$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa File: 38baa28c-5f18-3003-b482-8efaa6947bef.roa (raw, json) Hash identifier: yYVhxIRxL1Div5EB93USu8nVUZPqAb99CFAWoklrmZE= Subject key identifier: 60:6B:2D:A2:72:43:97:D3:D6:26:EE:80:49:8B:DF:81:57:BE:8A:21 Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F4328584EA5AA77BA0323B5C62CBD1A00 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 12022 IP address blocks: 208.83.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:77:ba:03:23:b5:c6:2c:bd:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=92f1a557-aabd-47cd-972a-195f74b46dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:82:b9:3d:7b:1d:0e:0c:1e:61:31:b5:e1: e8:2e:71:bd:f0:c0:1a:40:b3:b1:d1:82:27:d9:4e: 0d:53:fd:1c:91:e5:a7:ac:f0:23:9f:a4:a4:44:85: 6f:e7:78:60:e0:8d:60:0e:7f:7b:c8:25:81:ec:3d: 3a:4a:a5:a1:0d:a9:d7:db:b2:67:16:bb:25:ce:d1: e0:53:fc:e4:a8:e8:62:84:4c:4f:cc:7a:cf:45:30: 1c:8a:ed:f5:d7:94:1c:2b:f4:7b:be:9a:9c:f9:36: a8:7d:23:67:83:39:e7:41:07:da:88:74:62:66:4c: 13:02:39:75:f2:4e:3b:a4:a8:78:20:46:47:fd:1c: 5a:20:e8:71:97:a0:12:fd:eb:68:3b:6e:01:09:25: e3:ec:49:91:de:fb:04:62:2a:88:63:27:8b:ee:79: 3f:7d:05:d1:22:24:09:3e:81:b0:f0:28:83:52:ca: b5:66:46:38:65:73:7f:d1:ee:1d:8d:0b:5e:e4:79: dd:60:52:ad:12:61:ef:7d:33:b1:ec:9e:37:f6:93: 41:aa:e0:5e:19:4a:fd:41:8a:d5:3e:81:67:53:04: 65:4c:7e:39:e3:ab:ab:74:7e:ae:3a:0f:eb:f2:1f: ae:6d:0b:c0:01:ee:37:67:c2:ac:61:6b:dc:4f:07: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:2D:A2:72:43:97:D3:D6:26:EE:80:49:8B:DF:81:57:BE:8A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:cf:72:38:93:af:a7:05:51:01:e4:2d:a4:78:ad:40:9c:35: 22:ac:86:61:3d:b2:a5:42:93:7c:de:33:1e:ef:a6:e4:c8:8d: 05:26:6b:d2:9b:ed:1f:e4:8b:db:d9:cc:6d:29:3e:61:02:2f: 1e:73:86:a8:ef:da:88:6d:84:b0:d8:82:66:43:b0:fe:e1:8a: b8:ba:c8:48:1b:7a:56:f9:24:85:c4:ac:e1:d6:f7:1a:6c:00: f0:32:9e:85:5f:16:69:80:34:da:f2:d0:95:50:06:4e:c7:45: 9d:2c:b6:70:3e:88:21:a6:7b:50:dd:b3:2f:cf:a6:87:d0:53: 1a:85:f6:27:3c:e1:df:a8:cd:ec:85:c7:86:0c:d5:ca:f9:b6: 8d:b1:5d:f6:af:9e:27:78:ba:86:3d:7c:2e:ff:a7:25:38:89: 0f:0b:08:bd:c0:39:e0:23:f1:11:c0:0b:c8:ad:50:fc:e4:e3: a4:bb:1f:6e:71:4a:a7:ac:49:df:89:b2:ae:3f:a2:0c:44:68: 12:22:b6:ec:58:4f:9f:88:e5:4f:fc:38:25:d5:60:40:9d:16: e9:11:aa:bb:b1:4a:96:74:3c:46:08:60:d5:a2:1b:6a:e7:85: f5:ad:2f:71:b9:6b:38:0b:f2:a5:dc:9d:48:6a:6f:f5:e0:5f: 9d:47:26:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqne6AyO1xiy9GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk OTJmMWE1NTctYWFiZC00N2NkLTk3MmEtMTk1Zjc0YjQ2ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9KCuT17HQ4MHmExteHoLnG98MAaQLOx0YIn 2U4NU/0ckeWnrPAjn6SkRIVv53hg4I1gDn97yCWB7D06SqWhDanX27JnFrslztHg U/zkqOhihExPzHrPRTAciu3115QcK/R7vpqc+TaofSNngznnQQfaiHRiZkwTAjl1 8k47pKh4IEZH/RxaIOhxl6AS/etoO24BCSXj7EmR3vsEYiqIYyeL7nk/fQXRIiQJ PoGw8CiDUsq1ZkY4ZXN/0e4djQte5HndYFKtEmHvfTOx7J439pNBquBeGUr9QYrV PoFnUwRlTH4546urdH6uOg/r8h+ubQvAAe43Z8KsYWvcTwdIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBrLaJyQ5fT1ibugEmL34FXvoohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMzhiYWEyOGMtNWYxOC0z MDAzLWI0ODItOGVmYWE2OTQ3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbPcjiTr6cFUQHkLaR4rUCcNSKshmE9sqVCk3zeMx7vpuTIjQUma9Kb 7R/ki9vZzG0pPmECLx5zhqjv2ohthLDYgmZDsP7hiri6yEgbelb5JIXErOHW9xps APAynoVfFmmANNry0JVQBk7HRZ0stnA+iCGme1Ddsy/PpofQUxqF9ic84d+ozeyF x4YM1cr5to2xXfavnid4uoY9fC7/pyU4iQ8LCL3AOeAj8RHAC8itUPzk46S7H25x SqesSd+Jsq4/ogxEaBIituxYT5+I5U/8OCXVYECdFukRqruxSpZ0PEYIYNWiG2rn hfWtL3G5azgL8qXcnUhqb/XgX51HJpY= -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:09 2026 by rpki-client