$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa File: 9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa (raw, json) Hash identifier: XvERwapEc6gIrCTe6WJEe+QZ7usQ+gfWCs9KqlktHxw= Subject key identifier: 58:42:2A:C2:17:F8:8D:F3:BB:B1:D5:5B:EF:9C:6C:92:B8:60:82:C1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE9328D8E84AA7C32A32056E8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa Signing time: Fri 21 Aug 2026 13:33:43 +0000 ROA not before: Fri 21 Aug 2026 13:33:43 +0000 ROA not after: Wed 21 Oct 2026 21:00:11 +0000 asID: 28213 IP address blocks: 38.250.236.0/22 maxlen: 24 38.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:32:8d:8e:84:aa:7c:32:a3:20:56:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 21 13:33:43 2026 GMT Not After : Oct 21 21:00:11 2026 GMT Subject: CN=0b7a2d9d-5c91-4578-a8b5-99b1be261ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:52:55:2f:e6:70:51:f1:f5:f1:30:68:a6: 28:db:6f:b3:c7:52:6b:cd:9e:2e:5f:3c:d0:21:ac: da:97:43:c3:89:ae:e0:6f:88:85:18:bf:a4:c9:ee: 60:79:c4:18:43:cd:6e:3a:9c:f2:b4:d5:04:45:1a: e0:23:f9:6f:6f:44:41:73:08:5b:8d:0c:84:f4:6d: d0:1e:1a:f2:45:69:a7:81:ae:8c:55:8c:68:21:d2: 2c:b3:ce:f3:18:66:6c:98:57:e6:87:4a:e3:fb:e5: 34:2e:12:cf:0f:f7:fb:72:d0:5c:0e:73:5b:6a:04: 31:67:90:77:7a:97:8d:c4:92:92:cd:d3:0c:c9:a6: 9e:1e:2b:38:69:26:49:a3:fd:d3:70:f9:e0:d9:e3: 91:4d:30:c2:6c:fb:98:cc:85:e6:d0:fd:11:15:c9: c1:f4:b1:e3:44:af:8a:17:b7:33:ee:df:99:c4:5f: cb:7e:72:de:70:ff:c0:1d:29:be:8d:3d:cd:78:40: 6a:59:d9:9c:3b:b7:23:f7:66:92:bf:24:b6:09:8d: 0b:07:e7:04:87:af:4c:15:60:93:09:83:4b:8d:5f: 18:92:5a:b7:d6:dd:7a:bb:26:f2:8b:cd:41:e4:b5: 92:3a:c2:16:b2:d5:c0:ce:04:85:f7:b5:35:1c:55: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:42:2A:C2:17:F8:8D:F3:BB:B1:D5:5B:EF:9C:6C:92:B8:60:82:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.236.0/22 38.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ea:bb:f2:b2:34:24:10:d2:13:a9:6b:29:af:c0:a5:a8:04: 21:83:47:fa:3d:fb:3f:33:a9:50:ce:01:bb:1d:a8:ac:de:fa: 98:a8:d5:94:fe:78:cf:b2:48:64:2a:70:e8:cc:c2:19:ec:8f: 5a:da:13:52:7a:a5:6e:54:32:17:08:50:0d:0e:33:63:70:e1: 62:e5:eb:44:26:c1:10:f4:56:a8:65:20:cf:68:e3:d7:f9:b5: a7:a9:09:a8:2e:19:0e:e1:ce:79:69:c8:33:d8:c8:63:e3:b0: 9c:87:32:fc:bc:5a:9d:9c:83:8c:8d:17:6d:72:e5:96:55:1f: 41:40:ea:3d:ce:dc:5d:b1:39:f7:6f:5b:d6:ea:d9:37:c8:e6: 78:32:67:a3:c8:1a:8a:8d:06:07:64:16:0d:6c:e3:dc:a8:cf: ec:8f:3a:3d:a0:1c:c5:dd:6d:9f:37:87:51:36:0d:83:39:46: 33:df:d1:1d:fa:68:9e:88:ae:24:24:4b:58:27:91:8c:41:11: db:36:2d:20:b3:76:d9:ca:a5:ff:cf:fc:35:6a:74:31:50:86: dc:bf:b2:64:a1:b8:5d:59:b9:23:66:48:ae:b5:48:0a:7d:9a: a7:5d:e3:38:ca:1b:d1:b5:78:14:7e:82:94:0d:d4:36:3a:a7: d8:e7:54:b5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7pMo2OhKp8MqMgVugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMTEzMzM0M1oXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk MGI3YTJkOWQtNWM5MS00NTc4LWE4YjUtOTliMWJlMjYxYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/9SVS/mcFHx9fEwaKYo22+zx1JrzZ4uXzzQ Iazal0PDia7gb4iFGL+kye5gecQYQ81uOpzytNUERRrgI/lvb0RBcwhbjQyE9G3Q HhryRWmnga6MVYxoIdIss87zGGZsmFfmh0rj++U0LhLPD/f7ctBcDnNbagQxZ5B3 epeNxJKSzdMMyaaeHis4aSZJo/3TcPng2eORTTDCbPuYzIXm0P0RFcnB9LHjRK+K F7cz7t+ZxF/LfnLecP/AHSm+jT3NeEBqWdmcO7cj92aSvyS2CY0LB+cEh69MFWCT CYNLjV8Yklq31t16uybyi81B5LWSOsIWstXAzgSF97U1HFXgrQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFhCKsIX+I3zu7HVW++cbJK4YILBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWY1YTBlZDktZmY5NC0z MDA5LWI1YzMtNGUxZmZiMWEzM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJvrsAwQC Jvr8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHfqu/KyNCQQ0hOpaymvwKWoBCGDR/o9+z8zqVDOAbsdqKze +pio1ZT+eM+ySGQqcOjMwhnsj1raE1J6pW5UMhcIUA0OM2Nw4WLl60QmwRD0Vqhl IM9o49f5taepCaguGQ7hznlpyDPYyGPjsJyHMvy8Wp2cg4yNF21y5ZZVH0FA6j3O 3F2xOfdvW9bq2TfI5ngyZ6PIGoqNBgdkFg1s49yoz+yPOj2gHMXdbZ83h1E2DYM5 RjPf0R36aJ6IriQkS1gnkYxBEds2LSCzdtnKpf/P/DVqdDFQhty/smShuF1ZuSNm SK61SAp9mqdd4zjKG9G1eBR+gpQN1DY6p9jnVLU= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:53 2026 by rpki-client