8F:2F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECA6C6C1D8471376E9F1853C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 273263 IP address blocks: 38.124.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6c:1d:84:71:37:6e:9f:18:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=388aad0f-4f9a-4c40-bc5e-5d55496c8e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:14:c4:00:1f:f1:37:f4:fd:2b:38:66:2d: 80:68:7b:e9:de:8a:99:f3:51:94:e1:55:f0:46:27: 42:c2:29:de:d8:f6:81:19:1e:0e:e0:b8:f0:b6:92: 79:ea:34:2a:64:5e:f6:df:37:16:c2:31:86:e5:18: d2:0f:18:a0:20:2e:fb:af:1e:3c:46:a3:8b:d9:bb: bb:67:a6:06:ac:4b:24:d5:90:5f:64:0f:47:6a:c2: 9e:2c:66:d6:25:b0:a4:85:b5:b0:4f:88:17:b1:8c: 80:0f:e5:3e:25:fc:b6:21:0f:27:a9:e2:4d:50:ec: 8e:1c:9b:07:c9:0d:ae:1a:b8:1d:15:d5:dc:27:cd: 6b:43:44:0f:bd:5a:e2:a3:c7:e3:8d:00:35:fb:59: f5:ee:64:99:8f:61:41:6d:78:dc:fa:da:b3:c8:a1: 1f:aa:91:8e:a7:d4:4f:e3:7e:63:a4:e2:97:3f:f8: e6:4f:29:8a:ab:45:c5:a2:76:d8:b3:46:8b:e4:de: c2:4a:e5:61:f0:f0:e8:3c:37:d9:11:f1:80:9c:a6: 12:80:0a:d2:93:68:ee:55:23:ac:07:87:8d:2d:b4: 70:91:ea:c2:47:05:87:4f:71:a8:8c:74:2c:da:53: d5:4c:a5:f9:e8:66:cf:48:94:8b:20:ce:75:32:86: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:46:8D:C0:A9:45:D7:64:39:BD:CE:E2:B2:CA:40:4F:D8:8F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.124.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c2:0d:1f:82:3e:9f:ca:a2:cc:b9:82:60:6c:82:ec:21:bd: 63:8a:68:d4:17:5f:06:ba:65:5d:d9:fa:c3:ee:38:67:c2:e8: 2a:ec:ab:26:00:5d:5d:31:09:7d:8a:68:1a:bc:14:6d:7d:68: a2:e6:b1:85:9d:f1:ce:49:8b:93:5a:b9:20:e8:ac:66:79:34: 2d:bd:02:8f:29:ae:f2:1e:3f:e2:dc:a7:44:b6:91:ea:04:6d: 50:57:2c:ad:81:79:d0:8c:e3:f0:07:73:ca:93:4c:28:c1:93: d3:e1:f1:d7:ab:7a:fc:5e:7c:34:fb:45:a2:78:f6:62:85:99: f6:c2:96:63:5b:8d:a0:cd:99:76:65:3b:69:fc:ba:fb:d4:60: d0:85:8a:53:a4:e1:24:33:18:da:7c:81:85:4f:90:d1:f7:bb: 33:4d:ef:8c:9e:05:75:e4:03:ba:06:a5:a5:bb:e8:22:f0:f6: ee:df:38:cc:c1:0f:85:0d:f3:b9:62:71:ec:3c:ef:cf:a9:de: 6f:25:76:e5:cb:b6:f9:28:58:9a:bd:9d:ab:f3:ae:03:8d:6b: 41:52:6d:bb:ce:64:90:e5:2f:89:34:db:c1:53:3d:e1:d6:c3: bc:6b:3d:2d:04:3c:61:2a:b7:ed:3d:cd:bc:2e:bb:af:f2:7c: d4:c1:41:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGwdhHE3bp8YU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk Mzg4YWFkMGYtNGY5YS00YzQwLWJjNWUtNWQ1NTQ5NmM4ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzMUxAAf8Tf0/Ss4Zi2AaHvp3oqZ81GU4VXw RidCwine2PaBGR4O4LjwtpJ56jQqZF723zcWwjGG5RjSDxigIC77rx48RqOL2bu7 Z6YGrEsk1ZBfZA9HasKeLGbWJbCkhbWwT4gXsYyAD+U+Jfy2IQ8nqeJNUOyOHJsH yQ2uGrgdFdXcJ81rQ0QPvVrio8fjjQA1+1n17mSZj2FBbXjc+tqzyKEfqpGOp9RP 435jpOKXP/jmTymKq0XFonbYs0aL5N7CSuVh8PDoPDfZEfGAnKYSgArSk2juVSOs B4eNLbRwkerCRwWHT3GojHQs2lPVTKX56GbPSJSLIM51MobVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI3Ro3AqUXXZDm9zuKyykBP2I8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFhNmVmNzItMjM3ZS0z YWZiLTg4YjYtMTJmZGU0NjlkYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/CDR+CPp/Kosy5gmBsguwhvWOKaNQXXwa6ZV3Z+sPuOGfC6CrsqyYA XV0xCX2KaBq8FG19aKLmsYWd8c5Ji5NauSDorGZ5NC29Ao8prvIeP+Lcp0S2keoE bVBXLK2BedCM4/AHc8qTTCjBk9Ph8derevxefDT7RaJ49mKFmfbClmNbjaDNmXZl O2n8uvvUYNCFilOk4SQzGNp8gYVPkNH3uzNN74yeBXXkA7oGpaW76CLw9u7fOMzB D4UN87licew878+p3m8lduXLtvkoWJq9navzrgONa0FSbbvOZJDlL4k028FTPeHW w7xrPS0EPGEqt+09zbwuu6/yfNTBQZE= -----END CERTIFICATE-----Generated at Fri Sep 11 14:24:00 2026 by rpki-client