$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7358a819-0f1f-3956-ab05-4f9184a5ea13.roa File: 7358a819-0f1f-3956-ab05-4f9184a5ea13.roa (raw, json) Hash identifier: ZbJkYjUXOMXg26dF/TNnCqUyqfmmyXgL2T3aca7lqTI= Subject key identifier: D0:50:A7:59:AC:24:20:C5:32:4C:FC:C7:B6:F9:8B:CB:AA:BD:C5:F5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF457228E0100FEC2341B9100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7358a819-0f1f-3956-ab05-4f9184a5ea13.roa Signing time: Tue 25 Aug 2026 13:21:19 +0000 ROA not before: Tue 25 Aug 2026 13:21:19 +0000 ROA not after: Mon 23 Nov 2026 14:21:19 +0000 asID: 402657 IP address blocks: 38.114.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:57:22:8e:01:00:fe:c2:34:1b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 25 13:21:19 2026 GMT Not After : Nov 23 14:21:19 2026 GMT Subject: CN=bcb9afe9-8f3a-4f76-aef5-c829ba334e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:e3:78:2f:34:96:17:b9:07:34:c2:ba:9d: a4:b2:83:74:fe:66:c0:09:24:e7:72:91:e7:a9:da: f2:45:16:36:42:30:c7:00:74:7b:86:02:1e:d2:44: db:bf:d1:88:e7:61:2b:dc:2f:5d:10:74:01:0f:fc: ae:bf:e9:85:db:16:96:18:3d:c7:28:92:b2:1c:84: 01:30:02:ce:55:4e:39:78:5f:d5:f3:9f:a0:f4:8c: ec:3a:ee:39:12:20:a9:90:72:de:8b:39:31:64:bf: e7:bc:37:1c:26:d2:d3:36:6c:14:3e:45:a5:8c:32: f7:0a:06:5b:c7:f5:82:33:fa:f7:81:6e:f0:33:ca: 7f:6d:77:bd:4f:c3:f9:21:e4:6b:48:a9:73:7a:7c: 88:93:69:5c:3c:40:0f:f5:a5:0b:2b:96:86:71:dc: 16:3c:43:cf:53:c2:1f:76:88:46:a8:b6:0b:c6:14: f1:4b:b1:20:93:8e:53:ab:68:a1:9e:95:df:60:6e: 08:4f:d2:5a:30:54:eb:b8:48:f5:e9:ed:97:28:b8: f6:2a:58:2d:d8:9a:e4:67:36:8d:c0:39:4a:7f:25: b4:f1:02:90:ec:73:91:36:4c:b7:84:f9:41:0c:d8: 0d:4e:1b:e8:5d:c7:29:6a:d4:d2:24:64:81:d9:e7: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:50:A7:59:AC:24:20:C5:32:4C:FC:C7:B6:F9:8B:CB:AA:BD:C5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7358a819-0f1f-3956-ab05-4f9184a5ea13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.114.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:72:e8:92:32:35:0f:05:91:fe:ff:6a:65:77:07:ee:7f:fd: 00:16:64:0f:52:3f:ca:2d:aa:67:8e:b2:a4:21:db:03:af:98: 1b:fe:7f:50:68:7d:a6:0b:a1:5e:25:c3:44:7a:f9:c5:d7:06: 75:dd:aa:ec:5d:88:e7:cf:d7:57:46:90:0b:b7:4d:d7:16:7e: 63:73:0a:27:d4:68:41:6d:26:bc:ed:2c:5c:2c:30:32:68:78: ab:4b:8f:de:17:de:6b:74:49:90:39:f4:65:9a:9d:7a:0b:43: fd:a8:e4:e4:f4:c7:ba:67:40:2d:b3:a6:82:1b:f8:3c:3c:3b: be:f7:a3:85:69:48:db:72:62:46:c6:d3:94:bc:b6:16:d5:d1: a6:3b:28:d9:c4:5f:3b:06:54:af:3d:a9:aa:d5:21:ee:49:41: b9:97:dc:61:cb:cf:52:a4:11:b8:1e:0e:8b:e9:10:d6:26:2b: ef:fc:da:43:0e:33:a9:94:de:0e:e5:72:e1:45:27:7b:0e:a5: 38:bd:af:c0:d5:9d:1e:1d:07:9c:c9:cf:cb:1c:77:d1:bf:7a: 80:d6:40:fd:da:37:a0:9d:56:c8:01:e2:3b:15:7b:ab:b4:4b: be:cd:1b:3d:23:83:32:b5:4a:45:f2:7d:e5:9b:16:38:37:c6: fb:a7:18:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70VyKOAQD+wjQbkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNTEzMjExOVoXDTI2MTEyMzE0MjExOVowLzEtMCsGA1UEAxMk YmNiOWFmZTktOGYzYS00Zjc2LWFlZjUtYzgyOWJhMzM0ZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvbjeC80lhe5BzTCup2ksoN0/mbACSTncpHn qdryRRY2QjDHAHR7hgIe0kTbv9GI52Er3C9dEHQBD/yuv+mF2xaWGD3HKJKyHIQB MALOVU45eF/V85+g9IzsOu45EiCpkHLeizkxZL/nvDccJtLTNmwUPkWljDL3CgZb x/WCM/r3gW7wM8p/bXe9T8P5IeRrSKlzenyIk2lcPEAP9aULK5aGcdwWPEPPU8If dohGqLYLxhTxS7Egk45Tq2ihnpXfYG4IT9JaMFTruEj16e2XKLj2Klgt2JrkZzaN wDlKfyW08QKQ7HORNky3hPlBDNgNThvoXccpatTSJGSB2ecRFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBQp1msJCDFMkz8x7b5i8uqvcX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzM1OGE4MTktMGYxZi0z OTU2LWFiMDUtNGY5MTg0YTVlYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnLaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGly6JIyNQ8Fkf7/amV3B+5//QAWZA9SP8otqmeOsqQh2wOvmBv+f1Bo faYLoV4lw0R6+cXXBnXdquxdiOfP11dGkAu3TdcWfmNzCifUaEFtJrztLFwsMDJo eKtLj94X3mt0SZA59GWanXoLQ/2o5OT0x7pnQC2zpoIb+Dw8O773o4VpSNtyYkbG 05S8thbV0aY7KNnEXzsGVK89qarVIe5JQbmX3GHLz1KkEbgeDovpENYmK+/82kMO M6mU3g7lcuFFJ3sOpTi9r8DVnR4dB5zJz8scd9G/eoDWQP3aN6CdVsgB4jsVe6u0 S77NGz0jgzK1SkXyfeWbFjg3xvunGLM= -----END CERTIFICATE-----Generated at Fri Sep 11 13:05:10 2026 by rpki-client