$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa File: db717c4d-e5e9-3340-ad9a-893770267318.roa (raw, json) Hash identifier: 5zCf9Ga4p7DkhQFWTNkB8bHskuFBCYHVFA/3nb0lt28= Subject key identifier: 8C:11:81:33:82:01:80:72:7F:7F:D0:9B:EA:D8:CB:BB:DE:A8:93:02 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E147ED2F5E24A750FA78CD440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 56376 IP address blocks: 38.88.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d2:f5:e2:4a:75:0f:a7:8c:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=a9a1bf39-3cf3-4fb3-b6d6-b1a0d3008804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:12:81:6a:9b:4c:42:22:4d:a6:f7:6c:3b:b6: 4a:5f:da:43:2d:36:4e:ea:95:a5:aa:71:e1:c4:03: 84:d3:f6:ae:25:da:f3:c5:f6:96:c9:b8:75:5e:76: 58:4c:20:4f:2a:3c:f2:71:17:ae:51:62:f6:c7:5f: 26:de:fa:45:5d:a7:48:a7:2c:e6:19:86:c7:8a:13: 87:a1:c1:3a:0f:bd:7f:91:3a:b4:e6:12:e5:b9:cf: e2:17:a9:31:1d:0c:c5:3c:ab:56:8c:c5:31:a8:42: ca:09:58:96:72:b8:72:f6:3e:69:6a:ca:d9:d0:e0: 84:09:59:e1:80:92:60:aa:4d:81:f7:f4:a0:e7:ef: 46:36:c8:5d:ef:43:19:7c:21:02:f0:6c:0f:c9:80: 6c:b7:14:ac:c8:48:d4:37:7a:11:4b:c4:69:bd:43: bc:32:13:45:c7:30:c2:d8:9a:c5:87:e0:ac:bc:19: f9:1f:d7:93:20:de:51:21:4d:b6:32:c3:df:3c:a6: a2:d3:5f:af:63:5c:af:af:35:18:9e:2f:69:bf:fe: 57:80:62:c5:b3:03:6d:1b:f5:79:e3:56:10:36:cb: ee:03:4c:bd:83:db:11:0e:c9:71:ff:4a:a2:39:77: 78:a6:06:19:e5:b2:ae:0b:2c:d2:4e:12:57:23:87: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:11:81:33:82:01:80:72:7F:7F:D0:9B:EA:D8:CB:BB:DE:A8:93:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.88.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4d:57:51:b1:0f:d3:6c:da:ec:0e:2f:2e:03:27:33:b9:c8: d4:ed:94:67:23:9a:89:a7:89:8d:24:be:fd:3a:33:94:5c:02: fd:c6:d4:95:63:52:21:8f:dd:ec:e2:b4:f8:f1:8e:08:dd:da: 92:0d:8e:78:47:cc:5b:96:28:2c:45:85:fe:43:9a:bc:6f:fa: 69:18:df:b1:58:f2:2b:e4:02:01:fe:6f:0b:fa:d0:c2:0f:77: 4a:23:9b:90:59:dc:45:d1:7a:5b:e0:fd:3f:b9:54:da:7a:0e: 95:1e:f7:73:bd:33:63:12:65:f6:95:a2:e1:a8:41:89:7a:32: 5f:43:84:9f:71:2c:16:0b:3c:c7:fe:c5:ed:4d:45:95:f0:8f: 36:e4:91:4a:52:e2:08:b7:3d:80:92:80:b6:0f:10:43:0d:20: 2f:3b:de:54:8e:8c:47:d4:72:08:6f:c4:f0:48:65:04:0c:36: 87:63:36:89:79:7d:03:c6:2d:0d:4e:30:ae:32:af:59:0a:03: 65:1a:f7:44:e8:07:e9:f0:85:e1:d9:d4:96:f7:9f:0b:bd:85: ce:6b:14:0d:64:c3:1c:2d:10:df:d2:f6:fe:6d:13:fa:41:55: 7e:56:ba:8d:9b:73:38:c0:47:18:49:29:da:24:69:20:ea:12: 98:af:f4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftL14kp1D6eM1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk YTlhMWJmMzktM2NmMy00ZmIzLWI2ZDYtYjFhMGQzMDA4ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixKBaptMQiJNpvdsO7ZKX9pDLTZO6pWlqnHh xAOE0/auJdrzxfaWybh1XnZYTCBPKjzycReuUWL2x18m3vpFXadIpyzmGYbHihOH ocE6D71/kTq05hLluc/iF6kxHQzFPKtWjMUxqELKCViWcrhy9j5pasrZ0OCECVnh gJJgqk2B9/Sg5+9GNshd70MZfCEC8GwPyYBstxSsyEjUN3oRS8RpvUO8MhNFxzDC 2JrFh+CsvBn5H9eTIN5RIU22MsPfPKai01+vY1yvrzUYni9pv/5XgGLFswNtG/V5 41YQNsvuA0y9g9sRDslx/0qiOXd4pgYZ5bKuCyzSThJXI4f++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwRgTOCAYByf3/Qm+rYy7veqJMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGI3MTdjNGQtZTVlOS0z MzQwLWFkOWEtODkzNzcwMjY3MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJlhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtNV1GxD9Ns2uwOLy4DJzO5yNTtlGcjmomniY0kvv06M5RcAv3G1JVj UiGP3ezitPjxjgjd2pINjnhHzFuWKCxFhf5Dmrxv+mkY37FY8ivkAgH+bwv60MIP d0ojm5BZ3EXRelvg/T+5VNp6DpUe93O9M2MSZfaVouGoQYl6Ml9DhJ9xLBYLPMf+ xe1NRZXwjzbkkUpS4gi3PYCSgLYPEEMNIC873lSOjEfUcghvxPBIZQQMNodjNol5 fQPGLQ1OMK4yr1kKA2Ua90ToB+nwheHZ1Jb3nwu9hc5rFA1kwxwtEN/S9v5tE/pB VX5Wuo2bczjARxhJKdokaSDqEpiv9ME= -----END CERTIFICATE-----Generated at Sat Jun 13 14:57:26 2026 by rpki-client