$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa File: ddf260f8-0797-37de-9209-f0dc6868cbe3.roa (raw, json) Hash identifier: IbeD2XvSg1OkyTj6q/mEouPii8zfe2zJ278qnFGPkY4= Subject key identifier: AA:60:D8:C8:D5:AD:A4:FC:7D:E9:18:99:6D:C3:4F:EF:C7:C2:C1:12 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECA6C6EA0FD4E92C9542AE7C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 273013 IP address blocks: 38.43.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6e:a0:fd:4e:92:c9:54:2a:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=3696ac7f-905c-4f61-ba30-f6b660961e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:08:33:4e:00:d9:b4:ac:f4:63:63:58:dd:f7: a9:ef:ca:09:61:83:1d:3f:f5:d5:c4:7e:8a:e6:65: 0c:ba:93:b7:20:e8:0a:71:e0:a7:15:db:e2:a7:70: 7c:fa:af:3f:21:24:7b:89:31:ed:74:15:db:95:c5: 7b:71:b2:92:01:bc:68:89:13:8c:c3:34:ea:6c:62: 08:2a:d2:de:08:a6:73:6e:40:f8:0c:31:89:f9:2c: 7d:05:28:ab:9f:43:73:0a:d6:be:99:9c:9d:2c:32: 47:b6:cb:72:6f:33:ea:e7:4e:54:9c:04:d7:d9:d9: 9a:2b:87:d6:33:eb:cf:03:f0:60:1c:be:ad:15:18: 67:67:a8:f4:0e:41:30:7a:a8:1c:4e:3f:dc:be:a3: 3f:c6:be:48:bb:2e:a2:d6:0a:57:98:3d:81:0d:60: ef:68:5f:58:34:eb:89:66:b0:ef:9c:7a:51:be:8b: 9a:67:b1:7b:2a:08:dd:a1:35:be:6c:28:01:e2:13: 19:95:34:3e:b2:e1:46:94:21:2e:25:7f:25:50:93: 8a:e3:ea:9f:64:d2:e7:17:c5:d9:f5:64:8c:48:3a: af:96:4a:58:7b:d4:7c:a1:9b:49:9e:ae:05:58:b2: 08:58:db:45:d9:35:e7:e5:89:6c:44:86:20:10:84: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:60:D8:C8:D5:AD:A4:FC:7D:E9:18:99:6D:C3:4F:EF:C7:C2:C1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:83:9b:97:7d:ba:aa:72:e5:fd:fc:34:9d:04:07:83:a6:a5: fa:e8:6a:64:51:0d:ca:d4:70:68:d4:ea:67:79:c3:c2:af:87: 1b:30:ae:86:8a:f9:c4:64:da:9f:08:01:e2:18:cb:97:63:4d: a8:07:5e:1e:33:97:24:c9:05:f9:87:78:ae:fe:4c:f3:b0:0a: 11:84:58:9e:e5:38:97:31:39:f1:0f:21:9c:f6:33:a3:7f:e7: 78:38:c9:d1:ab:ca:b8:a8:e9:6a:48:e5:59:a4:68:5f:89:15: c3:67:f3:9f:a1:88:e7:c8:b2:dd:ec:52:42:c9:b9:0e:52:ab: f9:f4:2b:a1:10:b0:97:c7:22:22:8f:00:f5:f7:00:4d:f6:3d: b4:27:f7:0f:4f:f5:1c:7f:a8:05:86:3f:82:2e:b8:27:75:9c: 34:87:d0:f9:66:a1:17:b2:64:18:6d:5f:22:1d:d4:6c:b6:ab: 83:27:33:1f:43:fa:ee:70:b5:14:2c:fc:3e:e4:c7:8c:d1:60: 38:cc:56:8d:e7:c2:5f:13:ad:74:b0:08:c0:c6:b4:c6:3b:b6: 63:b8:29:fc:77:37:87:b7:54:37:3e:47:87:e3:6d:a2:02:56: 9c:30:12:9d:00:7a:e0:94:be:82:92:a4:04:7a:dc:c8:ca:4f: 92:d7:3a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbG6g/U6SyVQq58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk MzY5NmFjN2YtOTA1Yy00ZjYxLWJhMzAtZjZiNjYwOTYxZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgggzTgDZtKz0Y2NY3fep78oJYYMdP/XVxH6K 5mUMupO3IOgKceCnFdvip3B8+q8/ISR7iTHtdBXblcV7cbKSAbxoiROMwzTqbGII KtLeCKZzbkD4DDGJ+Sx9BSirn0NzCta+mZydLDJHtstybzPq505UnATX2dmaK4fW M+vPA/BgHL6tFRhnZ6j0DkEweqgcTj/cvqM/xr5Iuy6i1gpXmD2BDWDvaF9YNOuJ ZrDvnHpRvouaZ7F7KgjdoTW+bCgB4hMZlTQ+suFGlCEuJX8lUJOK4+qfZNLnF8XZ 9WSMSDqvlkpYe9R8oZtJnq4FWLIIWNtF2TXn5YlsRIYgEITpxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpg2MjVraT8fekYmW3DT+/HwsESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGRmMjYwZjgtMDc5Ny0z N2RlLTkyMDktZjBkYzY4NjhjYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJit8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaDm5d9uqpy5f38NJ0EB4OmpfroamRRDcrUcGjU6md5w8KvhxswroaK +cRk2p8IAeIYy5djTagHXh4zlyTJBfmHeK7+TPOwChGEWJ7lOJcxOfEPIZz2M6N/ 53g4ydGryrio6WpI5VmkaF+JFcNn85+hiOfIst3sUkLJuQ5Sq/n0K6EQsJfHIiKP APX3AE32PbQn9w9P9Rx/qAWGP4IuuCd1nDSH0PlmoReyZBhtXyId1Gy2q4MnMx9D +u5wtRQs/D7kx4zRYDjMVo3nwl8TrXSwCMDGtMY7tmO4Kfx3N4e3VDc+R4fjbaIC VpwwEp0AeuCUvoKSpAR63MjKT5LXOoQ= -----END CERTIFICATE-----Generated at Fri Sep 11 13:12:35 2026 by rpki-client