$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65b16338-a139-320b-81dd-7c3f5ecd3a78.roa File: 65b16338-a139-320b-81dd-7c3f5ecd3a78.roa (raw, json) Hash identifier: Yin85G/PC/NHyRYnRne4XLCPRibY5KHzcNEvzDzfOA0= Subject key identifier: 28:57:99:10:47:4A:05:32:67:1D:61:C4:99:28:69:41:B6:6D:12:FC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EAD1C6C24914774260C6116E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65b16338-a139-320b-81dd-7c3f5ecd3a78.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 263767 IP address blocks: 38.76.136.0/22 maxlen: 24 38.137.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:6c:24:91:47:74:26:0c:61:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=999ab112-2fe9-40f0-bd15-84a588217002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:b8:31:17:cf:69:03:82:f3:53:0a:a6:ff: cb:8e:4d:e1:4d:82:20:06:16:3e:74:3b:59:3e:07: 4a:f7:3c:14:a3:c9:bd:44:e9:53:2b:90:33:35:ee: 49:57:39:c7:ee:bc:5c:44:b2:bc:51:c5:82:3f:1a: e0:e0:0b:7d:3f:81:6a:87:1e:e8:ff:d2:3a:31:81: a3:d5:66:5e:e4:ff:56:f6:de:50:81:86:fc:1c:7c: e6:cb:55:ff:90:b5:2c:f1:dc:10:e4:59:94:95:36: 71:f6:0f:95:5d:c0:71:89:b0:eb:02:c0:32:e7:1f: d2:58:ef:4c:cb:ad:4d:1b:8b:92:9e:4a:cb:81:fb: f2:eb:30:55:24:c8:50:1f:6d:44:c1:b5:ed:92:c5: 52:a2:b6:f1:e1:cf:99:4b:ae:f7:95:bd:64:cd:95: b5:fd:74:56:87:6a:9b:5b:dd:b1:58:5b:cc:f8:d6: 1a:10:60:d4:47:a5:87:c4:cf:12:cd:b9:12:5e:8b: c4:9a:50:b0:52:c3:be:ec:05:d6:3f:3d:d4:b3:75: 33:a3:3e:8e:9a:75:54:3e:df:ec:eb:e6:5f:53:2b: ea:da:b1:8a:75:59:fc:0e:b4:13:36:c1:ae:05:56: eb:12:56:f0:81:0e:a3:da:7e:d5:66:cc:94:3f:66: e1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:99:10:47:4A:05:32:67:1D:61:C4:99:28:69:41:B6:6D:12:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65b16338-a139-320b-81dd-7c3f5ecd3a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.76.136.0/22 38.137.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b8:4e:d6:97:de:2b:6f:9b:50:d1:d8:fb:f9:c1:73:3b:3c: 86:39:8a:2e:fc:2e:a5:a8:78:0c:b6:77:2a:fc:de:0e:1a:64: c6:89:d1:e0:94:a6:1b:9e:35:aa:11:68:68:03:db:cf:49:09: 81:2c:9d:45:0e:77:15:c5:48:70:41:5f:4d:ec:90:c7:4e:4f: 0f:e5:8a:db:dc:7b:13:a4:3d:64:20:46:da:57:e1:e5:e3:36: 32:c1:56:2a:c8:18:46:6e:86:62:0b:cd:46:e4:21:ef:53:b6: 1d:1c:bd:5b:ea:87:47:fe:e0:d7:07:a5:1f:3b:96:72:81:8e: d4:74:cf:d7:3f:1f:07:12:9f:e7:bf:78:8f:54:d7:dd:d1:2f: c2:b9:c1:7e:61:30:6c:3f:f0:f2:0e:15:f2:75:88:db:70:95: 08:8c:0f:cf:6e:9d:b9:21:8b:0f:18:36:9d:68:b4:4e:2b:aa: 44:18:fd:5a:f2:2b:99:b9:f7:e4:e0:60:6e:76:90:c5:0e:89: 3a:0f:5a:67:30:74:f8:eb:cf:f7:27:0b:cf:64:d1:93:20:c6: d0:f5:72:aa:4b:85:d8:88:d9:f0:37:26:60:79:14:23:83:c2: 4b:b3:16:73:78:55:fa:3a:7e:eb:de:9d:67:73:f4:b9:2a:94: ba:09:d5:50 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6tHGwkkUd0JgxhFuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk OTk5YWIxMTItMmZlOS00MGYwLWJkMTUtODRhNTg4MjE3MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fu4MRfPaQOC81MKpv/Ljk3hTYIgBhY+dDtZ PgdK9zwUo8m9ROlTK5AzNe5JVznH7rxcRLK8UcWCPxrg4At9P4Fqhx7o/9I6MYGj 1WZe5P9W9t5QgYb8HHzmy1X/kLUs8dwQ5FmUlTZx9g+VXcBxibDrAsAy5x/SWO9M y61NG4uSnkrLgfvy6zBVJMhQH21EwbXtksVSorbx4c+ZS673lb1kzZW1/XRWh2qb W92xWFvM+NYaEGDUR6WHxM8SzbkSXovEmlCwUsO+7AXWPz3Us3Uzoz6OmnVUPt/s 6+ZfUyvq2rGKdVn8DrQTNsGuBVbrElbwgQ6j2n7VZsyUP2bhdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFChXmRBHSgUyZx1hxJkoaUG2bRL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjViMTYzMzgtYTEzOS0z MjBiLTgxZGQtN2MzZjVlY2QzYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJkyIAwQC JonoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABq4TtaX3itvm1DR2Pv5wXM7PIY5ii78LqWoeAy2dyr83g4a ZMaJ0eCUphueNaoRaGgD289JCYEsnUUOdxXFSHBBX03skMdOTw/litvcexOkPWQg RtpX4eXjNjLBVirIGEZuhmILzUbkIe9Tth0cvVvqh0f+4NcHpR87lnKBjtR0z9c/ HwcSn+e/eI9U193RL8K5wX5hMGw/8PIOFfJ1iNtwlQiMD89unbkhiw8YNp1otE4r qkQY/VryK5m59+TgYG52kMUOiToPWmcwdPjrz/cnC89k0ZMgxtD1cqpLhdiI2fA3 JmB5FCODwkuzFnN4Vfo6fuvenWdz9LkqlLoJ1VA= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:11 2026 by rpki-client