$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a19891b1-f3af-3d62-8369-60b159d8185b.roa File: a19891b1-f3af-3d62-8369-60b159d8185b.roa (raw, json) Hash identifier: LSSpq12c6FYKt5gtz9MCI0F28Iorwpgqs4YqrGdMq3I= Subject key identifier: D9:6F:B1:2A:3A:93:E8:70:5A:81:72:AC:CE:6B:47:BB:39:5F:33:D6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EDC924ECA971D238D2DACCB70 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a19891b1-f3af-3d62-8369-60b159d8185b.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 24496 IP address blocks: 38.79.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:4e:ca:97:1d:23:8d:2d:ac:cb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=06d2c191-ed47-4f25-b8d9-f8dbc97d650e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:e1:96:47:53:d6:57:dd:f0:c8:28:1d:22: ee:0c:85:21:6f:da:5e:66:3f:13:25:06:a7:cb:d1: 7e:60:06:d5:8a:c4:7e:db:cf:e9:d0:fd:ab:14:c6: 3f:48:e3:cc:b9:df:24:76:2d:00:9e:fb:80:e2:9c: 18:d6:3f:a4:80:43:07:66:72:12:84:40:f9:24:81: e8:ce:d6:12:01:69:0b:5b:7a:e0:f2:52:e1:4d:9f: d1:55:a2:c7:1d:23:0b:45:b7:10:90:87:9b:dd:cd: 5a:4b:3c:71:0e:e8:83:75:a1:b0:b2:49:ba:67:83: 06:ad:d6:06:26:54:c4:79:02:74:81:37:bc:51:41: 76:1d:0f:48:f6:1f:5f:08:8b:08:d5:ca:cf:11:de: 13:df:ab:e8:d5:a2:3b:f7:a6:a2:10:d7:72:62:b9: c8:32:e6:1f:17:dd:96:82:96:e7:6c:5c:cd:c1:70: 00:00:80:be:b8:92:e3:2c:56:7f:8a:0a:11:0a:04: cd:87:fd:bf:6b:c7:2b:32:a6:e1:a6:70:87:0c:d5: c6:10:39:27:26:07:f8:91:8a:6a:cd:dc:92:c9:08: c2:20:a1:b4:30:9c:44:6b:63:d4:ca:24:32:07:ef: de:a1:1a:40:70:b6:68:ea:49:1a:4e:4b:6f:45:91: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:B1:2A:3A:93:E8:70:5A:81:72:AC:CE:6B:47:BB:39:5F:33:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a19891b1-f3af-3d62-8369-60b159d8185b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.79.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:20:6a:16:f7:7f:98:c3:f8:b2:9e:d1:93:73:7a:a0:db:06: 2f:43:ee:59:cf:bd:d8:83:d1:75:e4:32:c0:11:96:5e:fc:f8: 0a:ec:2f:ed:d2:57:e3:6e:5b:eb:7b:f8:cb:2e:b5:12:34:7b: 52:3a:e2:66:cf:55:9e:97:41:da:a2:41:03:a9:f7:c7:fe:da: 4c:db:bd:3f:7a:28:6e:9e:b6:a2:e8:e4:dc:1b:a4:f1:ac:a7: 6f:00:00:fb:88:68:a9:7e:75:1c:16:27:cd:85:c1:5d:25:11: bd:a1:46:c6:63:ae:08:fb:27:f2:5e:21:1f:08:78:33:96:cc: de:99:f8:6d:2c:00:31:0e:c7:25:5b:af:fd:55:e3:b1:db:2f: 36:11:81:81:70:64:b9:57:aa:4c:83:79:30:65:61:18:2f:b1: 35:df:35:10:65:ce:82:d6:1e:a4:1f:6b:5c:f3:67:d4:62:94: cd:1f:7d:55:ab:25:63:77:47:52:9e:c2:99:97:28:eb:3c:b5: b5:4a:62:4f:9e:99:37:44:12:98:e4:77:4e:38:4d:b8:81:6f: 03:1d:7e:d1:ed:c3:89:d3:bb:04:70:ff:8e:84:f5:c9:28:bc: b2:35:72:73:cb:d9:3a:b5:c7:71:73:5d:76:f6:16:02:e6:dc: a9:7b:e4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckk7Klx0jjS2sy3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MDZkMmMxOTEtZWQ0Ny00ZjI1LWI4ZDktZjhkYmM5N2Q2NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ThlkdT1lfd8MgoHSLuDIUhb9peZj8TJQan y9F+YAbVisR+28/p0P2rFMY/SOPMud8kdi0AnvuA4pwY1j+kgEMHZnIShED5JIHo ztYSAWkLW3rg8lLhTZ/RVaLHHSMLRbcQkIeb3c1aSzxxDuiDdaGwskm6Z4MGrdYG JlTEeQJ0gTe8UUF2HQ9I9h9fCIsI1crPEd4T36vo1aI796aiENdyYrnIMuYfF92W gpbnbFzNwXAAAIC+uJLjLFZ/igoRCgTNh/2/a8crMqbhpnCHDNXGEDknJgf4kYpq zdySyQjCIKG0MJxEa2PUyiQyB+/eoRpAcLZo6kkaTktvRZEilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlvsSo6k+hwWoFyrM5rR7s5XzPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTE5ODkxYjEtZjNhZi0z ZDYyLTgzNjktNjBiMTU5ZDgxODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJk+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUgahb3f5jD+LKe0ZNzeqDbBi9D7lnPvdiD0XXkMsARll78+ArsL+3S V+NuW+t7+MsutRI0e1I64mbPVZ6XQdqiQQOp98f+2kzbvT96KG6etqLo5NwbpPGs p28AAPuIaKl+dRwWJ82FwV0lEb2hRsZjrgj7J/JeIR8IeDOWzN6Z+G0sADEOxyVb r/1V47HbLzYRgYFwZLlXqkyDeTBlYRgvsTXfNRBlzoLWHqQfa1zzZ9RilM0ffVWr JWN3R1KewpmXKOs8tbVKYk+emTdEEpjkd044TbiBbwMdftHtw4nTuwRw/46E9cko vLI1cnPL2Tq1x3FzXXb2FgLm3Kl75OU= -----END CERTIFICATE-----Generated at Fri Sep 11 13:13:49 2026 by rpki-client