$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa File: db717c4d-e5e9-3340-ad9a-893770267318.roa (raw, json) Hash identifier: QhundPvddd8cqL+08qrKsf9tPjRYutBcbzqleHXZU6I= Subject key identifier: 8B:E1:B4:98:69:70:BE:27:83:AC:7A:A8:62:FA:52:BD:C2:FC:73:B4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB6E1B3E33AFE26B3D824C3A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 56376 IP address blocks: 38.88.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:b3:e3:3a:fe:26:b3:d8:24:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=f9ddc8e4-0ce5-4dec-96df-e7778a4d2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:05:3a:07:9c:c5:00:4a:12:0f:bc:2a:85:7f: 72:9b:3e:62:cf:77:7d:30:88:21:6d:90:2d:4c:dc: 79:1e:56:ce:97:0f:d3:9b:3c:39:21:d8:a3:c4:9c: 81:4f:d1:d1:d4:ce:d7:c3:d8:9b:85:54:07:85:37: d5:09:52:b8:c9:3c:4c:7b:eb:ec:ac:61:6f:6b:86: b4:dc:70:73:45:f4:16:7d:4f:c4:8d:13:96:8c:cc: 41:cc:e7:ba:2d:7c:e5:40:6c:43:03:09:c4:bf:6b: d1:12:ab:3f:6a:a1:ba:9a:19:5f:2f:24:ec:1b:bb: 0c:8c:c9:22:89:dd:7c:37:8b:df:5c:2d:bd:ca:5a: 27:a4:a7:1a:67:73:c9:30:ec:1f:33:bb:a9:91:06: 00:2b:40:32:f2:67:f6:26:ec:4b:1a:fb:0e:4b:32: 95:08:8b:3d:da:b6:f8:77:99:84:4b:30:16:b6:91: 31:d0:b1:d5:28:6f:30:00:fd:0e:24:6b:9c:fb:b4: db:1b:94:b1:6a:f5:99:37:2b:c1:8a:03:37:53:56: 31:fc:64:7b:10:07:e1:1f:62:24:65:63:80:ee:5f: e7:32:af:c1:92:fe:81:d3:e2:5c:02:da:6d:8f:06: 79:fd:80:14:4f:81:07:5d:f1:d0:9b:82:8b:69:84: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:B4:98:69:70:BE:27:83:AC:7A:A8:62:FA:52:BD:C2:FC:73:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.88.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7c:c6:13:96:1a:59:2d:c1:3a:82:4d:87:f1:40:64:55:2e: 99:f5:94:40:9f:bc:ba:28:89:ff:a6:0c:04:90:7e:06:75:39: 4e:91:58:0a:d0:47:c2:19:c2:3b:fe:c2:8e:b2:ec:10:29:5f: 9b:11:84:32:81:4b:71:8f:8c:0c:21:37:bf:7f:05:61:09:97: 9c:54:05:08:9e:74:42:10:84:2e:25:38:45:9b:8c:32:3d:ad: 0a:f8:bd:48:5c:bc:d8:fe:72:7f:4c:d7:c6:c4:3f:a6:b4:37: 13:6d:7c:37:ca:aa:3d:7e:c1:ca:43:54:a6:ae:0b:03:8c:65: 5d:39:09:6e:28:9b:0b:b3:27:a9:38:26:14:eb:bf:4f:f4:74: 94:3e:8a:8b:61:8b:4b:14:80:98:fe:13:53:14:92:37:19:33: 1d:5c:78:61:a6:ef:0a:ec:40:d4:08:2c:42:09:a1:97:38:11: fd:b9:69:a4:d0:b4:d7:18:51:fc:d2:49:50:35:ef:a9:1f:77: e0:a2:d6:dd:fa:6f:da:5e:81:30:19:80:27:0f:dd:99:46:b2: 87:2a:01:f2:79:68:b8:98:15:38:f5:94:cf:5a:b6:de:cd:cd: 70:21:68:37:87:11:45:87:ef:7d:c4:ff:e0:ed:20:50:c3:ef: 45:09:15:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624bPjOv4ms9gkw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjlkZGM4ZTQtMGNlNS00ZGVjLTk2ZGYtZTc3NzhhNGQyMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQU6B5zFAEoSD7wqhX9ymz5iz3d9MIghbZAt TNx5HlbOlw/Tmzw5IdijxJyBT9HR1M7Xw9ibhVQHhTfVCVK4yTxMe+vsrGFva4a0 3HBzRfQWfU/EjROWjMxBzOe6LXzlQGxDAwnEv2vREqs/aqG6mhlfLyTsG7sMjMki id18N4vfXC29ylonpKcaZ3PJMOwfM7upkQYAK0Ay8mf2JuxLGvsOSzKVCIs92rb4 d5mESzAWtpEx0LHVKG8wAP0OJGuc+7TbG5SxavWZNyvBigM3U1Yx/GR7EAfhH2Ik ZWOA7l/nMq/Bkv6B0+JcAtptjwZ5/YAUT4EHXfHQm4KLaYQ6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvhtJhpcL4ng6x6qGL6Ur3C/HO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGI3MTdjNGQtZTVlOS0z MzQwLWFkOWEtODkzNzcwMjY3MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJlhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx8xhOWGlktwTqCTYfxQGRVLpn1lECfvLooif+mDASQfgZ1OU6RWArQ R8IZwjv+wo6y7BApX5sRhDKBS3GPjAwhN79/BWEJl5xUBQiedEIQhC4lOEWbjDI9 rQr4vUhcvNj+cn9M18bEP6a0NxNtfDfKqj1+wcpDVKauCwOMZV05CW4omwuzJ6k4 JhTrv0/0dJQ+iothi0sUgJj+E1MUkjcZMx1ceGGm7wrsQNQILEIJoZc4Ef25aaTQ tNcYUfzSSVA176kfd+Ci1t36b9pegTAZgCcP3ZlGsocqAfJ5aLiYFTj1lM9att7N zXAhaDeHEUWH733E/+DtIFDD70UJFfY= -----END CERTIFICATE-----Generated at Sat Sep 5 04:54:16 2026 by rpki-client