$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba8b2309-f10b-3b02-9dab-9e521086322f.roa File: ba8b2309-f10b-3b02-9dab-9e521086322f.roa (raw, json) Hash identifier: F5AlIhSrCsCzlEs4qgl/Gd1vDQC30PiIG+HMTMF7llc= Subject key identifier: 81:8F:44:7A:59:EB:2B:87:15:88:3A:16:49:57:54:B2:AC:1C:FE:0A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED9C73F1A42079A724760DE80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba8b2309-f10b-3b02-9dab-9e521086322f.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 269832 IP address blocks: 38.41.0.0/19 maxlen: 24 154.27.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3f:1a:42:07:9a:72:47:60:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=ae15334d-b614-4e6d-9ee3-d68e80f62e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:35:0c:ba:43:6d:ac:a1:53:04:6b:e3:cf: ce:68:11:7f:7a:76:3a:57:98:54:5b:52:55:63:43: 1f:1f:5f:f3:ce:f5:6f:1b:1d:11:cb:e5:b3:7b:c4: df:39:7d:e2:e3:5f:35:1c:f2:5c:26:79:a8:c5:5f: 80:89:a0:54:83:20:55:f6:32:9a:64:31:d3:bf:92: 19:f1:04:00:ea:3f:4e:c0:0b:f2:b9:35:7e:bd:59: 53:ca:dc:1c:23:44:86:e5:dd:3a:31:fe:60:8c:54: 2f:67:b6:1b:38:5c:1a:a1:15:fc:dc:6e:e5:e7:08: eb:26:e0:3f:8f:6a:f1:04:ca:92:18:b0:65:d0:78: 75:c3:f8:cf:ae:09:59:4e:2e:0a:ce:16:20:15:88: 67:52:87:ff:37:91:32:34:55:40:2c:d8:87:fe:a3: ef:0d:84:c6:5f:e1:82:f3:1d:91:32:a4:1e:81:e4: 33:1d:80:a4:b5:51:e4:0f:0d:cc:64:62:a6:6f:20: 12:c5:7f:7b:7a:ed:d9:0c:c0:7c:96:21:78:8c:15: 33:8f:32:a9:11:04:9d:90:7d:42:ac:51:70:f6:5e: 94:c9:9e:e7:8e:17:b2:9a:e1:bc:23:8d:27:ba:3a: c3:0e:5a:9a:87:83:fd:83:07:38:d4:48:ae:65:5d: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8F:44:7A:59:EB:2B:87:15:88:3A:16:49:57:54:B2:AC:1C:FE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba8b2309-f10b-3b02-9dab-9e521086322f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.41.0.0/19 154.27.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:26:aa:31:4c:b6:de:3e:e8:f2:91:fc:a7:0d:2e:6b:49:e4: a5:4b:90:bd:51:33:bc:fe:fc:60:ff:21:67:43:31:97:38:d7: 6a:52:2c:0f:02:ab:eb:82:8b:b7:e4:9c:0c:1b:65:a9:52:4d: 54:95:3a:a9:ac:ab:45:50:14:5b:40:3e:f9:d2:a6:f2:b3:b3: 43:dd:0d:53:0a:71:2d:d8:29:14:ab:ac:41:b1:6f:4e:34:78: d9:c4:82:dc:a1:a0:28:97:39:5e:ae:4c:9f:18:37:14:59:9d: a6:19:79:a8:9f:3a:30:f6:59:0d:77:6f:bf:66:74:b8:c2:94: fa:10:6b:35:d0:3e:ea:70:8c:a2:11:c5:e9:b0:d1:b6:a5:4a: b2:8b:5f:11:81:50:4d:fd:12:99:f6:18:44:3d:46:f1:d8:c8: 76:92:21:c8:b6:63:c4:e1:4f:12:aa:62:5a:e5:83:41:c2:8d: 99:85:5a:3f:cd:ac:53:72:25:05:3d:24:a6:89:0a:48:15:be: 54:93:59:89:a6:63:3c:fd:85:70:75:fc:46:82:e8:70:ce:cf: 63:3a:a9:4d:ad:8d:08:7b:1f:70:58:15:43:84:cc:f1:d0:ea: 2f:60:d1:82:4f:27:d3:8b:74:32:14:d0:95:25:9b:87:e2:dc: 17:da:d1:b6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7Zxz8aQgeackdg3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk YWUxNTMzNGQtYjYxNC00ZTZkLTllZTMtZDY4ZTgwZjYyZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueg1DLpDbayhUwRr48/OaBF/enY6V5hUW1JV Y0MfH1/zzvVvGx0Ry+Wze8TfOX3i4181HPJcJnmoxV+AiaBUgyBV9jKaZDHTv5IZ 8QQA6j9OwAvyuTV+vVlTytwcI0SG5d06Mf5gjFQvZ7YbOFwaoRX83G7l5wjrJuA/ j2rxBMqSGLBl0Hh1w/jPrglZTi4KzhYgFYhnUof/N5EyNFVALNiH/qPvDYTGX+GC 8x2RMqQegeQzHYCktVHkDw3MZGKmbyASxX97eu3ZDMB8liF4jBUzjzKpEQSdkH1C rFFw9l6UyZ7njheymuG8I40nujrDDlqah4P9gwc41EiuZV0hGwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIGPRHpZ6yuHFYg6FklXVLKsHP4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmE4YjIzMDktZjEwYi0z YjAyLTlkYWItOWU1MjEwODYzMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJikAAwQF mhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADcmqjFMtt4+6PKR/KcNLmtJ5KVLkL1RM7z+/GD/IWdDMZc4 12pSLA8Cq+uCi7fknAwbZalSTVSVOqmsq0VQFFtAPvnSpvKzs0PdDVMKcS3YKRSr rEGxb040eNnEgtyhoCiXOV6uTJ8YNxRZnaYZeaifOjD2WQ13b79mdLjClPoQazXQ PupwjKIRxemw0balSrKLXxGBUE39Epn2GEQ9RvHYyHaSIci2Y8ThTxKqYlrlg0HC jZmFWj/NrFNyJQU9JKaJCkgVvlSTWYmmYzz9hXB1/EaC6HDOz2M6qU2tjQh7H3BY FUOEzPHQ6i9g0YJPJ9OLdDIU0JUlm4fi3Bfa0bY= -----END CERTIFICATE-----Generated at Wed Aug 26 02:34:53 2026 by rpki-client