$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa File: 8a4a6d73-86b2-374e-9586-7f1f094d9649.roa (raw, json) Hash identifier: WXp643wuZNIve314l90mqsSY7BjWtMtfSTllPjTJLiY= Subject key identifier: AF:D5:59:8B:68:D1:AC:CD:6F:3D:E7:A7:1D:6B:2E:B5:EE:92:39:42 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E253F1E882C778436CCEB1080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 203217 IP address blocks: 38.3.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:1e:88:2c:77:84:36:cc:eb:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=b87952c1-a460-481d-a3a9-7dd1092be96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:a7:e2:b5:d6:71:40:16:7c:51:e4:4f:2c: ba:6b:65:08:b9:6d:25:bd:c9:39:14:8b:47:91:99: 14:31:1e:77:8a:64:55:d0:f9:c9:39:3d:18:20:6a: 5e:88:18:2b:d2:b1:4e:4c:c1:42:6d:df:60:53:f5: 83:2f:3f:ad:26:49:ab:82:f9:25:03:24:d7:2e:c7: 69:68:56:30:bf:f6:9d:d7:40:33:da:86:5b:78:66: 56:17:85:fa:53:ba:93:45:c2:6d:e2:c5:9c:93:be: b8:8d:65:9b:62:cb:41:63:8a:a2:ec:8b:97:0a:e7: f5:a2:91:84:d6:4e:c3:ec:6c:9c:3b:55:57:bf:ed: a5:50:cf:8f:fe:ee:8e:a7:35:e3:c8:ec:c8:2e:52: 72:3e:16:8f:6a:fd:b1:63:1b:c1:ea:4f:be:96:b9: 2e:83:9e:c0:e3:a8:b8:ec:b0:7e:7c:ad:92:be:30: d3:01:17:42:ba:42:f7:fe:45:b2:ec:3b:41:b6:f6: d2:10:89:60:64:2b:08:de:85:dd:8b:20:4b:b5:0e: dc:71:2c:87:35:9a:ef:57:af:f1:1e:4a:a5:35:d4: 2a:ba:27:1e:7b:f4:ee:3b:56:e1:e1:41:2e:37:aa: b3:51:a4:8f:90:c3:83:37:d1:02:a9:1d:b9:1a:0f: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:59:8B:68:D1:AC:CD:6F:3D:E7:A7:1D:6B:2E:B5:EE:92:39:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:95:4c:90:eb:1a:c4:be:42:3c:b0:96:de:d2:e7:ee:3e:7e: d4:79:82:cf:54:3c:2c:7f:67:fd:e1:82:c1:90:23:81:79:23: f5:3f:36:82:26:93:ce:54:8e:ed:51:6f:bc:ca:6b:b5:8a:9f: 57:4b:42:f3:22:95:92:8b:3e:53:a4:0f:84:c0:7d:e1:81:09: a4:2d:5d:28:7d:d6:0b:61:74:37:c3:1a:21:0c:85:24:c7:5e: 5e:ae:95:4d:6a:51:b9:08:37:76:50:91:e8:5a:71:7a:e4:07: 59:1d:31:35:03:c0:ce:49:a1:02:9f:81:9d:e8:c0:13:a4:7d: c2:b9:10:ba:9b:76:61:d7:d7:1e:14:f7:0e:14:8e:b7:9a:a9: 31:f9:84:12:58:9b:24:8a:9a:31:35:14:98:bb:3c:82:a4:ca: 31:e4:af:1a:2c:79:85:ee:be:bb:0d:be:e6:23:13:ea:89:e9: 10:f7:e6:d7:3f:b7:16:5a:84:12:6d:dd:eb:68:5f:a3:f5:12: 14:12:fb:4c:07:38:75:17:2c:84:83:de:fe:97:35:a5:1a:a4: 68:15:95:ac:cb:22:ad:31:23:c8:dd:6a:16:be:8e:89:1b:76: fa:49:c3:4d:85:4b:41:d4:f2:0b:cb:a0:e0:1b:53:ac:24:22: 0a:64:e2:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPx6ILHeENszrEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk Yjg3OTUyYzEtYTQ2MC00ODFkLWEzYTktN2RkMTA5MmJlOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndWn4rXWcUAWfFHkTyy6a2UIuW0lvck5FItH kZkUMR53imRV0PnJOT0YIGpeiBgr0rFOTMFCbd9gU/WDLz+tJkmrgvklAyTXLsdp aFYwv/ad10Az2oZbeGZWF4X6U7qTRcJt4sWck764jWWbYstBY4qi7IuXCuf1opGE 1k7D7GycO1VXv+2lUM+P/u6OpzXjyOzILlJyPhaPav2xYxvB6k++lrkug57A46i4 7LB+fK2SvjDTARdCukL3/kWy7DtBtvbSEIlgZCsI3oXdiyBLtQ7ccSyHNZrvV6/x HkqlNdQquicee/TuO1bh4UEuN6qzUaSPkMODN9ECqR25Gg/LOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/VWYto0azNbz3npx1rLrXukjlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGE0YTZkNzMtODZiMi0z NzRlLTk1ODYtN2YxZjA5NGQ5NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGVTJDrGsS+Qjywlt7S5+4+ftR5gs9UPCx/Z/3hgsGQI4F5I/U/NoIm k85Uju1Rb7zKa7WKn1dLQvMilZKLPlOkD4TAfeGBCaQtXSh91gthdDfDGiEMhSTH Xl6ulU1qUbkIN3ZQkehacXrkB1kdMTUDwM5JoQKfgZ3owBOkfcK5ELqbdmHX1x4U 9w4UjreaqTH5hBJYmySKmjE1FJi7PIKkyjHkrxoseYXuvrsNvuYjE+qJ6RD35tc/ txZahBJt3etoX6P1EhQS+0wHOHUXLISD3v6XNaUapGgVlazLIq0xI8jdaha+jokb dvpJw02FS0HU8gvLoOAbU6wkIgpk4js= -----END CERTIFICATE-----Generated at Fri Jun 12 22:37:41 2026 by rpki-client