$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5e529de4-dbf2-3641-8895-2bfeadb9e785.roa File: 5e529de4-dbf2-3641-8895-2bfeadb9e785.roa (raw, json) Hash identifier: /VgXeY0nQ3L2Ze/DsqUcUQHhV8pgGs8u+zxrRL2OHo0= Subject key identifier: 52:FE:93:54:EE:56:19:C9:2A:83:52:5A:50:F0:4D:E1:A9:A3:1B:B1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E5E3D245254E64B21E1714FC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5e529de4-dbf2-3641-8895-2bfeadb9e785.roa Signing time: Thu 02 Jul 2026 18:57:41 +0000 ROA not before: Thu 02 Jul 2026 18:57:41 +0000 ROA not after: Wed 30 Sep 2026 18:57:41 +0000 asID: 0 IP address blocks: 38.98.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:3d:24:52:54:e6:4b:21:e1:71:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 2 18:57:41 2026 GMT Not After : Sep 30 18:57:41 2026 GMT Subject: CN=fdd6eee1-c029-4cba-85cf-bb03833c4ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:29:f8:2c:1a:33:2f:5d:95:d6:74:0e:aa: a4:d2:5e:63:8d:1c:d1:e9:8e:ae:84:bc:3b:31:87: 8f:9d:0e:9d:b0:12:07:18:0e:e9:15:25:bd:29:0b: 94:d1:cf:e4:b3:ce:b5:c1:41:2b:b9:6e:b7:7d:4b: f5:dc:1a:13:46:7b:0d:9e:62:8a:fa:06:12:96:95: fb:66:8f:38:85:c1:d1:0f:c6:fd:6f:40:e7:8c:2a: ea:a9:2e:c9:fa:d6:a4:06:2d:7c:0a:61:f0:12:c0: be:f0:7d:f4:24:be:5d:65:3f:9f:92:3c:66:62:c4: 07:4b:54:03:1c:38:5f:79:8e:04:cb:56:8c:51:c6: 3e:e6:4a:fa:bb:7f:3e:20:7a:fa:89:d7:f6:20:ad: 38:83:cc:97:44:4e:d0:f6:b3:66:0a:3a:0a:3c:f0: b7:bd:64:e9:c3:f7:c7:46:c1:e2:4c:23:be:b3:c9: 68:97:a9:a4:07:d0:15:98:20:88:6f:8f:af:31:94: 58:f2:0d:41:54:f7:4b:48:37:c6:bc:42:e8:b6:94: 05:58:3a:43:1b:fd:de:01:cb:9b:d1:dc:a8:9f:69: 9f:8d:76:3c:ea:d6:df:db:c5:a5:40:88:b9:e9:56: 61:84:b7:71:20:d7:20:db:e4:dd:24:20:d0:f4:c7: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:93:54:EE:56:19:C9:2A:83:52:5A:50:F0:4D:E1:A9:A3:1B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5e529de4-dbf2-3641-8895-2bfeadb9e785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.98.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:3b:b7:24:22:42:24:f3:f8:02:68:44:b4:1a:40:da:3f:48: 7b:7c:24:94:d4:37:db:c3:44:3e:4b:45:0f:6a:08:02:f3:38: 3f:16:74:d0:c5:e6:24:96:53:19:39:81:fc:0c:d1:bb:a4:8b: 66:a4:00:c3:32:dd:58:21:67:73:5c:86:47:9a:b9:b5:a8:88: aa:d3:c9:da:a4:18:2b:f3:f2:fb:11:b9:e5:02:ce:dc:74:7c: d9:ff:5d:30:c9:41:03:47:89:16:5b:35:8e:8e:4f:cb:6b:83: 27:af:cb:0a:17:56:6b:c8:a3:b4:ed:9c:19:4c:78:83:08:ec: 02:54:76:8b:59:a8:61:c6:04:25:ed:cc:df:c5:ba:66:ce:90: ee:39:25:70:63:9d:a6:40:7e:38:74:47:ab:ba:e5:44:32:3e: 8f:91:b3:7e:15:90:b6:7c:89:50:2f:87:12:a1:53:c8:2f:09: c6:26:66:df:bf:db:e2:13:97:58:b9:7b:2a:5d:98:7c:e7:4c: 00:44:d4:0e:ca:44:c6:84:78:70:dc:b9:a2:56:8f:e4:13:f3: 69:6c:56:09:49:88:36:19:df:15:b4:cc:a3:66:a6:94:8e:03: cc:73:4f:d3:5c:03:0f:d3:f2:17:60:c5:53:77:d6:c2:e8:e2: c0:e2:20:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ePSRSVOZLIeFxT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcwMjE4NTc0MVoXDTI2MDkzMDE4NTc0MVowLzEtMCsGA1UEAxMk ZmRkNmVlZTEtYzAyOS00Y2JhLTg1Y2YtYmIwMzgzM2M0ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X4p+CwaMy9dldZ0Dqqk0l5jjRzR6Y6uhLw7 MYePnQ6dsBIHGA7pFSW9KQuU0c/ks861wUEruW63fUv13BoTRnsNnmKK+gYSlpX7 Zo84hcHRD8b9b0DnjCrqqS7J+takBi18CmHwEsC+8H30JL5dZT+fkjxmYsQHS1QD HDhfeY4Ey1aMUcY+5kr6u38+IHr6idf2IK04g8yXRE7Q9rNmCjoKPPC3vWTpw/fH RsHiTCO+s8lol6mkB9AVmCCIb4+vMZRY8g1BVPdLSDfGvELotpQFWDpDG/3eAcub 0dyon2mfjXY86tbf28WlQIi56VZhhLdxINcg2+TdJCDQ9MdHtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL+k1TuVhnJKoNSWlDwTeGpoxuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWU1MjlkZTQtZGJmMi0z NjQxLTg4OTUtMmJmZWFkYjllNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK47tyQiQiTz+AJoRLQaQNo/SHt8JJTUN9vDRD5LRQ9qCALzOD8WdNDF 5iSWUxk5gfwM0buki2akAMMy3VghZ3NchkeaubWoiKrTydqkGCvz8vsRueUCztx0 fNn/XTDJQQNHiRZbNY6OT8trgyevywoXVmvIo7TtnBlMeIMI7AJUdotZqGHGBCXt zN/FumbOkO45JXBjnaZAfjh0R6u65UQyPo+Rs34VkLZ8iVAvhxKhU8gvCcYmZt+/ 2+ITl1i5eypdmHznTABE1A7KRMaEeHDcuaJWj+QT82lsVglJiDYZ3xW0zKNmppSO A8xzT9NcAw/T8hdgxVN31sLo4sDiIEM= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:23 2026 by rpki-client