$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7abb923a-5078-35d6-94f1-b06ea2120738.roa File: 7abb923a-5078-35d6-94f1-b06ea2120738.roa (raw, json) Hash identifier: 9PO0juClSJZPvV2nqWa6Lr8g17gu/+q4ZXCnMUF1wb4= Subject key identifier: F0:84:52:C8:BC:DB:3B:FD:0C:BD:56:C6:99:16:88:0D:29:A7:6D:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E2809A19ADAB9F9056AE23780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7abb923a-5078-35d6-94f1-b06ea2120738.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 208122 IP address blocks: 38.121.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:a1:9a:da:b9:f9:05:6a:e2:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=7d95c3ed-9e28-42f9-8410-587138c599b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:cf:04:1a:e5:7b:47:2e:69:c3:46:10:1f: ee:06:00:ba:5c:c9:12:f1:98:55:a0:27:e2:65:19: 4b:98:80:ed:1a:d4:26:1a:da:17:1e:f7:99:23:f4: e1:5f:52:7f:99:91:06:bd:01:57:0e:ae:19:05:4f: 83:65:43:c9:75:bb:e0:02:76:e0:ec:79:29:0b:eb: 0a:3c:ee:d7:42:49:74:44:93:7b:35:43:35:c5:cd: 40:b5:07:18:03:d0:12:97:4e:4c:23:ec:c2:9a:54: b1:dc:98:66:bc:18:0e:c2:bd:5b:dd:b2:a5:22:4b: 5d:e0:74:fb:56:0e:c7:ff:9d:4b:bb:07:75:a5:46: 30:56:18:ff:6d:13:96:41:97:33:76:2c:9e:50:ea: be:09:59:27:ae:ad:67:f8:85:a5:c1:ba:36:b0:9b: bc:d2:d1:06:1d:ce:c6:de:dd:6d:a5:fd:c5:1c:a6: 0f:84:f0:73:26:23:9b:e6:41:e3:0b:ed:96:11:41: b3:76:be:36:49:07:74:5b:a9:81:52:dc:b1:66:28: 99:89:61:40:14:2c:df:14:f6:2a:de:ac:34:cd:dc: fb:bf:4b:dd:f6:e2:9e:6c:22:8d:0d:11:04:0f:b8: dc:c7:4b:17:10:23:1e:97:c4:ce:a6:c1:1a:46:4e: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:84:52:C8:BC:DB:3B:FD:0C:BD:56:C6:99:16:88:0D:29:A7:6D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7abb923a-5078-35d6-94f1-b06ea2120738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.121.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4d:09:30:f0:3c:35:2d:2e:bd:12:b1:e2:a1:6f:45:33:34: 34:c6:f7:95:8a:0f:31:1f:19:e1:d8:72:d1:4d:f1:17:c3:e7: 82:3c:44:64:c7:12:e0:5d:8e:90:45:39:a6:5d:6d:3e:f5:fc: b9:35:8e:c6:3d:3a:51:9c:30:91:87:ec:8c:3c:ea:c0:5a:f6: 07:22:90:f1:0b:fe:12:ce:f3:f4:7b:8d:e3:af:df:87:b0:a3: 9c:5d:eb:72:0c:60:33:48:07:14:60:e8:28:f1:79:36:ee:14: 7e:2b:d2:26:71:ad:01:4d:f2:19:6f:39:66:21:a0:6f:dd:58: 43:18:89:01:31:80:5f:2e:1e:cc:06:c6:fe:32:4b:42:09:44: 97:9d:15:12:8c:e3:8c:10:c4:05:34:a3:fa:4c:c0:82:d7:32: fa:e1:a2:23:87:40:60:1e:9f:49:a5:56:e0:59:d7:75:22:15: 7a:13:a5:6b:c4:c8:88:65:97:bb:17:6f:e0:0e:a6:48:20:c6: e8:1e:fe:4c:27:e6:5a:10:64:8e:ee:0a:88:95:17:9c:89:57: 89:2d:53:8c:bf:2a:cb:d5:87:59:cb:7d:28:76:6b:ec:17:a1: 89:01:25:c2:f5:d8:f6:02:69:58:c3:7f:13:0e:c8:92:81:69: 1d:4c:50:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCaGa2rn5BWriN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk N2Q5NWMzZWQtOWUyOC00MmY5LTg0MTAtNTg3MTM4YzU5OWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+fPBBrle0cuacNGEB/uBgC6XMkS8ZhVoCfi ZRlLmIDtGtQmGtoXHveZI/ThX1J/mZEGvQFXDq4ZBU+DZUPJdbvgAnbg7HkpC+sK PO7XQkl0RJN7NUM1xc1AtQcYA9ASl05MI+zCmlSx3JhmvBgOwr1b3bKlIktd4HT7 Vg7H/51Luwd1pUYwVhj/bROWQZczdiyeUOq+CVknrq1n+IWlwbo2sJu80tEGHc7G 3t1tpf3FHKYPhPBzJiOb5kHjC+2WEUGzdr42SQd0W6mBUtyxZiiZiWFAFCzfFPYq 3qw0zdz7v0vd9uKebCKNDREED7jcx0sXECMel8TOpsEaRk7p1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCEUsi82zv9DL1WxpkWiA0pp230MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2FiYjkyM2EtNTA3OC0z NWQ2LTk0ZjEtYjA2ZWEyMTIwNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZNCTDwPDUtLr0SseKhb0UzNDTG95WKDzEfGeHYctFN8RfD54I8RGTH EuBdjpBFOaZdbT71/Lk1jsY9OlGcMJGH7Iw86sBa9gcikPEL/hLO8/R7jeOv34ew o5xd63IMYDNIBxRg6CjxeTbuFH4r0iZxrQFN8hlvOWYhoG/dWEMYiQExgF8uHswG xv4yS0IJRJedFRKM44wQxAU0o/pMwILXMvrhoiOHQGAen0mlVuBZ13UiFXoTpWvE yIhll7sXb+AOpkggxuge/kwn5loQZI7uCoiVF5yJV4ktU4y/KsvVh1nLfSh2a+wX oYkBJcL12PYCaVjDfxMOyJKBaR1MUDg= -----END CERTIFICATE-----Generated at Sat Jun 13 23:21:15 2026 by rpki-client