$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa File: 89ca7cd7-8624-3016-b967-e20d9bd36b70.roa (raw, json) Hash identifier: QoLjXqGeWzHN5E1dSCS2B6IbGTPP6p+jYr75xQBFhPw= Subject key identifier: 24:AD:D8:02:4E:AE:C8:EA:86:12:80:37:CC:4F:EC:47:B4:AF:D1:CE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EBC77185236D0BE3E3B0F3600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 274128 IP address blocks: 38.19.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:18:52:36:d0:be:3e:3b:0f:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=71e25109-729a-49b1-a76d-6db158c4daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:de:42:dc:35:54:75:52:f5:46:fa:ea:02: 7b:89:d2:f0:3a:af:70:6e:1d:1f:14:0a:97:e0:2b: 16:b9:53:74:47:35:fb:a1:f7:3d:ed:d5:18:24:62: 89:fc:60:da:6e:2c:d6:e4:a0:a8:3f:f3:8d:4b:4d: 4e:80:87:2f:ca:75:13:d6:cc:2d:ff:d9:6e:79:da: 20:c5:28:89:04:c3:0b:47:5f:05:39:d5:84:94:ee: 2d:c7:ab:ae:36:2e:fd:8a:31:3e:c0:3c:40:dd:65: 3b:25:9f:30:f4:d2:96:7a:81:dd:cf:d9:10:1e:c4: 00:b1:9f:92:67:2d:40:5b:4c:11:d2:67:79:ef:11: de:a3:18:34:49:99:31:64:78:35:a2:62:a0:02:42: 6c:f1:e3:8a:23:1a:1e:89:c7:b1:90:1e:d7:74:5d: cf:1b:ec:f7:3e:e3:7a:4c:3d:4e:08:3f:90:2b:c8: 2f:d8:75:d5:16:51:5e:3f:08:1e:69:35:e4:7f:d3: b1:aa:91:53:71:63:98:0b:c0:40:73:f3:e0:38:ea: aa:4c:83:1d:db:e3:e4:ff:8f:be:c9:6e:67:e8:75: ea:3e:f5:63:5e:54:b3:6e:1f:a2:d2:07:01:84:17: f4:f7:09:a4:44:8f:0a:67:66:3c:0a:41:52:48:ad: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:D8:02:4E:AE:C8:EA:86:12:80:37:CC:4F:EC:47:B4:AF:D1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:24:b7:f4:97:28:29:23:4b:3f:63:04:d5:49:70:5d:dd:f9: d8:df:b8:f9:a6:50:13:e9:b9:71:4c:2e:0c:8a:fb:91:28:b9: 59:c2:2f:90:c6:30:37:9c:cb:56:24:1e:1c:40:87:01:96:15: e6:ba:db:c7:14:a0:ba:2e:6e:4e:76:fc:97:bf:60:f8:3f:4d: 8f:7c:47:8d:55:67:7f:fe:f5:1f:5b:28:15:d4:62:74:35:5c: 43:01:d7:50:08:ac:45:9b:64:e6:90:fe:6c:56:55:81:cb:6b: cd:d1:9b:52:01:0a:fb:c8:d5:58:8e:38:99:42:ad:1f:d1:c9: ce:71:b2:e3:75:28:98:76:2b:60:24:6a:31:37:d3:98:48:a3: 77:65:b0:0b:1e:bd:bf:31:a4:cd:29:81:65:8f:eb:6f:84:60: 3d:26:27:f9:3b:bc:9b:2f:c4:47:2f:b5:eb:8a:91:53:76:99: 76:cc:c0:f8:01:08:77:54:5a:98:4d:99:4a:96:a4:1c:d4:6d: 52:19:4c:5d:8c:0c:db:75:d3:1e:88:f7:bb:7d:27:33:44:9b: 21:c8:7c:ad:68:40:72:d2:6a:14:3d:16:a0:7b:a7:f5:2a:d8: d9:66:02:ee:3a:14:3d:e0:8e:68:e8:ed:9e:56:d7:34:31:70: a5:52:e0:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dxhSNtC+PjsPNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk NzFlMjUxMDktNzI5YS00OWIxLWE3NmQtNmRiMTU4YzRkYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8neQtw1VHVS9Ub66gJ7idLwOq9wbh0fFAqX 4CsWuVN0RzX7ofc97dUYJGKJ/GDabizW5KCoP/ONS01OgIcvynUT1swt/9luedog xSiJBMMLR18FOdWElO4tx6uuNi79ijE+wDxA3WU7JZ8w9NKWeoHdz9kQHsQAsZ+S Zy1AW0wR0md57xHeoxg0SZkxZHg1omKgAkJs8eOKIxoeicexkB7XdF3PG+z3PuN6 TD1OCD+QK8gv2HXVFlFePwgeaTXkf9OxqpFTcWOYC8BAc/PgOOqqTIMd2+Pk/4++ yW5n6HXqPvVjXlSzbh+i0gcBhBf09wmkRI8KZ2Y8CkFSSK3sDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSt2AJOrsjqhhKAN8xP7Ee0r9HOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODljYTdjZDctODYyNC0z MDE2LWI5NjctZTIwZDliZDM2YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQkt/SXKCkjSz9jBNVJcF3d+djfuPmmUBPpuXFMLgyK+5EouVnCL5DG MDecy1YkHhxAhwGWFea628cUoLoubk52/Je/YPg/TY98R41VZ3/+9R9bKBXUYnQ1 XEMB11AIrEWbZOaQ/mxWVYHLa83Rm1IBCvvI1ViOOJlCrR/Ryc5xsuN1KJh2K2Ak ajE305hIo3dlsAsevb8xpM0pgWWP62+EYD0mJ/k7vJsvxEcvteuKkVN2mXbMwPgB CHdUWphNmUqWpBzUbVIZTF2MDNt10x6I97t9JzNEmyHIfK1oQHLSahQ9FqB7p/Uq 2NlmAu46FD3gjmjo7Z5W1zQxcKVS4Ig= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:48 2026 by rpki-client