$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa File: b8f74b7d-4198-317f-a91c-316aaf61dbac.roa (raw, json) Hash identifier: FhNlvszqoaVa7IfZe4PQS0iyVIzldWf5SlCKSrns+7U= Subject key identifier: 52:94:88:24:5C:6A:97:3E:5E:90:98:5D:E9:47:E0:A3:88:C2:A9:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E2809A24A7DFC1DCDFF708C00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 27884 IP address blocks: 38.225.232.0/22 maxlen: 24 38.255.112.0/22 maxlen: 24 149.86.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:a2:4a:7d:fc:1d:cd:ff:70:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=2834dbf9-9a17-422a-b955-5fc915696857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:5b:37:5c:f3:c3:97:ca:44:c2:56:a3:15: 29:b4:58:ff:4c:df:6d:3c:94:f8:49:bd:6c:6b:ce: 8d:f8:fd:ef:b5:a0:bd:6e:eb:ef:b8:3f:ca:fc:51: 05:7b:f6:bc:b3:cb:7b:6e:9c:60:59:6e:26:d3:e7: 7b:a1:39:10:6a:8a:60:38:f8:8a:b7:4e:8c:40:30: 80:be:1c:b2:4e:d9:a4:8c:e4:1b:18:a4:7b:7b:04: 88:15:5d:40:86:49:b6:55:3e:34:f6:65:ef:1c:a8: 58:29:84:30:52:ed:b0:be:f9:ab:e1:37:78:90:12: 5e:42:81:5c:1f:a6:44:f6:8e:c2:8e:cf:5c:52:53: 1b:34:3a:fb:32:05:df:7e:a8:ed:1a:da:b9:96:9c: d9:14:26:c2:60:24:44:79:76:1a:71:ed:79:8c:55: 6d:56:dc:7f:6d:ca:8e:5c:43:6d:49:16:13:16:11: ff:ff:2b:09:2b:d9:d1:05:a9:ac:3b:35:f4:2b:1f: 08:ac:10:d1:67:7c:68:db:57:56:9f:36:78:2c:b3: 09:51:ef:22:62:57:3f:bb:27:a0:c9:cb:be:f2:74: d5:7c:93:49:dc:49:d8:fb:38:7e:97:5b:fa:80:fc: 1e:80:c8:72:71:9b:b2:ca:33:9e:92:f2:3d:1a:23: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:88:24:5C:6A:97:3E:5E:90:98:5D:E9:47:E0:A3:88:C2:A9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.232.0/22 38.255.112.0/22 149.86.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7f:20:d1:cd:c0:17:30:28:a1:04:5a:8e:a9:9e:e1:c9:76: 8e:b9:b3:74:8c:a0:2f:41:95:3c:76:3c:49:96:c1:9d:04:89: 3d:99:46:0a:28:02:fb:bc:ce:8e:d9:2d:2d:aa:57:66:0b:28: c3:74:7d:ba:c2:19:ec:7d:41:e6:90:3b:2e:b5:8b:18:e9:3d: cc:af:69:8a:e4:f8:0e:f7:2e:ba:31:07:a1:42:7a:40:53:bc: 0b:c8:e1:e4:e3:8b:43:c5:4b:6f:a0:e9:9c:11:af:6a:7a:24: d9:d3:cb:43:a8:2d:54:7c:fa:ed:67:88:62:a2:ab:77:e2:9f: f6:c2:8e:d9:e2:d1:0c:b2:7b:5f:b5:45:b1:07:2d:a3:19:6c: 4b:70:e1:56:83:ef:6d:18:93:ed:98:70:09:38:df:9f:c6:bc: 21:1a:59:8d:28:21:a9:2f:0b:df:4d:d9:b4:45:f8:97:b0:99: be:22:92:5b:eb:5d:83:49:c1:a1:f8:41:d5:2c:b7:84:df:04: 8b:bb:4b:be:83:79:0e:a2:be:a9:e8:89:9d:60:a4:ab:18:b0: 44:79:04:56:b1:66:f6:8d:29:44:1a:36:d0:75:64:e8:4a:39: 7e:a5:aa:96:ed:95:ff:fc:c2:63:7a:bc:a0:75:4f:d2:a0:77: 2f:a4:09:6c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4oCaJKffwdzf9wjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk MjgzNGRiZjktOWExNy00MjJhLWI5NTUtNWZjOTE1Njk2ODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiFbN1zzw5fKRMJWoxUptFj/TN9tPJT4Sb1s a86N+P3vtaC9buvvuD/K/FEFe/a8s8t7bpxgWW4m0+d7oTkQaopgOPiKt06MQDCA vhyyTtmkjOQbGKR7ewSIFV1Ahkm2VT409mXvHKhYKYQwUu2wvvmr4Td4kBJeQoFc H6ZE9o7Cjs9cUlMbNDr7MgXffqjtGtq5lpzZFCbCYCREeXYace15jFVtVtx/bcqO XENtSRYTFhH//ysJK9nRBamsOzX0Kx8IrBDRZ3xo21dWnzZ4LLMJUe8iYlc/uyeg ycu+8nTVfJNJ3EnY+zh+l1v6gPwegMhycZuyyjOekvI9GiM66QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFKUiCRcapc+XpCYXelH4KOIwqmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjhmNzRiN2QtNDE5OC0z MTdmLWE5MWMtMzE2YWFmNjFkYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJuHoAwQC Jv9wAwQDlVagMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABx/INHNwBcwKKEEWo6pnuHJdo65s3SMoC9BlTx2 PEmWwZ0EiT2ZRgooAvu8zo7ZLS2qV2YLKMN0fbrCGex9QeaQOy61ixjpPcyvaYrk +A73LroxB6FCekBTvAvI4eTji0PFS2+g6ZwRr2p6JNnTy0OoLVR8+u1niGKiq3fi n/bCjtni0Qyye1+1RbEHLaMZbEtw4VaD720Yk+2YcAk435/GvCEaWY0oIakvC99N 2bRF+Jewmb4iklvrXYNJwaH4QdUst4TfBIu7S76DeQ6ivqnoiZ1gpKsYsER5BFax ZvaNKUQaNtB1ZOhKOX6lqpbtlf/8wmN6vKB1T9Kgdy+kCWw= -----END CERTIFICATE-----Generated at Sat Jun 13 19:25:22 2026 by rpki-client