$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/72f83ced-7bcf-370a-a9e0-aeb2b3f2d98e.roa File: 72f83ced-7bcf-370a-a9e0-aeb2b3f2d98e.roa (raw, json) Hash identifier: iLre6J2baKunnBgUA28girT+acXhWzkbs44CMsQBoU0= Subject key identifier: 57:CD:07:54:0F:29:37:61:37:96:F1:9B:84:33:0A:1F:A0:CF:28:7A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EAA518896AB015F365CE5C580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/72f83ced-7bcf-370a-a9e0-aeb2b3f2d98e.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 150044 IP address blocks: 38.109.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:88:96:ab:01:5f:36:5c:e5:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=c1c95510-0f59-48e3-bb6b-e62f7cf47a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:89:5d:2f:f3:c1:9b:f5:be:0a:51:c4:30: de:0a:bc:c9:a1:33:38:de:63:65:f0:c6:5a:81:9b: 39:c2:42:cb:c1:d6:5b:d8:86:fd:d1:3f:d4:68:77: c4:2f:68:35:b6:e8:c6:11:56:2f:f9:f0:9c:3d:f5: a9:31:23:19:25:27:58:8e:d7:e5:0e:77:76:29:e4: 4f:ee:20:30:bc:d0:6e:6c:70:e3:aa:18:01:fc:a2: 29:5c:df:95:0c:24:a1:5b:58:e7:66:4b:64:c7:9c: 0e:31:c6:88:a6:01:24:1b:a1:68:5e:6f:f5:c5:6a: 74:f8:62:a4:96:29:94:73:b4:38:2b:2c:4c:cc:9f: 93:0f:b3:8b:46:e2:69:bf:89:b3:6f:d9:1e:b3:02: 91:ff:37:fa:f8:36:85:47:1c:13:28:95:0e:22:12: f0:0a:90:1b:bb:e5:5a:2a:74:ad:b8:28:e5:cb:57: ab:9f:0e:6f:23:56:92:c5:fb:59:84:8a:ba:1c:d8: 13:e8:c5:64:49:45:c9:ae:73:56:a8:57:cb:51:6b: e8:57:fc:24:68:ec:28:e6:6b:81:30:8e:27:cf:96: 92:52:79:95:21:13:f7:12:66:6a:57:ae:45:51:32: 0d:96:01:33:06:8e:0d:d1:74:e9:36:6d:0e:d1:ad: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CD:07:54:0F:29:37:61:37:96:F1:9B:84:33:0A:1F:A0:CF:28:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/72f83ced-7bcf-370a-a9e0-aeb2b3f2d98e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.109.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b9:29:3f:23:41:b7:e5:57:3f:81:48:b9:be:ef:76:37:cd: 26:4d:74:34:05:97:54:7c:a9:4c:d3:82:6d:38:cc:c7:9b:f9: a3:f8:66:87:58:27:5d:f8:e9:b3:be:98:86:be:2a:46:71:87: 98:05:9a:a6:68:e6:f7:12:28:96:6f:3f:ef:82:65:71:74:b9: fe:8a:7a:75:d3:43:da:67:4c:e8:be:30:4f:f7:e9:3b:f6:1b: 00:42:57:8c:03:98:87:d0:11:e5:0c:70:bf:b9:dd:de:51:98: 60:f2:5a:9c:89:88:39:dc:c0:a8:d2:1e:90:4a:19:b9:b2:ba: c1:81:66:74:be:98:c6:99:5c:e1:c4:1a:b7:dc:6c:d8:47:c5: 25:af:08:37:6e:e7:be:9b:cb:45:40:97:30:a9:0e:62:cc:ce: 25:e6:28:be:a6:2d:09:6b:84:aa:30:90:b0:f1:c9:7f:f0:75: 76:df:a1:8c:e0:53:72:58:89:84:5a:f1:04:b8:22:c7:54:4e: 38:9c:b0:a5:f5:86:d8:7b:33:ce:a1:76:ca:49:06:ee:cb:35: fd:aa:93:24:ab:b4:1a:bc:24:7d:30:6e:c9:a8:23:ff:70:98: d7:bc:58:72:ed:fc:67:34:a8:49:7c:6e:65:b3:6f:2f:5c:c2: 44:41:11:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUYiWqwFfNlzlxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk YzFjOTU1MTAtMGY1OS00OGUzLWJiNmItZTYyZjdjZjQ3YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKJXS/zwZv1vgpRxDDeCrzJoTM43mNl8MZa gZs5wkLLwdZb2Ib90T/UaHfEL2g1tujGEVYv+fCcPfWpMSMZJSdYjtflDnd2KeRP 7iAwvNBubHDjqhgB/KIpXN+VDCShW1jnZktkx5wOMcaIpgEkG6FoXm/1xWp0+GKk limUc7Q4KyxMzJ+TD7OLRuJpv4mzb9keswKR/zf6+DaFRxwTKJUOIhLwCpAbu+Va KnStuCjly1ernw5vI1aSxftZhIq6HNgT6MVkSUXJrnNWqFfLUWvoV/wkaOwo5muB MI4nz5aSUnmVIRP3EmZqV65FUTINlgEzBo4N0XTpNm0O0a0ZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfNB1QPKTdhN5bxm4QzCh+gzyh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzJmODNjZWQtN2JjZi0z NzBhLWE5ZTAtYWViMmIzZjJkOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW5KT8jQbflVz+BSLm+73Y3zSZNdDQFl1R8qUzTgm04zMeb+aP4ZodY J1346bO+mIa+KkZxh5gFmqZo5vcSKJZvP++CZXF0uf6KenXTQ9pnTOi+ME/36Tv2 GwBCV4wDmIfQEeUMcL+53d5RmGDyWpyJiDncwKjSHpBKGbmyusGBZnS+mMaZXOHE GrfcbNhHxSWvCDdu576by0VAlzCpDmLMziXmKL6mLQlrhKowkLDxyX/wdXbfoYzg U3JYiYRa8QS4IsdUTjicsKX1hth7M86hdspJBu7LNf2qkySrtBq8JH0wbsmoI/9w mNe8WHLt/Gc0qEl8bmWzby9cwkRBEaw= -----END CERTIFICATE-----Generated at Sat Sep 5 06:21:24 2026 by rpki-client