$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa File: bc1032ea-80f0-339d-be84-47508dc06301.roa (raw, json) Hash identifier: +WnzlRag44ov6N6ws5fUHJTodfS9bzwqaVGFaKj4XAg= Subject key identifier: 41:9E:82:20:30:4C:37:77:85:E1:9F:89:20:9A:FA:D8:A8:C5:4E:D8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E28099F2D9B5CED45CBDF7600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 272106 IP address blocks: 38.253.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:9f:2d:9b:5c:ed:45:cb:df:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=8ab6bd8e-8a31-4857-a9cc-1f20ea7e59e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:db:4b:6d:95:6a:ea:50:83:74:c7:5a:17: ae:d5:b7:7c:65:62:d8:1f:26:42:04:b7:7f:54:69: 00:8c:cd:a9:e0:64:a5:b4:d7:9d:dd:ca:3b:b6:59: 2b:48:ac:65:7c:f7:8f:73:a4:bc:36:4e:92:72:4e: 63:56:55:de:88:ac:7f:f7:dc:17:66:df:aa:f0:db: a3:de:58:cd:2c:66:d4:0f:31:32:3c:b2:e8:a9:03: 8c:13:9c:9c:fa:5c:a3:05:db:6e:b1:54:14:09:99: 67:28:79:aa:b8:f3:3e:ab:30:54:bd:92:2c:40:2a: 95:66:dc:4c:af:04:db:44:56:fd:f9:8d:18:41:73: 3d:9e:c8:a5:f2:b1:60:7f:ba:9c:ac:9b:b8:20:0b: fb:74:ab:2a:b2:74:1d:6f:aa:bd:99:1f:fc:62:9e: 9f:b5:aa:c3:ce:3d:d3:a5:3d:80:d7:8d:1e:36:0d: 90:80:06:79:59:b1:64:ab:1b:6b:f2:80:5c:0a:f1: ac:2d:1b:5f:6a:2b:d3:f5:ff:d2:2e:11:de:d7:93: 00:37:34:f8:dd:c7:1f:97:a3:19:dc:65:fe:2e:5d: 7b:eb:27:83:5e:90:fa:dc:e2:83:43:0f:de:c6:a2: d5:42:53:45:0e:c9:b4:8d:b1:71:47:7e:04:a7:04: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:82:20:30:4C:37:77:85:E1:9F:89:20:9A:FA:D8:A8:C5:4E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:3a:01:96:aa:f6:c8:aa:25:bb:8c:f5:4c:97:a5:e2:7d:76: b0:88:16:33:1b:ca:09:b7:a0:9f:d8:29:2a:54:d5:e1:a8:e7: cb:82:af:67:cc:82:4f:9b:bd:8e:94:54:da:05:a3:a6:41:d2: 49:d3:1e:4a:d6:da:c2:fb:8b:eb:29:7f:8a:74:f4:c4:33:1c: 42:36:ee:ae:73:84:1e:2e:b6:44:fe:61:68:0c:e9:06:bb:8e: f1:c9:53:45:80:0f:0e:e7:91:68:b4:d8:0c:fd:03:7f:e0:01: 83:42:8d:8a:db:f5:06:a4:de:7b:5b:b4:4a:03:86:17:de:44: c4:32:bd:43:ba:0d:7d:df:f6:c5:0d:80:3a:9f:c8:4f:3c:d3: 78:f5:4f:e3:c6:69:02:76:ba:6f:0c:0e:0c:11:12:f1:fb:c7: 3b:27:dc:07:60:26:7b:c3:8a:7e:2d:c4:c3:9e:24:22:c2:a7: 26:c6:a4:4e:8e:34:89:8b:0a:4e:4a:09:a2:55:cf:2b:fd:fc: 2c:10:ec:bb:73:ad:ba:40:57:03:2c:df:10:8b:5f:3e:08:3e: 39:a9:14:a1:9e:38:76:bc:b3:bc:b0:36:59:4e:8f:5c:f1:f7: b5:d1:ac:e9:6c:8f:58:4c:5c:c9:92:bc:8a:b3:91:a4:61:e8: 42:4d:d6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCZ8tm1ztRcvfdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk OGFiNmJkOGUtOGEzMS00ODU3LWE5Y2MtMWYyMGVhN2U1OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktjbS22VaupQg3THWheu1bd8ZWLYHyZCBLd/ VGkAjM2p4GSltNed3co7tlkrSKxlfPePc6S8Nk6Sck5jVlXeiKx/99wXZt+q8Nuj 3ljNLGbUDzEyPLLoqQOME5yc+lyjBdtusVQUCZlnKHmquPM+qzBUvZIsQCqVZtxM rwTbRFb9+Y0YQXM9nsil8rFgf7qcrJu4IAv7dKsqsnQdb6q9mR/8Yp6ftarDzj3T pT2A140eNg2QgAZ5WbFkqxtr8oBcCvGsLRtfaivT9f/SLhHe15MANzT43ccfl6MZ 3GX+Ll176yeDXpD63OKDQw/exqLVQlNFDsm0jbFxR34EpwStZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGegiAwTDd3heGfiSCa+tioxU7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmMxMDMyZWEtODBmMC0z MzlkLWJlODQtNDc1MDhkYzA2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMA6AZaq9siqJbuM9UyXpeJ9drCIFjMbygm3oJ/YKSpU1eGo58uCr2fM gk+bvY6UVNoFo6ZB0knTHkrW2sL7i+spf4p09MQzHEI27q5zhB4utkT+YWgM6Qa7 jvHJU0WADw7nkWi02Az9A3/gAYNCjYrb9Qak3ntbtEoDhhfeRMQyvUO6DX3f9sUN gDqfyE8803j1T+PGaQJ2um8MDgwREvH7xzsn3AdgJnvDin4txMOeJCLCpybGpE6O NImLCk5KCaJVzyv9/CwQ7LtzrbpAVwMs3xCLXz4IPjmpFKGeOHa8s7ywNllOj1zx 97XRrOlsj1hMXMmSvIqzkaRh6EJN1k4= -----END CERTIFICATE-----Generated at Sat Jun 13 18:58:24 2026 by rpki-client