$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa1bbbad-2171-30bf-9352-23650a557002.roa File: aa1bbbad-2171-30bf-9352-23650a557002.roa (raw, json) Hash identifier: F7QvE2Eh+PVjFqpsF0G3dnHI637v78zTzc23qurktDU= Subject key identifier: 8A:F4:37:32:45:B6:96:88:30:85:7B:C1:DD:C7:4F:4F:35:25:5F:6F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E4AEF6DEB17815E2813BC7C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa1bbbad-2171-30bf-9352-23650a557002.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 152179 IP address blocks: 38.246.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6d:eb:17:81:5e:28:13:bc:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=a8467bb2-f899-4192-ab1e-24871cebb37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:98:28:e9:0f:b9:e8:f0:4b:c5:fb:42:8d: ea:77:b0:6b:92:e8:f9:48:80:20:85:75:0e:59:6c: 7b:7f:16:d5:0a:15:35:a8:6a:b3:53:5d:e7:01:c1: 2c:e8:27:51:1c:51:5c:00:59:18:21:c3:0c:35:89: eb:01:a0:12:9a:03:3a:86:33:3b:d7:18:73:28:23: a8:d8:75:4a:5c:ed:93:4e:06:da:28:10:3e:ea:6d: 5a:4a:1b:59:06:f8:09:d4:c3:18:2b:90:ce:f0:bf: f0:fe:98:ce:94:23:b1:5e:3b:6d:06:fa:34:e8:43: 8e:74:e2:35:0e:c9:55:1b:7a:fc:53:52:13:70:97: c7:ff:58:30:99:03:70:3b:4a:92:4e:ac:77:c2:a2: 10:8d:bb:06:b8:7a:89:2b:b6:94:7a:65:a4:db:e2: 42:d6:d2:9d:02:56:e5:5b:d4:69:8a:f5:88:9f:bf: 89:7b:64:79:95:f2:d4:24:da:be:94:5e:0d:0d:4e: a2:7f:ed:68:40:57:43:ca:c0:2b:13:52:a5:2f:ae: df:fa:c2:d2:2d:aa:9b:8b:a5:55:9e:e0:f9:39:31: 68:fa:b2:ff:5e:c3:50:ab:54:0a:ba:8b:0d:c1:45: 4f:70:7d:9c:41:b5:15:a2:c2:3b:bc:36:bc:8c:29: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:37:32:45:B6:96:88:30:85:7B:C1:DD:C7:4F:4F:35:25:5F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa1bbbad-2171-30bf-9352-23650a557002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:41:b2:e3:06:80:e4:ec:ee:76:ef:e4:35:38:4b:51:b3:c1: 36:d4:6a:e0:0c:38:33:24:9c:2b:32:59:a4:6a:27:ff:db:da: a4:89:7b:2a:32:b1:01:e7:71:2d:00:e0:86:fb:6b:ad:b3:61: 94:1a:bb:5e:20:28:d7:55:82:ef:c6:74:fe:c6:16:cc:b8:b2: ea:c6:d8:ba:54:4c:76:9d:87:78:75:bb:ff:36:9b:3b:b0:55: 21:5e:9c:06:26:ed:58:44:67:a4:be:34:6d:0a:b3:3a:f2:8e: a4:b7:b6:e3:75:c7:3e:b2:ca:4c:ec:b9:ad:3e:f2:04:3f:19: 54:ba:08:ea:75:60:e0:3b:13:05:ef:c5:45:8a:59:f9:72:6a: 5e:f6:cb:cb:bf:ed:ec:e3:e5:00:2a:4f:2e:ca:79:32:0d:72: 99:93:69:d8:54:24:cb:9b:b2:d7:cd:57:59:9b:83:e5:d1:2f: 9d:f3:df:fb:5f:b7:6d:6e:31:d7:92:aa:2b:88:36:fa:f9:e0: 34:21:96:62:3d:fb:5f:1e:4f:fd:21:bd:dd:60:9e:0b:33:dc: ed:4e:e3:bc:f3:9f:95:83:0a:2a:30:92:cb:13:f7:9e:0f:24: 28:9b:ba:b2:27:6e:67:87:64:3c:0a:16:10:4c:f6:4f:06:21: 0e:0d:9f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K723rF4FeKBO8fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YTg0NjdiYjItZjg5OS00MTkyLWFiMWUtMjQ4NzFjZWJiMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEaYKOkPuejwS8X7Qo3qd7Brkuj5SIAghXUO WWx7fxbVChU1qGqzU13nAcEs6CdRHFFcAFkYIcMMNYnrAaASmgM6hjM71xhzKCOo 2HVKXO2TTgbaKBA+6m1aShtZBvgJ1MMYK5DO8L/w/pjOlCOxXjttBvo06EOOdOI1 DslVG3r8U1ITcJfH/1gwmQNwO0qSTqx3wqIQjbsGuHqJK7aUemWk2+JC1tKdAlbl W9RpivWIn7+Je2R5lfLUJNq+lF4NDU6if+1oQFdDysArE1KlL67f+sLSLaqbi6VV nuD5OTFo+rL/XsNQq1QKuosNwUVPcH2cQbUVosI7vDa8jCmtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr0NzJFtpaIMIV7wd3HT081JV9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWExYmJiYWQtMjE3MS0z MGJmLTkzNTItMjM2NTBhNTU3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZBsuMGgOTs7nbv5DU4S1GzwTbUauAMODMknCsyWaRqJ//b2qSJeyoy sQHncS0A4Ib7a62zYZQau14gKNdVgu/GdP7GFsy4surG2LpUTHadh3h1u/82mzuw VSFenAYm7VhEZ6S+NG0KszryjqS3tuN1xz6yykzsua0+8gQ/GVS6COp1YOA7EwXv xUWKWflyal72y8u/7ezj5QAqTy7KeTINcpmTadhUJMubstfNV1mbg+XRL53z3/tf t21uMdeSqiuINvr54DQhlmI9+18eT/0hvd1gngsz3O1O47zzn5WDCiowkssT954P JCiburInbmeHZDwKFhBM9k8GIQ4Nn9k= -----END CERTIFICATE-----Generated at Tue Jul 21 01:29:29 2026 by rpki-client