$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa File: 5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa (raw, json) Hash identifier: qa04eJBS5r0NLKB63bNEvCrj6Y8OT/7NyMHG+oA8I3I= Subject key identifier: 76:A0:3E:32:BB:EF:D2:65:7E:BA:40:A3:D8:DA:EA:B3:75:12:A0:8F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9BE52FF21F15B008B68DAE80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 272058 IP address blocks: 38.252.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:2f:f2:1f:15:b0:08:b6:8d:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=87b1173d-4a71-49de-baf5-9eae0a76298c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:4c:93:bd:aa:79:52:d4:c9:0e:cd:a3:62: 97:7f:17:39:a0:12:be:3c:e1:50:b6:dd:72:19:2a: fa:d9:12:b8:b2:c4:05:09:62:48:a9:26:1b:a8:78: 79:4b:ce:09:50:5b:05:a2:01:8d:4b:88:14:9b:65: 4e:dd:17:c7:48:d8:25:a8:83:d1:60:9c:85:83:43: 22:bd:ce:84:c9:6d:6f:02:c5:14:80:a2:92:cf:a9: 55:b4:e7:1a:9d:78:be:a0:f3:0a:6c:ad:12:7e:bc: 22:86:7e:99:33:42:06:3a:82:77:79:15:ea:cf:cc: 27:50:8c:05:11:b8:92:79:94:f3:75:e9:88:84:4d: e6:4d:18:74:bd:b0:46:6c:ab:e7:78:d6:62:18:ed: 7f:d7:e9:3d:08:74:84:31:12:f7:26:5f:10:bc:a7: e6:33:f0:3e:7f:90:ac:b4:71:5d:f1:58:15:91:58: 9b:53:31:ad:7c:4a:3d:67:96:df:29:19:e8:55:79: 0a:49:f8:cd:95:9c:36:a1:f2:d6:39:19:11:80:7c: 61:43:e5:be:d2:7f:4e:e7:dc:1d:4d:ed:41:0b:ba: c6:71:e6:76:65:ed:97:a2:ee:e9:88:68:4e:0b:35: c4:a3:d0:ed:0b:ee:26:93:3a:92:1a:53:70:37:36: dd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A0:3E:32:BB:EF:D2:65:7E:BA:40:A3:D8:DA:EA:B3:75:12:A0:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7a:90:d0:33:19:59:ac:d2:1b:90:84:79:83:79:a8:dd:bf: 91:db:e0:c8:c0:61:af:b4:a6:3e:e5:f5:67:43:49:62:96:3b: 12:f7:80:ae:ec:31:b6:21:b7:92:38:e9:25:cc:26:16:6a:a3: c1:fa:d4:9c:86:9a:61:66:c1:fe:f4:16:8d:98:e8:84:27:95: d7:71:4b:9b:05:f0:c7:df:51:58:35:5c:44:92:40:d3:29:a6: 1d:2c:ec:6a:f9:9e:ed:08:73:25:a0:e4:b1:0a:e4:fc:40:84: 58:52:94:1c:d4:d4:db:8f:02:21:29:bf:02:c5:1c:2d:fe:c5: 5c:f2:6e:6a:d4:53:6a:6c:76:2b:42:69:59:11:9d:40:7d:ba: 98:b0:93:03:ea:11:86:de:07:65:b1:a5:f6:02:7c:cc:90:f3: a8:f7:44:db:11:12:2d:5c:79:a8:08:bd:a0:f5:36:58:79:b7: 98:2a:cb:a2:3f:84:cf:34:91:96:fc:fc:80:10:0a:75:40:12: 87:4e:74:bd:92:7a:ed:f4:cc:70:3b:50:dc:d2:8d:07:6b:7e: 14:cc:69:27:01:e3:dd:80:d9:7f:91:b9:f1:db:72:c7:a2:ea: e1:81:17:88:98:8b:4b:73:73:8c:e1:e9:e5:72:50:6a:96:6c: 01:3c:b9:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5S/yHxWwCLaNroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ODdiMTE3M2QtNGE3MS00OWRlLWJhZjUtOWVhZTBhNzYyOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MJMk72qeVLUyQ7No2KXfxc5oBK+POFQtt1y GSr62RK4ssQFCWJIqSYbqHh5S84JUFsFogGNS4gUm2VO3RfHSNglqIPRYJyFg0Mi vc6EyW1vAsUUgKKSz6lVtOcanXi+oPMKbK0Sfrwihn6ZM0IGOoJ3eRXqz8wnUIwF EbiSeZTzdemIhE3mTRh0vbBGbKvneNZiGO1/1+k9CHSEMRL3Jl8QvKfmM/A+f5Cs tHFd8VgVkVibUzGtfEo9Z5bfKRnoVXkKSfjNlZw2ofLWORkRgHxhQ+W+0n9O59wd Te1BC7rGceZ2Ze2Xou7piGhOCzXEo9DtC+4mkzqSGlNwNzbdFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHagPjK779JlfrpAo9ja6rN1EqCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWM0NWY5ZmUtMWVlNy0z NGExLWIyMmItOTFkZDFkYWE3MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJvxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt6kNAzGVms0huQhHmDeajdv5Hb4MjAYa+0pj7l9WdDSWKWOxL3gK7s MbYht5I46SXMJhZqo8H61JyGmmFmwf70Fo2Y6IQnlddxS5sF8MffUVg1XESSQNMp ph0s7Gr5nu0IcyWg5LEK5PxAhFhSlBzU1NuPAiEpvwLFHC3+xVzybmrUU2psditC aVkRnUB9upiwkwPqEYbeB2WxpfYCfMyQ86j3RNsREi1ceagIvaD1Nlh5t5gqy6I/ hM80kZb8/IAQCnVAEodOdL2Seu30zHA7UNzSjQdrfhTMaScB492A2X+RufHbcsei 6uGBF4iYi0tzc4zh6eVyUGqWbAE8ueU= -----END CERTIFICATE-----Generated at Tue Jul 28 00:19:27 2026 by rpki-client