$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa File: 87b41eaf-23a1-30da-b30a-a05c5e920862.roa (raw, json) Hash identifier: X+2VpyszzUdtTOiambBpuCoMxkrt5DsxOeUD4Ge5q04= Subject key identifier: 08:9F:20:3C:58:02:C1:92:14:E0:13:A2:48:65:23:93:B8:5A:C9:5B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E02D07A661C912A439CE23340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa Signing time: Sun 31 May 2026 01:00:10 +0000 ROA not before: Sun 31 May 2026 01:00:10 +0000 ROA not after: Sat 29 Aug 2026 01:00:10 +0000 asID: 274252 IP address blocks: 38.97.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:02:d0:7a:66:1c:91:2a:43:9c:e2:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 31 01:00:10 2026 GMT Not After : Aug 29 01:00:10 2026 GMT Subject: CN=3aec90fc-2bb2-4326-b75b-45f051bfc4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:d8:ee:44:cf:8f:c9:6d:65:30:0c:2f:a5: 18:35:4f:4a:84:4b:58:71:3b:59:42:7a:e6:95:3c: af:ad:4a:ed:19:a6:b9:4b:11:d5:19:c7:f7:21:1a: 95:c0:9c:c9:d9:ca:b3:de:e0:f7:7d:78:73:1e:a3: 67:87:ce:ac:70:34:7b:ea:6d:e1:77:e3:d6:f0:2f: 3f:ac:7e:bb:50:57:49:65:1d:a9:df:a7:a5:f4:cd: 26:6b:c7:ff:1a:e6:9e:71:6a:ed:58:97:5f:ae:b3: 21:57:78:b2:6a:a1:30:05:46:79:e2:39:03:1f:9f: 44:28:6c:d4:bf:b5:be:e9:09:05:94:a1:d8:36:49: 58:b5:9f:77:e3:e4:14:ff:54:51:7b:fa:ef:90:18: ed:19:c6:33:b9:53:ac:c7:a8:3f:49:46:7b:79:56: 62:58:94:19:61:28:b3:1a:f4:9d:83:96:e1:15:d7: b3:8a:be:98:a2:3d:30:04:cd:54:77:37:bc:8d:dd: e1:e4:07:ad:fb:56:4c:5b:b7:8f:7e:67:ea:fd:aa: 21:c2:d7:4e:f5:bd:3c:da:89:3b:91:c0:76:f7:15: 97:d0:4e:10:6e:a0:8b:f8:99:c3:7b:5a:92:48:77: d5:8f:9b:6f:06:77:c1:01:33:3c:4f:33:43:d3:a2: f5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9F:20:3C:58:02:C1:92:14:E0:13:A2:48:65:23:93:B8:5A:C9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.97.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d9:6d:55:98:30:5f:c2:79:0f:52:db:73:32:e3:62:d8:1a: b7:c9:2d:80:78:79:9b:1a:d5:7b:9a:9b:a4:c5:c7:03:2d:e5: 41:48:b0:c2:7a:68:ef:f9:a7:7b:73:ee:fe:db:72:30:38:7d: fb:90:5b:d5:7f:b6:36:0f:ca:7b:54:7a:43:43:e4:6e:3f:a7: b8:67:ee:35:f1:19:88:2e:bd:29:a4:95:6f:90:28:0a:d8:bc: 70:4d:8c:db:1f:63:f4:eb:35:ae:e6:48:bb:3e:5a:54:cf:ac: 03:6a:06:ad:ab:f4:b7:d4:6f:96:44:43:7b:b7:04:42:87:95: 9e:46:f2:4d:4e:13:67:38:be:bc:5b:e1:70:c9:dd:0a:4d:60: 65:ca:e6:be:ab:86:06:fe:ab:6e:58:c1:7d:23:f1:ba:0a:f3: 54:09:ca:aa:c1:cc:7d:38:ac:e7:7d:7e:53:e7:9e:b3:39:ef: b3:7c:ab:5f:44:47:0b:c0:e7:9b:ce:b8:3d:54:fb:1b:32:07: 72:44:59:c8:67:36:49:cd:91:d4:9d:13:57:49:e0:0e:f7:9b: 90:e0:f6:3f:86:cb:67:a6:1d:de:e1:8e:5e:de:2f:52:a8:f1: 38:c5:bf:cf:4c:74:ad:7e:55:35:90:83:39:c1:fe:ca:83:6a: 52:d2:42:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4C0HpmHJEqQ5ziM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUzMTAxMDAxMFoXDTI2MDgyOTAxMDAxMFowLzEtMCsGA1UEAxMk M2FlYzkwZmMtMmJiMi00MzI2LWI3NWItNDVmMDUxYmZjNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsazY7kTPj8ltZTAML6UYNU9KhEtYcTtZQnrm lTyvrUrtGaa5SxHVGcf3IRqVwJzJ2cqz3uD3fXhzHqNnh86scDR76m3hd+PW8C8/ rH67UFdJZR2p36el9M0ma8f/GuaecWrtWJdfrrMhV3iyaqEwBUZ54jkDH59EKGzU v7W+6QkFlKHYNklYtZ934+QU/1RRe/rvkBjtGcYzuVOsx6g/SUZ7eVZiWJQZYSiz GvSdg5bhFdezir6Yoj0wBM1Udze8jd3h5Aet+1ZMW7ePfmfq/aohwtdO9b082ok7 kcB29xWX0E4QbqCL+JnDe1qSSHfVj5tvBnfBATM8TzND06L12wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAifIDxYAsGSFOATokhlI5O4WslbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdiNDFlYWYtMjNhMS0z MGRhLWIzMGEtYTA1YzVlOTIwODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzZbVWYMF/CeQ9S23My42LYGrfJLYB4eZsa1Xuam6TFxwMt5UFIsMJ6 aO/5p3tz7v7bcjA4ffuQW9V/tjYPyntUekND5G4/p7hn7jXxGYguvSmklW+QKArY vHBNjNsfY/TrNa7mSLs+WlTPrANqBq2r9LfUb5ZEQ3u3BEKHlZ5G8k1OE2c4vrxb 4XDJ3QpNYGXK5r6rhgb+q25YwX0j8boK81QJyqrBzH04rOd9flPnnrM577N8q19E RwvA55vOuD1U+xsyB3JEWchnNknNkdSdE1dJ4A73m5Dg9j+Gy2emHd7hjl7eL1Ko 8TjFv89MdK1+VTWQgznB/sqDalLSQqA= -----END CERTIFICATE-----Generated at Fri Jun 12 22:37:23 2026 by rpki-client