$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa File: 87b41eaf-23a1-30da-b30a-a05c5e920862.roa (raw, json) Hash identifier: /yOlNvlCuZhvIjCZIqNcjNb4MQWb753H1GF/S0hoxpM= Subject key identifier: 17:4C:43:76:6E:5F:CD:9A:43:E9:7F:CC:50:E8:C6:4E:63:96:9D:31 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA79BAEEAA9700DE439892580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 274252 IP address blocks: 38.97.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ae:ea:a9:70:0d:e4:39:89:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=925410e6-0a03-4a02-96d6-67b7dbaa72d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:46:22:c1:9c:68:5f:1b:9d:a1:7c:c4:7c: 48:ac:5a:a6:23:33:92:2d:ce:65:92:ec:da:1e:e4: 7f:f9:52:ee:32:e6:d4:ba:10:64:65:80:94:4d:8c: 66:2e:3b:f7:69:9c:a8:24:d2:08:58:a4:2c:a1:5b: 6b:7a:99:af:af:4d:ce:52:50:d2:66:97:b4:cb:13: 9e:e9:1c:c7:40:01:dc:88:b4:a6:07:4e:4d:8f:6d: 5b:af:e8:84:66:3d:b2:53:b3:b1:29:6e:36:09:e9: 1a:cb:ed:a1:b3:1f:b7:e9:18:75:fd:55:2b:d7:99: eb:0c:7a:d0:ab:24:6f:99:66:b7:d5:93:76:67:09: 6b:ff:ff:35:f6:fa:3d:2b:7d:d1:64:63:da:9e:cf: 4f:83:69:ae:70:12:ff:ea:39:e2:2d:a0:22:11:a9: d4:bd:03:b0:6b:9e:d7:4d:42:25:8c:53:28:b3:b6: 75:3c:84:5c:a1:0a:10:96:a6:a1:6c:a3:ff:18:72: b6:10:43:b9:43:71:12:7c:7c:a0:59:25:a2:e0:63: 85:3b:87:e2:f4:34:1f:59:c8:6f:fd:fe:47:d0:4b: 30:7d:e3:78:4f:45:7f:5b:21:28:36:df:56:96:5d: c9:ba:59:5a:68:ad:62:1d:35:68:3b:ae:e8:7f:a0: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4C:43:76:6E:5F:CD:9A:43:E9:7F:CC:50:E8:C6:4E:63:96:9D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87b41eaf-23a1-30da-b30a-a05c5e920862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.97.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2d:39:95:31:df:d9:1b:77:71:03:5c:0c:1d:d5:09:1a:50: 52:3d:4a:28:9b:7d:00:81:39:e4:11:02:3f:30:b8:25:fc:ed: a6:82:1a:6c:a3:bd:21:b9:0c:ec:ab:cd:ff:90:d0:fb:a1:3a: ac:a9:86:4a:6d:22:8b:48:6e:44:c1:c4:0c:c8:71:f4:df:c3: a8:0e:f7:2f:f3:0e:7b:50:04:86:65:2e:64:0b:87:a3:4d:0a: ac:07:1b:8e:6e:16:8f:4f:0d:70:61:10:d8:07:88:b0:0e:16: 21:04:ce:05:e9:38:07:1e:d5:84:44:4b:b9:fe:ef:25:11:7c: 10:72:f7:6a:df:9d:23:39:1f:7f:a3:7c:f7:8c:a5:71:21:4b: 18:d7:52:ca:17:cd:0e:9f:d6:25:23:b2:9c:eb:3d:f6:68:93: 9f:25:a2:55:74:86:2f:c3:f8:b7:03:02:bd:e3:1e:50:de:b1: 74:8c:18:ea:c5:54:25:7a:68:76:c2:f1:0d:ec:e2:ba:64:81: 8b:e2:23:07:70:32:19:de:6b:62:ee:d0:b5:c9:24:41:4f:4a: 98:98:74:e2:41:e4:29:3d:8d:f9:b0:b0:df:1e:0c:56:56:65: dd:ab:4b:a6:4c:f8:fe:74:a0:ff:13:bb:1b:7c:7c:ae:e4:02: b1:ae:8e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm67qqXAN5DmJJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTI1NDEwZTYtMGEwMy00YTAyLTk2ZDYtNjdiN2RiYWE3MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFGIsGcaF8bnaF8xHxIrFqmIzOSLc5lkuza HuR/+VLuMubUuhBkZYCUTYxmLjv3aZyoJNIIWKQsoVtrepmvr03OUlDSZpe0yxOe 6RzHQAHciLSmB05Nj21br+iEZj2yU7OxKW42Cekay+2hsx+36Rh1/VUr15nrDHrQ qyRvmWa31ZN2Zwlr//819vo9K33RZGPans9Pg2mucBL/6jniLaAiEanUvQOwa57X TUIljFMos7Z1PIRcoQoQlqahbKP/GHK2EEO5Q3ESfHygWSWi4GOFO4fi9DQfWchv /f5H0EswfeN4T0V/WyEoNt9Wll3JullaaK1iHTVoO67of6C5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdMQ3ZuX82aQ+l/zFDoxk5jlp0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdiNDFlYWYtMjNhMS0z MGRhLWIzMGEtYTA1YzVlOTIwODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMtOZUx39kbd3EDXAwd1QkaUFI9SiibfQCBOeQRAj8wuCX87aaCGmyj vSG5DOyrzf+Q0PuhOqyphkptIotIbkTBxAzIcfTfw6gO9y/zDntQBIZlLmQLh6NN CqwHG45uFo9PDXBhENgHiLAOFiEEzgXpOAce1YRES7n+7yURfBBy92rfnSM5H3+j fPeMpXEhSxjXUsoXzQ6f1iUjspzrPfZok58lolV0hi/D+LcDAr3jHlDesXSMGOrF VCV6aHbC8Q3s4rpkgYviIwdwMhnea2Lu0LXJJEFPSpiYdOJB5Ck9jfmwsN8eDFZW Zd2rS6ZM+P50oP8Tuxt8fK7kArGujt0= -----END CERTIFICATE-----Generated at Fri Sep 11 13:10:58 2026 by rpki-client