$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa File: cb1859a9-b40c-37fb-a9c2-f8b708109204.roa (raw, json) Hash identifier: RnlZMpyTIRCbPdMb/T3yr/qlR+wFc9EcNUCKS91m0cc= Subject key identifier: CC:38:58:5E:7A:9A:5A:DA:47:07:FE:C4:EB:AD:2F:34:B9:94:F2:D3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F00DCD2DEE0B3581563A80700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 134032 IP address blocks: 38.125.52.0/23 maxlen: 24 154.18.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d2:de:e0:b3:58:15:63:a8:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=a124b6e9-9900-4a35-b710-48f6550fedf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:65:58:91:90:69:4f:74:a7:57:a0:56:4a: 01:f2:cf:e0:f7:84:f0:7f:17:95:bd:83:81:26:e0: ac:13:3b:d0:77:44:b2:94:32:1a:a5:8e:86:ee:4b: 3b:2c:b3:82:14:f2:c2:c5:de:59:7c:05:21:c5:c4: 6b:e5:20:33:de:2c:57:f4:76:39:72:ed:85:21:4d: fa:02:82:18:94:a7:a9:a7:dd:d0:87:e8:d5:b5:36: bb:d4:b0:54:d0:a6:d1:fd:79:e3:1a:ff:3f:c9:e4: f6:3f:92:79:af:f3:65:76:98:42:57:ca:17:4c:52: c7:5d:65:73:2f:cc:0e:3b:e7:ca:27:54:89:bd:57: 16:59:a1:40:e7:07:48:20:6e:eb:f2:0d:f5:83:2f: c1:fb:e2:5e:45:ed:49:07:d9:e6:11:b5:1f:5d:9f: 48:fe:55:a9:45:4b:fd:3c:51:3c:78:87:3e:39:92: f0:01:b1:f0:17:11:c4:b7:8e:98:00:15:04:3a:db: 37:a5:86:09:5b:5e:fa:39:2d:93:a0:74:ef:f2:59: cc:ae:fc:47:77:b6:15:88:55:c0:b1:4b:42:f6:1b: 54:0f:c7:c6:65:c6:cd:fe:88:33:a1:f5:76:bf:8b: 09:4e:6a:62:8a:12:67:4b:7a:88:f4:ff:be:ee:32: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:38:58:5E:7A:9A:5A:DA:47:07:FE:C4:EB:AD:2F:34:B9:94:F2:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.125.52.0/23 154.18.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:7d:ce:0a:b5:70:cc:dc:5c:5c:52:97:70:cd:1b:7a:a2:f5: 39:09:ea:58:83:57:f7:c1:47:33:12:90:ec:26:c9:e3:5f:3f: 0a:90:32:7b:a6:64:b4:b6:14:46:07:03:da:f8:e8:bc:e8:81: ee:2d:03:85:6b:14:65:f7:78:32:b2:9a:40:d8:46:d5:ae:f9: 0e:6b:8f:cc:af:64:d0:55:b1:f4:b3:4d:59:5c:0b:d2:f6:81: 12:70:71:59:da:b1:16:30:ce:76:e3:b0:38:09:d4:26:fb:60: 65:81:9a:a9:cd:94:d9:30:ba:f0:dc:51:88:03:fe:8c:f9:88: 12:3b:95:06:32:76:5e:e5:5f:ad:d9:b7:63:24:42:4c:37:41: 7b:fe:a5:4b:2e:e1:b7:2b:55:24:be:fc:38:0c:83:52:9e:53: 1a:2c:1a:d1:44:77:e3:40:63:87:95:9f:20:85:ed:b5:e3:24: 96:bf:13:db:5e:93:7a:70:71:1d:80:b6:ac:9f:9b:77:bd:4b: 06:d6:ec:ed:38:28:0a:a2:53:25:65:66:66:db:11:2c:c6:5e: 5c:10:03:c3:7c:67:e6:0b:24:01:8b:51:74:21:6f:15:d1:44: f2:49:a7:e3:77:46:1c:92:30:e9:e1:78:1d:7f:44:ea:ed:f4: f5:ca:c4:1b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8A3NLe4LNYFWOoBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk YTEyNGI2ZTktOTkwMC00YTM1LWI3MTAtNDhmNjU1MGZlZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ZlWJGQaU90p1egVkoB8s/g94TwfxeVvYOB JuCsEzvQd0SylDIapY6G7ks7LLOCFPLCxd5ZfAUhxcRr5SAz3ixX9HY5cu2FIU36 AoIYlKepp93Qh+jVtTa71LBU0KbR/XnjGv8/yeT2P5J5r/NldphCV8oXTFLHXWVz L8wOO+fKJ1SJvVcWWaFA5wdIIG7r8g31gy/B++JeRe1JB9nmEbUfXZ9I/lWpRUv9 PFE8eIc+OZLwAbHwFxHEt46YABUEOts3pYYJW176OS2ToHTv8lnMrvxHd7YViFXA sUtC9htUD8fGZcbN/ogzofV2v4sJTmpiihJnS3qI9P++7jJjfwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMw4WF56mlraRwf+xOutLzS5lPLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2IxODU5YTktYjQwYy0z N2ZiLWE5YzItZjhiNzA4MTA5MjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJn00AwQB mhLSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMx9zgq1cMzcXFxSl3DNG3qi9TkJ6liDV/fBRzMSkOwmyeNf PwqQMnumZLS2FEYHA9r46Lzoge4tA4VrFGX3eDKymkDYRtWu+Q5rj8yvZNBVsfSz TVlcC9L2gRJwcVnasRYwznbjsDgJ1Cb7YGWBmqnNlNkwuvDcUYgD/oz5iBI7lQYy dl7lX63Zt2MkQkw3QXv+pUsu4bcrVSS+/DgMg1KeUxosGtFEd+NAY4eVnyCF7bXj JJa/E9tek3pwcR2Atqyfm3e9SwbW7O04KAqiUyVlZmbbESzGXlwQA8N8Z+YLJAGL UXQhbxXRRPJJp+N3RhySMOnheB1/ROrt9PXKxBs= -----END CERTIFICATE-----Generated at Sat Sep 5 08:50:59 2026 by rpki-client