$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa File: cb1859a9-b40c-37fb-a9c2-f8b708109204.roa (raw, json) Hash identifier: FHJ9s85hnRShQszvvbrpIoXy+GzaArd41D1t1i/KT74= Subject key identifier: 57:20:BD:4F:FB:4A:5C:88:58:B7:6D:95:8F:92:CB:67:A6:5A:1E:0F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E5E7A06EB8FE3B3CD1967B500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 134032 IP address blocks: 38.125.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:7a:06:eb:8f:e3:b3:cd:19:67:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=9c480629-9928-420d-8219-3cd7f3740b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:44:74:c0:fd:cf:1d:1c:d4:2d:28:8d:e8:58: d2:2f:42:a9:56:ab:17:a3:df:5a:19:38:9a:f5:aa: 22:60:f6:e7:f8:73:8e:f3:5f:66:d5:c6:04:c1:96: e2:08:3e:0e:71:4e:82:26:24:f7:57:6d:25:97:a2: 7e:91:b6:3b:0b:ce:7a:9d:21:6a:ab:39:6d:35:7f: 22:01:1e:67:17:12:0d:48:cc:d6:ae:bf:d9:bc:4c: 2d:42:cd:4e:ff:ff:f8:14:eb:60:a3:23:5e:a2:91: 1d:39:df:7d:a8:9d:d1:6d:50:4e:2e:ef:7a:db:5c: d8:34:f4:96:69:a0:f9:b4:79:a5:3e:e3:43:1f:ff: 7e:1a:be:09:86:b7:7c:39:10:2c:38:a8:18:68:0d: 20:f8:9c:19:c2:1d:c2:d9:37:bf:9f:0e:42:70:9c: fe:be:4d:45:23:9a:71:78:08:42:9d:57:56:a7:ac: 9d:89:d4:54:8f:d1:e0:4d:d9:c8:6c:bd:f3:45:49: 68:1f:4b:73:77:7e:62:5c:91:a6:b7:2d:58:a1:89: e6:ff:27:a6:0b:bd:50:ee:fb:93:2d:22:44:64:a1: 81:95:54:f7:80:cc:aa:bf:18:0e:93:13:5e:da:ee: 01:a3:e4:63:30:47:01:42:c8:45:b1:24:dc:13:5f: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:20:BD:4F:FB:4A:5C:88:58:B7:6D:95:8F:92:CB:67:A6:5A:1E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.125.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:30:9f:70:fb:fc:d9:4f:94:e9:e8:92:0a:b1:97:99:47:03: 3b:bc:cd:ad:46:c0:8e:07:4a:fb:df:aa:bb:c6:3b:94:18:14: a4:1f:da:6b:12:62:99:46:fa:70:36:3a:bc:d7:38:58:d1:0c: 5b:53:6c:98:32:7d:a3:53:3b:4b:b1:56:05:b3:9c:d9:95:da: d3:e4:0f:57:c2:6e:05:39:84:bd:e6:f5:9f:15:98:9f:8e:1c: 56:69:86:7c:40:b8:31:51:bd:50:ad:61:8c:90:d9:79:95:ea: 63:9a:7f:0b:3c:a6:c0:da:3a:d4:c4:66:ff:f5:be:cb:33:98: ab:5d:ef:d6:12:ea:3c:6b:25:52:4d:c7:8e:bb:5f:8b:60:81: 16:f2:1a:60:6f:d9:29:16:97:66:e9:c4:6f:dd:0e:cd:38:78: 07:74:5b:ad:a3:23:e5:e7:b9:1f:fb:29:f9:d7:99:cf:c3:67: 8f:e6:ec:b4:e1:ca:13:4a:fe:b9:33:74:34:45:0d:f4:78:bc: cc:c2:38:08:72:07:92:a0:9f:48:4c:f1:66:3b:20:51:eb:16: 2c:4a:6d:76:94:73:e3:12:05:8e:a4:1a:30:b6:32:86:1f:9e: 79:72:5e:9a:9d:3e:9b:37:2b:f9:1b:b6:44:7b:4c:53:93:52: 74:9f:7b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegbrj+OzzRlntQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk OWM0ODA2MjktOTkyOC00MjBkLTgyMTktM2NkN2YzNzQwYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiER0wP3PHRzULSiN6FjSL0KpVqsXo99aGTia 9aoiYPbn+HOO819m1cYEwZbiCD4OcU6CJiT3V20ll6J+kbY7C856nSFqqzltNX8i AR5nFxINSMzWrr/ZvEwtQs1O///4FOtgoyNeopEdOd99qJ3RbVBOLu9621zYNPSW aaD5tHmlPuNDH/9+Gr4Jhrd8ORAsOKgYaA0g+JwZwh3C2Te/nw5CcJz+vk1FI5px eAhCnVdWp6ydidRUj9HgTdnIbL3zRUloH0tzd35iXJGmty1YoYnm/yemC71Q7vuT LSJEZKGBlVT3gMyqvxgOkxNe2u4Bo+RjMEcBQshFsSTcE1+sZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcgvU/7SlyIWLdtlY+Sy2emWh4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2IxODU5YTktYjQwYy0z N2ZiLWE5YzItZjhiNzA4MTA5MjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJn00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgwn3D7/NlPlOnokgqxl5lHAzu8za1GwI4HSvvfqrvGO5QYFKQf2msS YplG+nA2OrzXOFjRDFtTbJgyfaNTO0uxVgWznNmV2tPkD1fCbgU5hL3m9Z8VmJ+O HFZphnxAuDFRvVCtYYyQ2XmV6mOafws8psDaOtTEZv/1vsszmKtd79YS6jxrJVJN x467X4tggRbyGmBv2SkWl2bpxG/dDs04eAd0W62jI+XnuR/7KfnXmc/DZ4/m7LTh yhNK/rkzdDRFDfR4vMzCOAhyB5Kgn0hM8WY7IFHrFixKbXaUc+MSBY6kGjC2MoYf nnlyXpqdPps3K/kbtkR7TFOTUnSfe24= -----END CERTIFICATE-----Generated at Tue Jul 21 19:56:25 2026 by rpki-client