$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa File: afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa (raw, json) Hash identifier: v8cyiAXiHhV4cQqRiw1U1hAQnuO3wLTzBOnLzyAtU4g= Subject key identifier: A7:7F:38:B5:37:89:4A:D9:43:F7:35:3E:F9:1F:9B:5B:FE:F6:5E:59 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E2F0DF85EC6D102B9BB480000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa Signing time: Mon 15 Jun 2026 21:19:39 +0000 ROA not before: Mon 15 Jun 2026 21:19:39 +0000 ROA not after: Sun 13 Sep 2026 21:19:39 +0000 asID: 0 IP address blocks: 38.250.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:0d:f8:5e:c6:d1:02:b9:bb:48:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 15 21:19:39 2026 GMT Not After : Sep 13 21:19:39 2026 GMT Subject: CN=9ad23b48-0e6b-4f3e-ae24-f4444afc41bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:1f:71:c2:2e:5a:42:66:a6:10:6c:bf:81: 3c:7e:eb:b3:a1:4e:91:d4:0b:c2:c5:41:7d:31:08: 5b:78:5f:bd:13:ce:a7:87:95:8a:d4:db:ba:6e:77: dd:37:3b:b5:65:a0:e2:41:2c:b4:9f:eb:53:0b:b3: fa:28:8a:51:4a:4f:7c:7a:06:a7:00:17:23:99:06: c2:c8:b3:2f:cc:34:0e:41:45:f8:03:9a:0f:82:be: ed:13:f5:21:93:48:75:4f:70:bc:27:7c:57:e9:d9: 8d:49:ff:9f:90:3d:3a:c0:83:d8:9e:ad:9f:79:b7: 68:1f:3a:51:62:a3:6c:70:4d:49:83:8f:f6:8c:0d: 9a:3b:7c:32:fd:60:ae:43:16:0d:70:c5:e9:1c:a3: 6f:76:96:54:d7:d2:02:d1:67:25:81:f6:60:84:8a: a3:27:48:f5:97:b1:e6:90:93:d7:1d:ad:f6:52:ff: 9b:5c:0f:db:83:a2:18:c4:a8:a6:44:67:3e:77:28: e6:32:58:81:a9:f1:29:5d:17:5b:26:78:25:83:5b: d5:cb:2e:22:3d:a2:98:9e:80:90:84:12:dd:39:9a: fa:db:aa:45:0c:b8:d8:97:c7:7e:dc:e9:46:40:c2: 32:71:b7:a0:0c:94:07:d8:dd:3d:4c:04:f5:f3:62: 33:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7F:38:B5:37:89:4A:D9:43:F7:35:3E:F9:1F:9B:5B:FE:F6:5E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:83:b2:da:cf:d2:47:f7:47:70:75:b6:73:b2:ed:05:9b:c3: 45:d7:0b:eb:36:ac:b7:5c:f2:7e:4a:41:e3:35:1a:3f:fa:d6: c5:72:41:a0:2e:41:ef:72:32:d1:46:57:48:16:19:67:f1:09: 28:3d:9a:42:bb:9f:b0:84:34:ca:44:aa:8c:08:b5:5c:96:9a: 72:6a:51:e3:18:9b:3f:a3:c1:01:de:e1:5d:50:5b:55:5c:dc: 42:42:18:dd:83:28:4b:a0:08:dd:12:32:1d:18:5c:99:79:6b: ea:9a:76:13:8d:1a:63:3c:51:9f:96:88:57:ab:73:d4:1f:cd: 26:35:d8:2f:dc:f2:cb:e8:e1:51:6f:bd:d1:b5:eb:a0:6d:c2: 2f:57:42:69:c0:99:b2:61:41:b9:be:8c:c9:3e:45:3d:40:03: 15:c4:ac:51:fd:0c:af:4c:6f:8c:90:27:65:27:2c:0e:40:de: b4:46:f4:a1:f8:c4:c0:dd:75:a9:f2:20:1a:75:b0:1a:14:f6: 1f:9f:38:29:6c:97:37:d7:84:08:f8:be:81:86:ec:9b:46:b1: 93:40:29:d9:40:e8:bc:60:84:d6:b7:f7:ee:b9:83:0e:0e:f5: d6:8a:eb:d2:1f:4d:d1:14:aa:3f:82:12:1f:26:4f:3b:ed:28: b2:62:64:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vDfhextECubtIAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxNTIxMTkzOVoXDTI2MDkxMzIxMTkzOVowLzEtMCsGA1UEAxMk OWFkMjNiNDgtMGU2Yi00ZjNlLWFlMjQtZjQ0NDRhZmM0MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ofccIuWkJmphBsv4E8fuuzoU6R1AvCxUF9 MQhbeF+9E86nh5WK1Nu6bnfdNzu1ZaDiQSy0n+tTC7P6KIpRSk98eganABcjmQbC yLMvzDQOQUX4A5oPgr7tE/Uhk0h1T3C8J3xX6dmNSf+fkD06wIPYnq2febdoHzpR YqNscE1Jg4/2jA2aO3wy/WCuQxYNcMXpHKNvdpZU19IC0WclgfZghIqjJ0j1l7Hm kJPXHa32Uv+bXA/bg6IYxKimRGc+dyjmMliBqfEpXRdbJnglg1vVyy4iPaKYnoCQ hBLdOZr626pFDLjYl8d+3OlGQMIycbegDJQH2N09TAT182IzgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd/OLU3iUrZQ/c1Pvkfm1v+9l5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZiMmE5OWItYmU3Mi0z MjU1LTlmNjctY2NiOWMxYjY2ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyDstrP0kf3R3B1tnOy7QWbw0XXC+s2rLdc8n5KQeM1Gj/61sVyQaAu Qe9yMtFGV0gWGWfxCSg9mkK7n7CENMpEqowItVyWmnJqUeMYmz+jwQHe4V1QW1Vc 3EJCGN2DKEugCN0SMh0YXJl5a+qadhONGmM8UZ+WiFerc9QfzSY12C/c8svo4VFv vdG166Btwi9XQmnAmbJhQbm+jMk+RT1AAxXErFH9DK9Mb4yQJ2UnLA5A3rRG9KH4 xMDddanyIBp1sBoU9h+fOClslzfXhAj4voGG7JtGsZNAKdlA6LxghNa39+65gw4O 9daK69IfTdEUqj+CEh8mTzvtKLJiZMc= -----END CERTIFICATE-----Generated at Wed Jun 24 16:01:21 2026 by rpki-client