$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa File: 11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa (raw, json) Hash identifier: azUvFfKu0UTj+MftS/0IJ6OzEB7t8wkg86LSfGlI4qU= Subject key identifier: E1:C2:02:60:F0:86:7E:36:3B:35:D0:88:4E:8D:51:F3:D7:67:12:65 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA7A0E847B1B9050DDB108280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398721 IP address blocks: 38.3.64.0/20 maxlen: 20 38.3.96.0/19 maxlen: 20 38.9.64.0/19 maxlen: 19 38.17.47.0/24 maxlen: 24 38.18.128.0/21 maxlen: 21 38.21.48.0/21 maxlen: 21 38.23.160.0/19 maxlen: 19 38.23.224.0/19 maxlen: 19 38.29.128.0/20 maxlen: 20 38.30.128.0/19 maxlen: 19 38.35.192.0/19 maxlen: 19 38.39.136.0/21 maxlen: 21 38.40.96.0/20 maxlen: 20 38.40.112.0/20 maxlen: 20 38.49.160.0/19 maxlen: 19 38.55.64.0/21 maxlen: 21 38.59.160.0/20 maxlen: 20 38.61.48.0/20 maxlen: 20 38.61.64.0/19 maxlen: 19 38.74.32.0/20 maxlen: 20 38.80.94.0/23 maxlen: 23 38.80.96.0/20 maxlen: 20 38.85.160.0/19 maxlen: 19 38.86.0.0/19 maxlen: 19 38.108.78.0/24 maxlen: 24 38.108.82.0/24 maxlen: 24 38.131.64.0/19 maxlen: 19 38.133.32.0/20 maxlen: 20 38.141.128.0/19 maxlen: 19 38.141.170.0/23 maxlen: 23 38.141.172.0/23 maxlen: 23 38.141.174.0/24 maxlen: 24 38.141.192.0/19 maxlen: 19 38.143.192.0/19 maxlen: 19 38.145.85.0/24 maxlen: 24 38.147.240.0/20 maxlen: 20 38.175.128.0/19 maxlen: 19 38.240.192.0/19 maxlen: 19 149.115.32.0/20 maxlen: 20 149.115.64.0/19 maxlen: 20 149.115.192.0/20 maxlen: 20 154.22.96.0/19 maxlen: 19 154.27.32.0/19 maxlen: 19 207.60.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:e8:47:b1:b9:05:0d:db:10:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=88a49b6f-d3b9-4ac9-8bfe-63cc1977adcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8f:17:7f:a0:1b:a2:1d:6d:87:d5:fe:f1:83: c4:e1:94:7b:15:30:6c:0a:36:e2:9d:65:48:67:4f: bf:70:3f:89:f6:c3:ca:7c:f2:2a:b9:a1:ad:a1:78: f3:0a:8f:5d:37:13:be:b7:2c:b9:9a:26:17:af:dc: 66:bc:db:c5:39:24:d2:26:24:2e:06:0e:b3:f4:2a: 7e:bb:fa:82:ed:2b:4b:68:08:ad:7f:e6:ff:a5:f4: a0:12:93:c9:a8:38:3f:55:4d:a9:e9:4d:78:4e:c0: b1:72:18:0e:5b:2f:1b:6c:71:a0:88:df:1e:b5:5a: 02:e3:58:65:61:59:31:db:fd:63:8e:5b:bf:a0:b6: 8d:6a:c7:54:32:97:4e:27:94:91:52:b0:e7:ae:2d: 0f:57:30:ab:9f:04:14:58:cf:d0:b1:ab:25:f7:83: b3:c3:33:3c:f2:d9:f1:a9:0e:0e:7b:2f:60:75:41: 39:37:72:54:16:b7:b7:dc:5a:4f:63:70:9e:cd:f8: 40:12:6f:17:bb:ef:6a:8d:52:05:12:48:9f:f4:94: 46:e6:6d:06:6e:e7:0b:c6:75:e6:b1:9a:e7:2c:f8: b9:be:7a:d2:86:28:9a:25:c1:5a:53:a2:56:e6:65: 78:30:fe:f1:85:61:41:45:4b:f2:56:7b:80:d8:3f: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:02:60:F0:86:7E:36:3B:35:D0:88:4E:8D:51:F3:D7:67:12:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.64.0/20 38.3.96.0/19 38.9.64.0/19 38.17.47.0/24 38.18.128.0/21 38.21.48.0/21 38.23.160.0/19 38.23.224.0/19 38.29.128.0/20 38.30.128.0/19 38.35.192.0/19 38.39.136.0/21 38.40.96.0/19 38.49.160.0/19 38.55.64.0/21 38.59.160.0/20 38.61.48.0-38.61.95.255 38.74.32.0/20 38.80.94.0-38.80.111.255 38.85.160.0/19 38.86.0.0/19 38.108.78.0/24 38.108.82.0/24 38.131.64.0/19 38.133.32.0/20 38.141.128.0/19 38.141.170.0-38.141.174.255 38.141.192.0/19 38.143.192.0/19 38.145.85.0/24 38.147.240.0/20 38.175.128.0/19 38.240.192.0/19 149.115.32.0/20 149.115.64.0/19 149.115.192.0/20 154.22.96.0/19 154.27.32.0/19 207.60.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f3:55:43:c2:98:25:72:5c:27:c0:06:05:f4:9b:ef:bc:44: b3:f5:08:44:f4:26:7f:fa:5a:bc:7b:3e:bc:fd:cc:a5:97:7e: 28:ae:3f:ba:19:04:94:73:23:bf:5a:ee:45:67:61:2e:66:27: c7:8f:9e:fe:d3:8b:69:1b:3b:f7:34:ac:39:f6:59:c2:02:56: d5:e2:7c:1e:e9:4d:4b:90:a0:b1:56:7d:4b:26:b4:36:5c:ef: cd:31:b2:13:37:87:59:75:e9:4b:11:f3:84:17:52:9d:ee:52: 6c:fc:6f:9b:c6:ac:e6:f7:e4:8a:c8:94:fe:93:76:dd:55:3c: d0:80:cc:c3:ec:d9:31:38:0b:e6:d5:66:64:b2:99:fe:e1:39: a3:d2:02:2c:d0:cf:c4:89:7d:e7:88:25:6d:47:0c:1a:65:56: 83:39:93:73:87:5a:ae:9c:62:2d:09:33:4c:16:8a:b3:3b:99: 8b:e0:41:e0:3b:e2:aa:cf:7d:8e:3d:70:89:6a:af:c5:72:f3: 05:e9:3c:93:f7:07:5e:03:b7:c5:4c:4c:84:65:ea:0f:d6:8c: 68:c7:2f:38:a0:6c:64:24:26:33:c8:0b:8c:6f:53:35:ea:36: 41:36:91:e8:5f:10:3e:25:10:9a:5e:99:82:11:21:03:0a:46: e7:c6:c8:d3 -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWE6noOhHsbkFDdsQgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODhhNDliNmYtZDNiOS00YWM5LThiZmUtNjNjYzE5NzdhZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho8Xf6Aboh1th9X+8YPE4ZR7FTBsCjbinWVI Z0+/cD+J9sPKfPIquaGtoXjzCo9dNxO+tyy5miYXr9xmvNvFOSTSJiQuBg6z9Cp+ u/qC7StLaAitf+b/pfSgEpPJqDg/VU2p6U14TsCxchgOWy8bbHGgiN8etVoC41hl YVkx2/1jjlu/oLaNasdUMpdOJ5SRUrDnri0PVzCrnwQUWM/Qsasl94OzwzM88tnx qQ4Oey9gdUE5N3JUFre33FpPY3CezfhAEm8Xu+9qjVIFEkif9JRG5m0GbucLxnXm sZrnLPi5vnrShiiaJcFaU6JW5mV4MP7xhWFBRUvyVnuA2D/8xwIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFOHCAmDwhn42OzXQiE6NUfPXZxJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTFmZjZiNGUtMmJiNi0z YTU4LTkzZDQtYmRiOTY1YzM0YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEBCYDQAMEBSYDYAMEBSYJQAMEACYRLwMEAyYSgAMEAyYVMAMEBSYXoAMEBSYX 4AMEBCYdgAMEBSYegAMEBSYjwAMEAyYniAMEBSYoYAMEBSYxoAMEAyY3QAMEBCY7 oDAMAwQEJj0wAwQFJj1AAwQEJkogMAwDBAEmUF4DBAQmUGADBAUmVaADBAUmVgAD BAAmbE4DBAAmbFIDBAUmg0ADBAQmhSADBAUmjYAwDAMEASaNqgMEACaNrgMEBSaN wAMEBSaPwAMEACaRVQMEBCaT8AMEBSavgAMEBSbwwAMEBJVzIAMEBZVzQAMEBJVz wAMEBZoWYAMEBZobIAMEBc88QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg81VDwpglclwnwAYF9JvvvESz 9QhE9CZ/+lq8ez68/cyll34orj+6GQSUcyO/Wu5FZ2EuZifHj57+04tpGzv3NKw5 9lnCAlbV4nwe6U1LkKCxVn1LJrQ2XO/NMbITN4dZdelLEfOEF1Kd7lJs/G+bxqzm 9+SKyJT+k3bdVTzQgMzD7NkxOAvm1WZkspn+4Tmj0gIs0M/EiX3niCVtRwwaZVaD OZNzh1qunGItCTNMFoqzO5mL4EHgO+Kqz32OPXCJaq/FcvMF6TyT9wdeA7fFTEyE ZeoP1oxoxy84oGxkJCYzyAuMb1M16jZBNpHoXxA+JRCaXpmCESEDCkbnxsjT -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:14 2026 by rpki-client