$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa File: 89ca7cd7-8624-3016-b967-e20d9bd36b70.roa (raw, json) Hash identifier: 4ltfeY7a+YS4iAAW4tkBqnX2HcD55jI5VoTG0z+KewI= Subject key identifier: 2D:DE:92:31:78:B4:6D:58:04:D3:84:C2:EE:EE:64:E5:A1:4D:4F:29 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E1A144F4DB64A479536EBEA80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 274128 IP address blocks: 38.19.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:4f:4d:b6:4a:47:95:36:eb:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=2d5dcd48-3fba-46e6-9baa-13b9a8cef1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:9d:5a:2d:be:9c:3e:3d:5d:d3:30:7c:6c: ae:6d:f4:db:f9:23:59:50:6c:7a:8d:50:ff:ae:4f: 16:a1:82:93:03:8c:50:1b:e7:dc:c1:b8:46:e7:e5: 07:ae:f9:93:56:72:1b:71:90:f1:d7:5b:0c:d6:d5: f3:a1:29:85:bd:de:40:f1:21:00:d9:72:20:69:05: aa:33:2c:8d:46:95:8b:69:ef:b0:00:64:43:dd:9c: e2:b6:94:bc:70:dd:61:79:58:62:ef:bd:90:16:f6: 60:f5:53:8c:11:db:53:a9:a5:71:19:e6:0b:ec:61: ff:56:8f:d2:58:f6:d1:a2:e5:a1:ff:36:89:d1:05: 62:5a:ed:d7:7e:89:52:e8:8a:33:ec:1f:d2:16:27: f3:a8:bf:d8:0c:f7:b1:03:36:2d:57:c5:dd:c2:14: ac:4d:4a:52:8e:39:fc:c5:54:a7:77:7d:f0:3b:0e: 69:c1:20:7d:76:b3:cb:61:50:c0:ce:cb:b7:9b:08: b4:2f:a7:01:f0:df:39:69:69:81:d8:5b:f6:6b:31: bc:f8:cb:4c:f2:99:46:ab:f9:ed:73:be:27:ea:c9: e6:a4:af:20:ca:09:ad:e1:4d:6e:0a:d8:88:76:91: f5:bb:6c:78:e5:dd:4f:5c:e5:b5:65:be:b6:4b:aa: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DE:92:31:78:B4:6D:58:04:D3:84:C2:EE:EE:64:E5:A1:4D:4F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f6:df:6c:e0:26:54:d1:9d:b2:fb:cb:eb:2d:6f:d6:db:b8: 37:c7:2a:83:0a:bc:21:0b:2f:82:42:16:e0:f4:be:67:8e:14: 62:d7:36:4c:56:ac:0e:eb:4f:d8:65:7a:2c:73:e6:b3:84:8a: 8c:9f:0f:de:7a:82:15:75:54:35:a6:b5:69:ea:b5:b7:1e:2a: d9:ac:e3:21:b0:6a:22:a1:e0:4e:21:2b:8a:ff:8a:ac:66:2a: 75:e4:ef:85:f5:34:53:20:aa:50:d9:32:47:e0:cd:14:ac:2c: 53:2f:b9:eb:be:60:5c:0b:78:6c:4f:7a:cf:c1:3b:22:96:24: cb:ae:ef:69:ac:37:12:13:b1:39:8f:17:8b:0d:32:cf:08:77: a0:fc:48:d6:4b:70:aa:7c:83:b2:5c:90:ac:87:50:04:60:37: 14:9c:74:5d:de:99:08:01:a8:1d:36:e3:b9:26:cf:fd:c7:32: 15:d0:1b:43:45:56:89:32:e2:51:89:c2:75:a2:4a:dc:66:0e: aa:05:42:c4:30:56:18:f6:a5:e9:df:e9:0e:a3:2f:79:cf:f8: e8:88:ae:4a:5d:3b:b4:5c:d7:c0:ac:5a:42:93:3d:f2:f6:c1: f6:e7:22:de:0f:39:43:cf:b4:e0:ad:9c:f5:51:8b:e9:2f:c5: 39:3f:c0:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFE9NtkpHlTbr6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk MmQ1ZGNkNDgtM2ZiYS00NmU2LTliYWEtMTNiOWE4Y2VmMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTmdWi2+nD49XdMwfGyubfTb+SNZUGx6jVD/ rk8WoYKTA4xQG+fcwbhG5+UHrvmTVnIbcZDx11sM1tXzoSmFvd5A8SEA2XIgaQWq MyyNRpWLae+wAGRD3ZzitpS8cN1heVhi772QFvZg9VOMEdtTqaVxGeYL7GH/Vo/S WPbRouWh/zaJ0QViWu3XfolS6Ioz7B/SFifzqL/YDPexAzYtV8XdwhSsTUpSjjn8 xVSnd33wOw5pwSB9drPLYVDAzsu3mwi0L6cB8N85aWmB2Fv2azG8+MtM8plGq/nt c74n6snmpK8gygmt4U1uCtiIdpH1u2x45d1PXOW1Zb62S6pkKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3ekjF4tG1YBNOEwu7uZOWhTU8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODljYTdjZDctODYyNC0z MDE2LWI5NjctZTIwZDliZDM2YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL232zgJlTRnbL7y+stb9bbuDfHKoMKvCELL4JCFuD0vmeOFGLXNkxW rA7rT9hleixz5rOEioyfD956ghV1VDWmtWnqtbceKtms4yGwaiKh4E4hK4r/iqxm KnXk74X1NFMgqlDZMkfgzRSsLFMvueu+YFwLeGxPes/BOyKWJMuu72msNxITsTmP F4sNMs8Id6D8SNZLcKp8g7JckKyHUARgNxScdF3emQgBqB0247kmz/3HMhXQG0NF Voky4lGJwnWiStxmDqoFQsQwVhj2penf6Q6jL3nP+OiIrkpdO7Rc18CsWkKTPfL2 wfbnIt4POUPPtOCtnPVRi+kvxTk/wL8= -----END CERTIFICATE-----Generated at Fri Jun 12 22:35:43 2026 by rpki-client