$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13595e1c-b211-3b06-9f53-662193d0f24f.roa File: 13595e1c-b211-3b06-9f53-662193d0f24f.roa (raw, json) Hash identifier: EZcdct5HO9zRnnzlRD8juZ/P///hV4pFFri19aRZzX0= Subject key identifier: A0:3D:96:13:86:B5:9A:69:BC:B8:2F:50:D4:17:A7:A2:2B:33:71:B9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA7914BCF1E86556547054100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13595e1c-b211-3b06-9f53-662193d0f24f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 52875 IP address blocks: 38.20.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:4b:cf:1e:86:55:65:47:05:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9fe4651f-dd53-477d-b3ac-0eb42b4e2b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:cf:61:4a:ae:5b:27:28:44:f5:07:22:b9: dd:a1:04:e7:c0:03:36:40:a1:3e:c1:18:cd:40:a6: 5f:e0:5a:f8:26:c5:e7:f3:75:97:f5:7c:88:32:64: 92:f2:71:64:56:98:97:99:05:ab:b1:bc:b3:a2:4a: d4:31:51:05:1c:69:37:6d:e4:e4:c4:49:ed:e5:7a: 33:98:ba:3e:3f:12:95:02:de:8b:81:0e:e2:08:9c: 62:ef:6f:1e:9b:47:e2:34:d9:ac:81:5c:c1:ac:23: 40:d7:fe:92:2a:3d:b5:c6:a5:94:4a:cd:10:c9:f5: cf:ea:48:71:ce:e0:da:df:1c:93:52:9b:62:5e:b5: 3c:8b:a5:d1:fe:8c:4d:b3:b5:a7:af:90:46:42:be: f4:bd:4e:89:15:2f:ca:cd:45:30:c0:23:bd:b2:d2: 27:03:88:d5:33:a4:b5:82:d6:b6:79:3c:d5:e4:49: 7b:4b:e5:a8:58:38:d7:6a:6e:2d:32:a4:74:c2:65: 67:9a:c8:46:6e:dd:06:a9:7a:4d:65:12:db:1b:b2: 01:bc:5c:9f:78:fd:e7:3d:d6:61:39:49:3c:d9:bd: bd:7d:b3:bb:8b:2a:b1:f7:69:40:cf:21:16:d1:bd: d3:c2:64:56:b8:d1:b6:af:a8:38:fc:0e:c9:10:ce: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3D:96:13:86:B5:9A:69:BC:B8:2F:50:D4:17:A7:A2:2B:33:71:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13595e1c-b211-3b06-9f53-662193d0f24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b8:9c:a0:7e:3f:53:d0:9b:12:b8:90:a9:5a:7f:95:2a:9e: 66:6b:53:07:75:c8:d8:39:f2:17:22:d4:79:8f:47:bd:97:a9: 8d:3c:5a:e8:6b:40:c9:95:ad:57:f0:de:a5:07:fd:f1:94:93: 98:3c:a4:17:da:5d:14:70:a5:ae:9c:dc:4e:67:77:4d:6f:c7: 38:3b:bc:45:70:b2:22:8e:4f:be:0d:12:c4:eb:8e:a1:13:c8: 2d:b1:3c:49:15:ab:1e:72:f3:17:a7:62:cb:63:ce:6b:16:00: d9:6a:fa:df:90:eb:cd:ba:34:62:78:9e:c2:56:63:b5:c6:cb: 4e:03:7c:37:ca:66:69:cb:c7:ce:6a:af:69:85:36:58:62:02: 55:05:85:30:f3:69:a2:23:20:71:ca:26:e9:6d:88:19:43:c1: b8:70:e7:a6:2d:b5:28:53:c4:6b:1b:21:61:01:a3:a3:85:5b: be:5e:7c:c0:00:c7:d0:3c:22:e4:53:2a:8a:39:bf:95:9a:f5: 8d:01:70:f8:69:37:40:d8:1a:42:38:1d:17:75:23:b1:75:a9: 46:99:3b:c8:51:5a:d7:14:28:f7:4c:a0:9e:33:5e:7f:5d:69: 5b:22:5a:4e:0d:39:91:8d:15:1f:e8:4a:48:9a:be:82:dc:e9: a1:96:f4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkUvPHoZVZUcFQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWZlNDY1MWYtZGQ1My00NzdkLWIzYWMtMGViNDJiNGUyYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqonPYUquWycoRPUHIrndoQTnwAM2QKE+wRjN QKZf4Fr4JsXn83WX9XyIMmSS8nFkVpiXmQWrsbyzokrUMVEFHGk3beTkxEnt5Xoz mLo+PxKVAt6LgQ7iCJxi728em0fiNNmsgVzBrCNA1/6SKj21xqWUSs0QyfXP6khx zuDa3xyTUptiXrU8i6XR/oxNs7Wnr5BGQr70vU6JFS/KzUUwwCO9stInA4jVM6S1 gta2eTzV5El7S+WoWDjXam4tMqR0wmVnmshGbt0GqXpNZRLbG7IBvFyfeP3nPdZh OUk82b29fbO7iyqx92lAzyEW0b3TwmRWuNG2r6g4/A7JEM5k8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA9lhOGtZppvLgvUNQXp6IrM3G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTM1OTVlMWMtYjIxMS0z YjA2LTlmNTMtNjYyMTkzZDBmMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe4nKB+P1PQmxK4kKlaf5UqnmZrUwd1yNg58hci1HmPR72XqY08Wuhr QMmVrVfw3qUH/fGUk5g8pBfaXRRwpa6c3E5nd01vxzg7vEVwsiKOT74NEsTrjqET yC2xPEkVqx5y8xenYstjzmsWANlq+t+Q6826NGJ4nsJWY7XGy04DfDfKZmnLx85q r2mFNlhiAlUFhTDzaaIjIHHKJultiBlDwbhw56YttShTxGsbIWEBo6OFW75efMAA x9A8IuRTKoo5v5Wa9Y0BcPhpN0DYGkI4HRd1I7F1qUaZO8hRWtcUKPdMoJ4zXn9d aVsiWk4NOZGNFR/oSkiavoLc6aGW9CY= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:56 2026 by rpki-client