$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b252f2a-93fb-3643-98e6-e0207719a27e.roa File: 8b252f2a-93fb-3643-98e6-e0207719a27e.roa (raw, json) Hash identifier: 7fTkHNFtSqUwO+k6XNaATwB45aPhDqGZsKLw3VpfHvM= Subject key identifier: D1:39:47:BC:BF:2F:9A:E6:DA:2C:81:64:35:16:8D:2B:9C:49:88:BB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE0C22AB5CEF96BF865A470C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b252f2a-93fb-3643-98e6-e0207719a27e.roa Signing time: Tue 18 Aug 2026 13:00:48 +0000 ROA not before: Tue 18 Aug 2026 13:00:48 +0000 ROA not after: Mon 16 Nov 2026 14:00:48 +0000 asID: 265551 IP address blocks: 38.19.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:2a:b5:ce:f9:6b:f8:65:a4:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 18 13:00:48 2026 GMT Not After : Nov 16 14:00:48 2026 GMT Subject: CN=385e095e-8a38-483c-bf21-f5df09c5ceaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c6:7c:39:54:43:f3:30:47:a1:c0:1c:7f:7d: c0:91:56:a5:c8:4e:cf:20:a6:47:fb:69:9f:02:d2: 73:b2:df:7e:39:9a:62:0a:0e:5d:96:0b:a5:18:b6: 1e:b4:84:2d:bb:c9:75:9e:ba:ee:1f:e9:22:88:89: 56:a7:e0:bd:e6:cd:db:11:da:45:c7:41:e3:3a:c7: 99:da:0b:f0:c0:50:12:e7:2f:90:fc:9c:74:a4:1e: 55:98:03:a7:78:fe:c6:5c:fd:5d:86:53:c4:3a:d0: ea:9f:9f:0d:24:a6:62:44:58:af:ff:54:1b:f9:98: ea:35:31:47:a2:58:c1:2e:ed:b5:0c:b9:b0:d6:61: 5a:1f:ce:3e:0e:14:15:9c:89:28:3e:88:d9:59:80: 1b:bd:fa:eb:bb:0d:32:20:e7:64:88:1c:d6:f8:07: 9a:c8:85:bc:d7:4d:66:1f:61:06:d8:8b:a0:c4:23: fc:9f:19:20:d1:35:c1:ab:54:8f:11:3b:a7:a1:1f: 5b:a5:9c:91:3b:b4:ce:01:46:e1:a4:14:0c:99:d2: d5:25:10:44:2b:70:ba:f5:74:16:28:96:df:10:cd: d7:3a:ca:0f:4c:28:ea:d1:ad:ec:54:68:ab:13:ed: 33:e5:4f:10:fc:04:8c:56:2b:95:d2:d9:ed:56:be: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:39:47:BC:BF:2F:9A:E6:DA:2C:81:64:35:16:8D:2B:9C:49:88:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b252f2a-93fb-3643-98e6-e0207719a27e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:87:ee:b5:87:b9:20:2d:ae:3f:02:37:d1:53:bd:03:f0:f8: ba:84:e3:4c:bb:88:9a:d7:b1:92:77:1b:8b:be:36:98:18:d5: ab:d3:f1:53:a8:66:a1:13:05:a0:38:7f:b6:4b:18:a4:40:ed: 81:95:f4:97:bb:6a:d6:cd:d7:36:81:ff:4f:b3:b7:1b:8e:03: 56:1a:59:71:a3:c4:78:ff:5b:ac:3d:cd:78:c2:87:c3:42:b5: 89:c5:c5:c9:ba:cc:62:1e:00:c9:29:99:40:0f:3b:cf:f0:96: 3c:93:ec:3d:91:11:e5:e7:d0:b0:7b:ec:4b:36:b7:c5:d3:e1: 40:a8:40:05:5a:d0:fb:74:90:ca:97:ad:f8:26:32:f6:9f:16: 36:36:ae:9c:8e:10:cf:2f:55:16:bf:07:b1:1b:68:91:29:10: 2e:09:79:de:62:4f:e7:a3:18:88:ab:b5:38:f1:e0:10:16:6d: 66:6f:f0:62:10:35:02:17:aa:ca:81:62:ea:27:ac:2d:af:39: aa:38:fe:01:1b:86:f6:36:d1:9f:0e:15:db:36:a9:40:6b:27: 55:4f:cd:6b:4a:5d:26:b5:98:84:d3:b0:03:45:d8:5e:49:5f: 3b:35:7d:45:74:bb:f1:45:69:94:7d:91:53:53:02:09:72:cf: 77:a2:80:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwiq1zvlr+GWkcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxODEzMDA0OFoXDTI2MTExNjE0MDA0OFowLzEtMCsGA1UEAxMk Mzg1ZTA5NWUtOGEzOC00ODNjLWJmMjEtZjVkZjA5YzVjZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Z8OVRD8zBHocAcf33AkValyE7PIKZH+2mf AtJzst9+OZpiCg5dlgulGLYetIQtu8l1nrruH+kiiIlWp+C95s3bEdpFx0HjOseZ 2gvwwFAS5y+Q/Jx0pB5VmAOneP7GXP1dhlPEOtDqn58NJKZiRFiv/1Qb+ZjqNTFH oljBLu21DLmw1mFaH84+DhQVnIkoPojZWYAbvfrruw0yIOdkiBzW+AeayIW8101m H2EG2IugxCP8nxkg0TXBq1SPETunoR9bpZyRO7TOAUbhpBQMmdLVJRBEK3C69XQW KJbfEM3XOsoPTCjq0a3sVGirE+0z5U8Q/ASMViuV0tntVr7XQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE5R7y/L5rm2iyBZDUWjSucSYi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGIyNTJmMmEtOTNmYi0z NjQzLTk4ZTYtZTAyMDc3MTlhMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhM8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiH7rWHuSAtrj8CN9FTvQPw+LqE40y7iJrXsZJ3G4u+NpgY1avT8VOo ZqETBaA4f7ZLGKRA7YGV9Je7atbN1zaB/0+ztxuOA1YaWXGjxHj/W6w9zXjCh8NC tYnFxcm6zGIeAMkpmUAPO8/wljyT7D2REeXn0LB77Es2t8XT4UCoQAVa0Pt0kMqX rfgmMvafFjY2rpyOEM8vVRa/B7EbaJEpEC4Jed5iT+ejGIirtTjx4BAWbWZv8GIQ NQIXqsqBYuonrC2vOao4/gEbhvY20Z8OFds2qUBrJ1VPzWtKXSa1mITTsANF2F5J Xzs1fUV0u/FFaZR9kVNTAglyz3eigGg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:08:12 2026 by rpki-client