$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa File: bc1032ea-80f0-339d-be84-47508dc06301.roa (raw, json) Hash identifier: mafZphpVSCXfimMgvxxrBan26WCGbf6BOg02ymRmC50= Subject key identifier: C7:D3:2E:25:91:EC:56:96:C0:96:D4:D5:BD:C2:0A:47:95:7D:5C:9B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECA6C6AEB367287B2A54CE840 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 272106 IP address blocks: 38.253.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6a:eb:36:72:87:b2:a5:4c:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=dfaa512f-dd1b-4258-ba98-0aebfb85956a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:c5:ad:1b:2c:68:45:c7:bc:86:45:06:da: 29:4c:a9:c1:a4:a1:e4:15:b8:a0:e6:cc:cb:31:3d: 9b:89:ca:24:60:8b:cc:7b:b5:ae:ff:55:6e:26:18: a3:08:59:e1:46:e5:33:6e:63:ec:51:c2:ec:8c:c6: ec:69:80:05:2a:cd:a4:af:f1:bf:69:83:e9:21:b5: 7f:51:2e:d0:69:34:5e:12:9c:16:d5:52:9a:ed:d1: c5:f7:54:4f:3f:ba:30:f8:06:03:c0:43:32:c3:c8: 2b:53:24:a4:aa:54:e6:8f:cb:b5:73:f7:d8:07:f0: 76:a8:be:f1:d4:ee:3e:58:29:c9:40:7d:6a:53:a9: 07:bd:94:bb:bc:09:80:6d:96:d9:78:0d:92:67:1f: f9:23:02:9f:41:74:db:fa:e0:a4:0d:8c:bf:dc:5e: fb:8c:1a:83:cd:f7:bc:7c:ec:a5:ed:65:c8:fb:9d: 90:8a:a5:8e:dc:a5:bb:a4:41:8c:1d:9e:53:1c:d4: 7f:f5:1c:ae:07:54:63:02:24:2a:2b:92:de:9a:be: c5:5c:54:9c:f6:15:5d:ec:90:ad:de:56:57:b7:e7: 58:60:79:fa:40:9f:be:16:a7:58:99:27:89:40:81: e9:29:38:7a:10:cd:59:2a:74:b3:59:17:4e:d9:e3: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:2E:25:91:EC:56:96:C0:96:D4:D5:BD:C2:0A:47:95:7D:5C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:cc:bb:b8:df:a5:48:14:a0:5c:b6:d5:38:4d:95:47:5d:ab: 88:ba:54:3a:da:47:a3:dc:d6:b4:42:88:3d:32:a8:ef:30:e4: 2c:28:d8:5c:db:2b:79:5c:b8:55:ac:3f:bb:33:5a:96:62:f4: 58:0f:e3:66:be:35:20:bd:f8:b0:9d:70:a8:30:30:d1:c4:c3: 1e:d0:82:fc:4d:12:8e:bc:34:a9:0a:0e:cb:63:de:b1:d2:16: 99:b0:31:ab:84:29:80:8b:2f:dd:f7:4b:fa:81:80:35:7a:34: 01:0b:cd:64:44:24:00:55:0e:39:5f:73:8c:37:15:50:28:bf: 8e:d0:90:c9:c1:f5:7e:fe:cc:8b:0f:5a:6f:6c:fa:f6:ef:b5: 54:53:da:51:53:ee:68:15:7f:b7:d8:51:43:22:c8:12:db:aa: b7:be:88:a6:9f:6e:c3:c7:4c:74:89:38:c9:0b:23:84:6b:66: 44:ac:e3:f2:4d:58:da:35:c5:a4:25:23:18:0d:82:1f:f1:c5: 19:13:82:58:fb:a8:dc:2f:22:cd:a8:fa:4f:da:18:9b:e2:a9: b8:74:4f:09:ba:2d:11:85:de:e7:5b:0a:98:fd:84:c1:28:eb: 7d:34:c7:6e:f3:59:ce:a8:fd:38:69:84:0c:db:10:87:94:56: 70:1a:0d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGrrNnKHsqVM6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk ZGZhYTUxMmYtZGQxYi00MjU4LWJhOTgtMGFlYmZiODU5NTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiLFrRssaEXHvIZFBtopTKnBpKHkFbig5szL MT2bicokYIvMe7Wu/1VuJhijCFnhRuUzbmPsUcLsjMbsaYAFKs2kr/G/aYPpIbV/ US7QaTReEpwW1VKa7dHF91RPP7ow+AYDwEMyw8grUySkqlTmj8u1c/fYB/B2qL7x 1O4+WCnJQH1qU6kHvZS7vAmAbZbZeA2SZx/5IwKfQXTb+uCkDYy/3F77jBqDzfe8 fOyl7WXI+52QiqWO3KW7pEGMHZ5THNR/9RyuB1RjAiQqK5Lemr7FXFSc9hVd7JCt 3lZXt+dYYHn6QJ++FqdYmSeJQIHpKTh6EM1ZKnSzWRdO2eMQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfTLiWR7FaWwJbU1b3CCkeVfVybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmMxMDMyZWEtODBmMC0z MzlkLWJlODQtNDc1MDhkYzA2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnMu7jfpUgUoFy21ThNlUddq4i6VDraR6Pc1rRCiD0yqO8w5Cwo2Fzb K3lcuFWsP7szWpZi9FgP42a+NSC9+LCdcKgwMNHEwx7QgvxNEo68NKkKDstj3rHS FpmwMauEKYCLL933S/qBgDV6NAELzWREJABVDjlfc4w3FVAov47QkMnB9X7+zIsP Wm9s+vbvtVRT2lFT7mgVf7fYUUMiyBLbqre+iKafbsPHTHSJOMkLI4RrZkSs4/JN WNo1xaQlIxgNgh/xxRkTglj7qNwvIs2o+k/aGJviqbh0Twm6LRGF3udbCpj9hMEo 6300x27zWc6o/ThphAzbEIeUVnAaDZc= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:02 2026 by rpki-client