$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba8b2309-f10b-3b02-9dab-9e521086322f.roa File: ba8b2309-f10b-3b02-9dab-9e521086322f.roa (raw, json) Hash identifier: fyIg7+iQjdlNXw+EH+YtLEOiJGrFvabEtDiZZyW5cjw= Subject key identifier: DC:A5:49:E5:A7:6B:33:DA:46:50:04:5A:7F:42:BD:1F:28:3F:87:95 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E376463463F536C85EC8546C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba8b2309-f10b-3b02-9dab-9e521086322f.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 269832 IP address blocks: 38.41.0.0/19 maxlen: 24 154.27.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:63:46:3f:53:6c:85:ec:85:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=65e79682-390b-4d8b-b992-07722faa05c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e4:e3:c2:f6:38:f2:de:7a:ff:d4:63:c9:f9: 68:e5:4d:4b:4e:88:39:68:00:f1:99:15:f9:5a:d8: e1:f1:43:a9:89:6f:ad:5d:46:a0:05:6f:06:99:5c: 17:cd:1c:32:3d:3e:00:d9:77:2a:3c:71:d5:0d:2d: e4:9b:9f:91:a5:41:67:3e:83:6b:80:c7:2a:ba:89: ef:16:39:95:2a:31:38:87:ec:6c:a8:fd:9f:46:87: 1c:39:82:db:4e:de:3c:9f:d2:f0:cb:8b:2b:cc:c3: 6a:11:06:cf:6b:e2:69:98:a3:ea:cb:df:ab:34:b6: 55:5c:58:31:c5:50:97:10:3c:aa:7c:03:09:65:5f: 7a:8a:ed:ee:ee:f8:3c:15:e2:12:7c:7b:8a:6a:b3: 01:79:df:9f:39:f4:b5:a2:cd:b2:39:c7:4a:18:13: 10:09:06:98:91:05:29:87:d6:f7:5f:5c:9c:34:be: bb:dd:f9:41:29:91:04:4d:1d:d3:c1:98:c9:7c:dd: 53:27:36:da:37:83:9a:71:ad:f6:3b:03:5e:12:b4: 40:8a:f5:86:e6:43:46:2e:c9:4a:78:51:73:8e:4e: 6b:de:36:46:15:2b:9e:4c:e9:33:3b:e8:4e:7c:8b: 57:0d:d2:58:0e:c7:9d:0f:fb:64:3c:09:20:a0:95: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A5:49:E5:A7:6B:33:DA:46:50:04:5A:7F:42:BD:1F:28:3F:87:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba8b2309-f10b-3b02-9dab-9e521086322f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.41.0.0/19 154.27.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:ff:76:a8:56:c9:d4:08:5a:88:5b:27:9b:fa:e6:b4:4b: 50:96:b6:ce:31:a2:ef:49:14:cb:42:8e:5d:6e:40:07:1f:91: 39:bd:ad:da:f1:da:1a:c4:8b:91:21:bd:69:61:44:e9:fc:70: 97:32:1d:87:db:c4:d3:7d:ab:9c:7d:31:07:96:1a:74:a3:a0: b6:2b:82:e5:bd:6d:d0:2d:37:4e:ab:87:e1:dd:78:3c:88:98: 48:b7:1b:8b:8e:9b:43:1f:fb:1d:fb:83:e5:14:bb:ef:a5:6b: 28:b5:57:9a:24:f1:12:d9:a5:80:b8:a2:54:9e:7f:f5:59:ff: fa:40:60:6f:99:b2:40:17:5b:85:a8:c0:d6:b1:e9:8d:33:8f: 73:59:38:95:00:a2:3f:43:e5:1f:56:29:1b:d0:a3:bf:77:3d: d9:f3:7f:4a:4e:0e:ef:2d:e0:82:70:ea:c7:a5:e0:45:9b:9f: 77:7f:4d:7b:8b:11:a2:11:66:0b:14:c7:81:63:3c:46:a0:73: 1e:b2:1c:b3:ab:fc:eb:53:ad:65:0a:eb:13:e4:e8:73:9c:f5: d0:df:8d:02:d3:15:90:5c:25:71:f9:db:76:61:cf:14:8d:69: ec:ae:ad:f1:80:1a:d4:da:dd:22:d1:20:3b:16:8c:06:be:dd: 9f:eb:4b:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE43ZGNGP1NsheyFRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NjVlNzk2ODItMzkwYi00ZDhiLWI5OTItMDc3MjJmYWEwNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOTjwvY48t56/9Rjyflo5U1LTog5aADxmRX5 Wtjh8UOpiW+tXUagBW8GmVwXzRwyPT4A2XcqPHHVDS3km5+RpUFnPoNrgMcquonv FjmVKjE4h+xsqP2fRoccOYLbTt48n9Lwy4srzMNqEQbPa+JpmKPqy9+rNLZVXFgx xVCXEDyqfAMJZV96iu3u7vg8FeISfHuKarMBed+fOfS1os2yOcdKGBMQCQaYkQUp h9b3X1ycNL673flBKZEETR3TwZjJfN1TJzbaN4Oaca32OwNeErRAivWG5kNGLslK eFFzjk5r3jZGFSueTOkzO+hOfItXDdJYDsedD/tkPAkgoJVrVQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNylSeWnazPaRlAEWn9CvR8oP4eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmE4YjIzMDktZjEwYi0z YjAyLTlkYWItOWU1MjEwODYzMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJikAAwQF mhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIUq/3aoVsnUCFqIWyeb+ua0S1CWts4xou9JFMtCjl1uQAcf kTm9rdrx2hrEi5EhvWlhROn8cJcyHYfbxNN9q5x9MQeWGnSjoLYrguW9bdAtN06r h+HdeDyImEi3G4uOm0Mf+x37g+UUu++layi1V5ok8RLZpYC4olSef/VZ//pAYG+Z skAXW4WowNax6Y0zj3NZOJUAoj9D5R9WKRvQo793Pdnzf0pODu8t4IJw6sel4EWb n3d/TXuLEaIRZgsUx4FjPEagcx6yHLOr/OtTrWUK6xPk6HOc9dDfjQLTFZBcJXH5 23ZhzxSNaeyurfGAGtTa3SLRIDsWjAa+3Z/rSyY= -----END CERTIFICATE-----Generated at Fri Jul 10 15:56:12 2026 by rpki-client