$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf7f47fa-4408-3533-a440-9b085a6bf30b.roa File: bf7f47fa-4408-3533-a440-9b085a6bf30b.roa (raw, json) Hash identifier: 9Iz2RLARK50LI4yoUNpD3JQm2xm2BAarGdMkB53T2uI= Subject key identifier: 63:BD:EA:1B:0E:B1:3B:AF:08:0A:DD:7D:70:E6:C5:F4:1B:C7:6A:E8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECD373399554C8A46DB6CC880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf7f47fa-4408-3533-a440-9b085a6bf30b.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 215027 IP address blocks: 38.76.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:33:99:55:4c:8a:46:db:6c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=bc231f98-c5bc-44b8-8bba-d220cc4f9966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e0:63:94:9a:9d:b4:9d:58:90:f8:d4:fe:76: 25:f2:97:b1:ec:4f:cd:ae:31:a0:c9:95:1c:b8:c0: 71:9f:2b:cf:a7:4c:dd:cf:5a:fc:c8:31:50:da:ea: 11:eb:a3:0e:5d:16:c0:09:c4:60:99:1a:98:dd:53: 28:f3:5e:2d:96:b2:f3:2c:0c:b7:bd:1f:37:8c:59: 42:6a:dd:5f:32:28:77:cb:5b:28:1f:3d:27:ec:02: 1a:c1:bb:eb:2f:db:f5:a9:4f:43:75:c7:8e:37:5a: 13:89:65:c3:56:8f:3e:6f:ec:a2:3a:21:b9:32:86: 8f:45:c6:cf:6f:3a:83:33:07:c9:98:a1:7e:80:74: 29:59:a5:50:94:c5:12:2d:ff:d2:69:34:ee:35:3e: 33:d1:77:b7:81:3b:2d:52:60:19:2a:e4:61:76:29: 45:24:18:0d:d4:a8:3b:6d:f7:cb:24:e0:5e:98:87: e3:d4:95:a6:d2:fe:db:6b:46:0b:3b:53:47:69:85: 62:b0:b2:c2:10:07:e9:38:6d:be:fb:51:88:78:51: 5a:69:01:92:60:6f:5c:24:13:05:f2:1f:2b:36:41: e4:38:89:b5:30:d0:9b:85:f0:c5:66:a6:18:25:b3: 53:6f:ce:bf:1e:4c:43:b5:8f:9e:96:62:ba:90:85: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:EA:1B:0E:B1:3B:AF:08:0A:DD:7D:70:E6:C5:F4:1B:C7:6A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf7f47fa-4408-3533-a440-9b085a6bf30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.76.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d7:98:dd:f9:a6:42:bd:df:e8:01:41:fb:ca:87:59:6e:8e: e7:f4:61:89:4b:6e:b1:79:75:dc:64:41:bb:7b:c7:b9:8e:e6: 08:9b:7c:5b:14:2f:0a:4f:00:50:36:94:b8:a8:77:84:c9:96: 21:46:48:ff:f3:04:1e:1f:bc:10:1d:ec:da:05:d1:3a:24:02: a6:4b:4c:4b:0b:0f:69:2a:23:6b:a6:e7:9a:9b:00:e6:d9:b8: d3:0b:d1:6e:76:43:dd:0c:09:5b:eb:1a:63:fd:4b:c0:a8:da: 20:c9:c3:12:7e:df:35:78:c3:ad:41:6a:86:c4:39:58:e0:a1: a0:90:c4:8f:67:23:8b:1e:c6:3a:8c:ac:61:97:e0:28:b7:86: 8f:09:c8:5c:60:a3:86:dd:ed:82:38:81:17:13:16:c4:d6:e4: cb:05:74:96:39:5a:44:05:49:b0:98:8a:48:14:ad:ec:a1:37: 0e:93:f6:fc:a9:8d:d2:5a:f3:d8:63:d3:e9:ed:d0:b7:c5:01: 0d:b8:29:75:ab:e9:d7:b7:5e:e1:c2:89:74:5d:b2:31:88:4f: 23:c0:ea:f8:5c:ba:ea:fb:b7:7f:2d:44:45:11:39:9d:51:97: 09:1e:fb:af:e0:07:1b:7c:a1:b5:97:9d:3f:ef:dd:a0:8f:e2: 81:fb:bb:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNzOZVUyKRttsyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YmMyMzFmOTgtYzViYy00NGI4LThiYmEtZDIyMGNjNGY5OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OBjlJqdtJ1YkPjU/nYl8pex7E/NrjGgyZUc uMBxnyvPp0zdz1r8yDFQ2uoR66MOXRbACcRgmRqY3VMo814tlrLzLAy3vR83jFlC at1fMih3y1soHz0n7AIawbvrL9v1qU9DdceON1oTiWXDVo8+b+yiOiG5MoaPRcbP bzqDMwfJmKF+gHQpWaVQlMUSLf/SaTTuNT4z0Xe3gTstUmAZKuRhdilFJBgN1Kg7 bffLJOBemIfj1JWm0v7ba0YLO1NHaYVisLLCEAfpOG2++1GIeFFaaQGSYG9cJBMF 8h8rNkHkOIm1MNCbhfDFZqYYJbNTb86/HkxDtY+elmK6kIWbeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO96hsOsTuvCArdfXDmxfQbx2roMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmY3ZjQ3ZmEtNDQwOC0z NTMzLWE0NDAtOWIwODVhNmJmMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7XmN35pkK93+gBQfvKh1lujuf0YYlLbrF5ddxkQbt7x7mO5gibfFsU LwpPAFA2lLiod4TJliFGSP/zBB4fvBAd7NoF0TokAqZLTEsLD2kqI2um55qbAObZ uNML0W52Q90MCVvrGmP9S8Co2iDJwxJ+3zV4w61BaobEOVjgoaCQxI9nI4sexjqM rGGX4Ci3ho8JyFxgo4bd7YI4gRcTFsTW5MsFdJY5WkQFSbCYikgUreyhNw6T9vyp jdJa89hj0+nt0LfFAQ24KXWr6de3XuHCiXRdsjGITyPA6vhcuur7t38tREUROZ1R lwke+6/gBxt8obWXnT/v3aCP4oH7uw0= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:22 2026 by rpki-client