$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6105fa4-3afb-3a39-b11d-7f93042fa93a.roa File: d6105fa4-3afb-3a39-b11d-7f93042fa93a.roa (raw, json) Hash identifier: 6JdoOiFKgk+LV3ZvH/LaM0U7r73pH/hA0GNqVQ3I4SE= Subject key identifier: CB:AF:2B:D1:45:EA:57:D0:07:36:25:AA:C0:9B:25:E2:CB:8F:E9:DF Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE94D76ED406DF798AACBDE20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6105fa4-3afb-3a39-b11d-7f93042fa93a.roa Signing time: Fri 21 Aug 2026 14:27:56 +0000 ROA not before: Fri 21 Aug 2026 14:27:56 +0000 ROA not after: Thu 19 Nov 2026 15:27:56 +0000 asID: 141983 IP address blocks: 38.72.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:4d:76:ed:40:6d:f7:98:aa:cb:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 21 14:27:56 2026 GMT Not After : Nov 19 15:27:56 2026 GMT Subject: CN=fcfc3bf0-14e5-4fe1-976e-03fa665bc9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:6d:0a:4b:21:71:ec:bd:cc:bd:b1:39:3f: 12:d8:4c:fd:89:3e:77:5f:15:d1:ea:4c:2c:17:fb: 21:ad:9d:35:1a:62:51:1c:fa:ed:be:75:5b:01:3c: ea:e4:a1:f1:ca:46:be:ef:06:3d:dd:b0:6a:3f:79: 03:9f:fc:0f:ff:16:3e:9c:69:22:f5:86:85:84:1f: 4a:e7:58:cd:87:74:ab:d1:92:e6:cf:49:90:83:c9: 5b:9d:2d:99:f2:44:c7:de:65:cd:b7:26:78:e4:03: 14:d8:92:bf:5a:bd:3b:92:32:5f:5f:9e:9e:ff:25: 9c:bb:6d:89:00:83:9b:d0:bd:eb:35:9e:8b:d5:ce: e0:16:b8:0a:09:48:5d:97:46:ef:e6:73:ba:88:43: e4:f6:6f:e6:f5:43:ac:c5:9f:87:d8:66:9b:f8:e7: f9:0c:68:72:39:fc:2e:37:e4:71:01:f6:54:35:af: ac:0f:02:a5:33:53:9c:b8:1c:80:c5:81:ef:0f:10: d2:40:0c:af:80:41:7a:63:b6:a0:0e:5c:68:cd:10: 9c:3f:d3:6f:af:26:82:2c:af:27:17:48:13:8a:cf: e4:a5:d8:c4:26:76:e4:f7:ae:e7:fe:66:5a:28:10: 9a:17:89:8f:c0:40:2c:25:ef:ba:e2:90:7b:3a:73: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AF:2B:D1:45:EA:57:D0:07:36:25:AA:C0:9B:25:E2:CB:8F:E9:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6105fa4-3afb-3a39-b11d-7f93042fa93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.72.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ba:29:cd:4f:21:6b:e3:ed:4d:c7:8d:b8:78:b3:8e:25:ea: 27:78:32:47:dd:8a:63:68:90:17:e5:ef:f0:1b:e4:fe:54:7e: 30:e4:98:78:bb:1e:69:8d:db:d4:f0:b2:c7:70:73:d2:cb:21: 20:56:7a:84:f0:43:7b:b2:1a:f1:9f:70:0b:6b:bf:b7:09:3a: 0a:93:56:a1:c2:b6:a3:c6:66:5a:8f:63:98:c0:dc:36:10:29: 13:22:10:57:53:fa:eb:72:fe:c1:d2:24:49:6e:8b:19:91:5d: ed:89:cb:47:28:b6:21:0e:e8:f3:b6:30:9a:cc:33:bc:52:c4: be:d3:c3:2e:c3:9e:d6:dd:47:1b:ed:b7:2e:fd:b8:ac:47:e3: f7:6d:45:ce:6c:74:0b:86:ba:54:af:04:8f:e4:55:93:e1:56: e1:ac:15:02:38:42:b8:ed:90:b5:5f:f7:7c:28:a0:0d:3a:ef: 5e:0b:d5:89:a0:6d:90:4d:0e:e0:22:fc:c4:56:e3:18:6b:e0: 26:e3:c3:b5:c2:54:92:0e:e4:28:d8:4b:f1:1c:c3:92:f3:bf: 5f:90:f0:c9:d7:3d:0b:6b:fb:ab:11:e7:e6:f4:86:91:6c:e5: 7c:7e:1f:3a:af:9f:29:82:24:ab:e0:ea:3a:a6:b6:8d:b3:38: 46:4a:26:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pTXbtQG33mKrL3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMTE0Mjc1NloXDTI2MTExOTE1Mjc1NlowLzEtMCsGA1UEAxMk ZmNmYzNiZjAtMTRlNS00ZmUxLTk3NmUtMDNmYTY2NWJjOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN9tCkshcey9zL2xOT8S2Ez9iT53XxXR6kws F/shrZ01GmJRHPrtvnVbATzq5KHxyka+7wY93bBqP3kDn/wP/xY+nGki9YaFhB9K 51jNh3Sr0ZLmz0mQg8lbnS2Z8kTH3mXNtyZ45AMU2JK/Wr07kjJfX56e/yWcu22J AIOb0L3rNZ6L1c7gFrgKCUhdl0bv5nO6iEPk9m/m9UOsxZ+H2Gab+Of5DGhyOfwu N+RxAfZUNa+sDwKlM1OcuByAxYHvDxDSQAyvgEF6Y7agDlxozRCcP9NvryaCLK8n F0gTis/kpdjEJnbk967n/mZaKBCaF4mPwEAsJe+64pB7OnMC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuvK9FF6lfQBzYlqsCbJeLLj+nfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDYxMDVmYTQtM2FmYi0z YTM5LWIxMWQtN2Y5MzA0MmZhOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+6Kc1PIWvj7U3Hjbh4s44l6id4MkfdimNokBfl7/Ab5P5UfjDkmHi7 HmmN29Twssdwc9LLISBWeoTwQ3uyGvGfcAtrv7cJOgqTVqHCtqPGZlqPY5jA3DYQ KRMiEFdT+uty/sHSJEluixmRXe2Jy0cotiEO6PO2MJrMM7xSxL7Twy7DntbdRxvt ty79uKxH4/dtRc5sdAuGulSvBI/kVZPhVuGsFQI4QrjtkLVf93wooA06714L1Ymg bZBNDuAi/MRW4xhr4Cbjw7XCVJIO5CjYS/Ecw5Lzv1+Q8MnXPQtr+6sR5+b0hpFs 5Xx+HzqvnymCJKvg6jqmto2zOEZKJmE= -----END CERTIFICATE-----Generated at Fri Sep 11 13:08:14 2026 by rpki-client