$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d82ba1fa-404f-3603-9f27-67946f8c37a2.roa File: d82ba1fa-404f-3603-9f27-67946f8c37a2.roa (raw, json) Hash identifier: O4rpGf/e7Y0dyrHWix0BIFQFkF+63+O5b38P2Xgp5OQ= Subject key identifier: 7D:40:69:92:B3:BD:1B:DB:0E:7E:16:0D:14:A9:A7:8E:1D:5C:86:3C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA91ABD980931A5973B1D6300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d82ba1fa-404f-3603-9f27-67946f8c37a2.roa Signing time: Wed 29 Jul 2026 14:34:00 +0000 ROA not before: Wed 29 Jul 2026 14:34:00 +0000 ROA not after: Tue 27 Oct 2026 14:34:00 +0000 asID: 266063 IP address blocks: 38.252.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a9:1a:bd:98:09:31:a5:97:3b:1d:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 14:34:00 2026 GMT Not After : Oct 27 14:34:00 2026 GMT Subject: CN=69f6bd83-a029-40d2-973f-b0606a21724e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:82:b4:31:d0:19:93:2f:fe:01:92:b9:4e: b5:71:82:ec:84:94:cb:4e:b6:cb:d7:77:77:32:9e: 3f:7b:6c:f3:c7:7c:47:b7:3a:a7:87:0c:f1:7d:ac: 42:b0:fa:23:92:8b:e2:97:09:08:04:f4:41:1b:4e: a0:9c:f4:64:66:b0:42:21:1c:cc:70:64:29:6a:18: 16:d2:3b:7e:d5:d0:9e:4b:8f:c5:71:8f:ca:34:9d: 3d:49:8d:ff:df:33:3c:dc:be:3c:09:6d:ac:44:8b: 8c:ee:0f:f6:70:c7:87:cc:b4:f5:e3:5e:b6:1d:f1: fc:f6:4a:d0:bc:10:59:03:64:12:7a:02:45:1a:6a: 21:70:31:af:99:a9:d2:94:97:1f:36:9d:0a:16:1f: 5d:33:72:c8:68:13:00:02:39:6e:1b:db:b1:0a:6a: 50:f3:e0:b0:a0:c8:82:9e:2f:1c:2b:a3:c7:a3:db: 81:16:ba:3d:1d:1b:2e:72:07:89:d6:35:85:53:95: 4f:1d:86:be:8a:de:bf:42:62:5f:d0:10:71:a2:cf: 35:5d:2d:d4:f3:27:d7:a0:3a:b7:f4:66:61:46:37: fd:2a:25:95:06:c0:f4:ef:07:68:2c:af:77:95:b7: 52:0e:d0:c1:70:eb:14:28:d7:7a:46:e1:fb:94:0e: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:40:69:92:B3:BD:1B:DB:0E:7E:16:0D:14:A9:A7:8E:1D:5C:86:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d82ba1fa-404f-3603-9f27-67946f8c37a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:49:cb:df:34:c9:f7:1f:b3:ad:77:6d:bc:4f:9a:b7:7d:30: d5:38:d2:2d:ba:97:cf:e9:1b:b4:f5:c7:a5:1a:d7:20:bf:65: 34:e2:18:d5:49:8c:4a:6a:5a:d7:e3:c9:a8:62:c4:17:03:d4: 3b:7d:39:89:83:1e:f6:a7:d8:a1:56:31:78:ef:12:14:2d:1b: af:77:f6:9b:2e:54:29:f3:6b:a8:11:5a:03:9d:84:c1:21:55: aa:42:45:18:1a:9b:75:b6:91:58:51:91:20:dc:11:fb:9f:17: a0:fb:09:c1:b7:35:22:92:f5:51:6a:a0:57:7b:f3:d8:7f:8c: 68:28:73:34:61:b1:c5:1e:16:1d:b7:7f:fb:cf:ef:71:bf:be: 3d:3a:0c:45:c6:ca:45:11:52:83:0d:14:b7:a2:b7:66:90:05: 36:82:5f:56:5e:96:47:6d:d6:d3:85:a0:ac:7e:64:4e:14:f7: 38:c5:f0:09:22:e6:e0:6c:61:bd:89:61:f0:06:f6:5e:03:6f: cd:f6:97:cf:f2:25:c5:c9:14:d1:15:0a:20:b3:f4:ad:b9:24: be:6c:64:8d:4e:d6:3f:19:aa:e6:86:84:1f:31:67:70:12:34: 70:dd:7c:90:2a:cb:66:9c:f6:5a:43:8e:1f:dd:d7:93:2f:f0: 9d:f5:9a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6pGr2YCTGllzsdYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTE0MzQwMFoXDTI2MTAyNzE0MzQwMFowLzEtMCsGA1UEAxMk NjlmNmJkODMtYTAyOS00MGQyLTk3M2YtYjA2MDZhMjE3MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoWCtDHQGZMv/gGSuU61cYLshJTLTrbL13d3 Mp4/e2zzx3xHtzqnhwzxfaxCsPojkovilwkIBPRBG06gnPRkZrBCIRzMcGQpahgW 0jt+1dCeS4/FcY/KNJ09SY3/3zM83L48CW2sRIuM7g/2cMeHzLT14162HfH89krQ vBBZA2QSegJFGmohcDGvmanSlJcfNp0KFh9dM3LIaBMAAjluG9uxCmpQ8+CwoMiC ni8cK6PHo9uBFro9HRsucgeJ1jWFU5VPHYa+it6/QmJf0BBxos81XS3U8yfXoDq3 9GZhRjf9KiWVBsD07wdoLK93lbdSDtDBcOsUKNd6RuH7lA60dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1AaZKzvRvbDn4WDRSpp44dXIY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDgyYmExZmEtNDA0Zi0z NjAzLTlmMjctNjc5NDZmOGMzN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJvzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdJy980yfcfs613bbxPmrd9MNU40i26l8/pG7T1x6Ua1yC/ZTTiGNVJ jEpqWtfjyahixBcD1Dt9OYmDHvan2KFWMXjvEhQtG6939psuVCnza6gRWgOdhMEh VapCRRgam3W2kVhRkSDcEfufF6D7CcG3NSKS9VFqoFd789h/jGgoczRhscUeFh23 f/vP73G/vj06DEXGykURUoMNFLeit2aQBTaCX1Zelkdt1tOFoKx+ZE4U9zjF8Aki 5uBsYb2JYfAG9l4Db832l8/yJcXJFNEVCiCz9K25JL5sZI1O1j8ZquaGhB8xZ3AS NHDdfJAqy2ac9lpDjh/d15Mv8J31msE= -----END CERTIFICATE-----Generated at Sun Aug 23 12:45:07 2026 by rpki-client