$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/587ac96c-c60f-3fdf-84e4-5d443ea80bf0.roa File: 587ac96c-c60f-3fdf-84e4-5d443ea80bf0.roa (raw, json) Hash identifier: B8y/lZBqmr9BxXgjPPzrrQyP+jvjGw8j1Awd703Sw1c= Subject key identifier: 5A:33:48:2B:E1:19:8C:E4:C4:74:6B:69:2C:49:3A:31:76:8F:3B:60 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA7916740C6B42EF698676300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/587ac96c-c60f-3fdf-84e4-5d443ea80bf0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 58952 IP address blocks: 38.51.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:67:40:c6:b4:2e:f6:98:67:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=525e577c-5fc7-4753-97ec-631cfd069052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:89:60:87:4d:ed:93:76:0a:9c:c2:ce:bb: 94:bf:a7:71:d0:ac:b4:cf:ab:93:7d:34:5c:7c:f7: e0:fb:18:4e:3f:a4:e5:12:7f:5a:36:f2:55:d3:b3: 84:b3:d2:6e:8c:cd:7e:8d:25:40:c2:46:0b:e9:07: fe:30:a0:aa:28:1d:22:3a:48:83:93:6d:a0:7a:39: fc:c0:8e:b7:96:f2:47:e6:29:8c:49:71:e7:85:42: 10:14:78:de:ab:4e:79:e0:7b:f1:75:cb:b9:bf:b1: 3a:bf:90:c8:b6:3c:c7:13:61:d4:6e:f0:e5:41:7b: bf:c0:23:94:5a:d3:0b:d8:a4:e0:f5:ba:90:c5:1f: 97:d0:3e:1c:ee:4d:e2:84:be:7a:7d:77:60:ff:81: 04:7e:37:59:ec:f2:b3:4e:10:71:b7:9c:cc:84:94: dc:6c:9e:2d:5d:4d:85:3c:7b:e3:64:28:cc:e2:4e: 45:44:d0:55:33:2a:2e:05:7e:d6:e2:a6:02:db:91: cf:ac:4c:b1:74:47:c6:48:aa:55:cd:7e:f2:37:eb: f3:8b:33:4d:68:24:2d:63:b5:9e:d4:ea:a0:6c:30: 4d:9e:55:5c:28:51:a4:fc:4e:a2:e6:45:94:03:fe: eb:7e:84:f4:78:fa:04:75:8d:d3:9e:f2:ce:65:b7: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:48:2B:E1:19:8C:E4:C4:74:6B:69:2C:49:3A:31:76:8F:3B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/587ac96c-c60f-3fdf-84e4-5d443ea80bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.51.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:01:67:1d:a9:c1:09:bc:ef:4c:f1:b3:cc:8b:cd:08:a2:2e: 3d:94:79:01:66:93:d6:5c:ca:b8:aa:52:6a:e8:95:16:dc:3e: 0a:e2:54:33:f6:6d:6a:a8:0a:84:4e:ce:80:fe:b3:3d:3d:c1: 76:06:fd:9e:c5:f8:48:3e:94:a0:d5:58:a8:d5:39:ce:c7:81: 9b:28:3b:f1:50:2e:a6:5e:2d:99:d1:72:c6:ff:20:b4:d6:63: bd:3a:4e:7f:0a:9d:81:9e:c3:47:7d:6f:56:3b:d9:fa:6d:1c: 72:f3:ee:a5:12:82:7b:a0:13:67:24:6e:26:d0:43:d1:fa:27: 9d:77:81:cb:de:24:bf:37:15:c3:34:bd:56:a6:ee:3f:24:fe: 7e:85:ed:be:f2:77:88:25:09:99:12:7f:58:e0:2a:55:f4:d9: a5:da:f7:be:d1:ec:4e:2b:71:de:93:f7:44:1a:dd:98:df:f2: fc:8f:b9:af:77:2e:3b:b0:58:6a:03:fb:35:d1:97:93:34:83: 3d:81:9f:cd:be:b5:ff:7f:35:9a:bc:51:ba:26:28:49:ce:d1: d4:09:aa:13:c3:e0:d7:11:07:c4:d7:5f:14:35:aa:2b:93:5c: 0b:e6:c3:2e:9b:e6:a7:0a:69:7b:65:83:e0:b0:01:ef:e4:57: 81:09:08:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkWdAxrQu9phnYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTI1ZTU3N2MtNWZjNy00NzUzLTk3ZWMtNjMxY2ZkMDY5MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+JYIdN7ZN2CpzCzruUv6dx0Ky0z6uTfTRc fPfg+xhOP6TlEn9aNvJV07OEs9JujM1+jSVAwkYL6Qf+MKCqKB0iOkiDk22gejn8 wI63lvJH5imMSXHnhUIQFHjeq0554Hvxdcu5v7E6v5DItjzHE2HUbvDlQXu/wCOU WtML2KTg9bqQxR+X0D4c7k3ihL56fXdg/4EEfjdZ7PKzThBxt5zMhJTcbJ4tXU2F PHvjZCjM4k5FRNBVMyouBX7W4qYC25HPrEyxdEfGSKpVzX7yN+vzizNNaCQtY7We 1OqgbDBNnlVcKFGk/E6i5kWUA/7rfoT0ePoEdY3TnvLOZbejnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFozSCvhGYzkxHRraSxJOjF2jztgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTg3YWM5NmMtYzYwZi0z ZmRmLTg0ZTQtNWQ0NDNlYTgwYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4BZx2pwQm870zxs8yLzQiiLj2UeQFmk9ZcyriqUmrolRbcPgriVDP2 bWqoCoROzoD+sz09wXYG/Z7F+Eg+lKDVWKjVOc7HgZsoO/FQLqZeLZnRcsb/ILTW Y706Tn8KnYGew0d9b1Y72fptHHLz7qUSgnugE2ckbibQQ9H6J513gcveJL83FcM0 vVam7j8k/n6F7b7yd4glCZkSf1jgKlX02aXa977R7E4rcd6T90Qa3Zjf8vyPua93 LjuwWGoD+zXRl5M0gz2Bn82+tf9/NZq8UbomKEnO0dQJqhPD4NcRB8TXXxQ1qiuT XAvmwy6b5qcKaXtlg+CwAe/kV4EJCDI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:56:22 2026 by rpki-client