$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bf8bf91-df85-3044-af28-997d6530ba59.roa File: 1bf8bf91-df85-3044-af28-997d6530ba59.roa (raw, json) Hash identifier: jfV5W+/Q/2G5ur70TvjW+u98tmNNo+Nu29Hm8dkpbv8= Subject key identifier: CD:CC:B5:BC:D8:80:AB:21:AE:BB:89:19:FE:08:45:5D:C6:CD:CB:FE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED1671A0F1BFCB7D542C6CEC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bf8bf91-df85-3044-af28-997d6530ba59.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 11314 IP address blocks: 38.21.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:1a:0f:1b:fc:b7:d5:42:c6:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=4a8913ff-f6b7-435a-91ae-8b7fdd868d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:03:38:86:42:c8:a4:67:61:96:37:c4:4d: 88:81:08:21:ad:9d:7c:4d:20:64:68:88:07:9c:fc: a2:36:64:3e:b8:3c:a6:42:f1:aa:95:2c:2c:16:d8: 75:7f:ad:b1:61:6f:1a:5e:1d:1a:91:a0:fe:3f:7e: 68:88:bd:89:f0:f6:31:8f:b8:b5:34:75:b5:de:24: 50:66:c7:6d:ec:4f:84:35:06:9a:f1:dd:05:9f:1e: 7c:a0:77:ae:c0:c0:70:2a:17:a7:66:6f:5f:e4:83: d0:ba:93:f0:ce:2b:4a:99:7b:56:c4:86:37:d7:88: 17:c2:09:15:6f:c7:ff:2c:e0:06:97:39:3e:88:ac: a3:68:99:5b:93:34:6a:f0:e4:10:d7:6e:29:58:b8: 6a:a5:ec:a7:86:cd:cc:a3:b9:54:7d:55:b0:48:c5: 05:ce:a6:5a:9b:c5:7c:b5:f2:5f:da:3d:e3:86:50: b2:6b:ab:5f:56:5c:a6:6d:90:16:a8:0c:ab:f5:a7: a2:db:eb:a8:21:cb:78:59:3b:71:e6:0d:09:1d:d2: 42:ee:b5:62:d2:0e:d5:36:02:87:da:e3:d6:29:65: 89:75:f9:eb:86:fa:1b:f2:c9:1f:16:c4:2f:ed:00: 21:70:d9:3d:1b:e4:6d:69:49:ae:76:fb:37:fe:b5: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CC:B5:BC:D8:80:AB:21:AE:BB:89:19:FE:08:45:5D:C6:CD:CB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bf8bf91-df85-3044-af28-997d6530ba59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:d7:68:2f:e9:f9:0f:95:a2:d9:51:d9:a9:dc:89:f9:25:27: e0:2d:89:f5:e1:fd:fa:71:b4:74:e6:1c:dd:00:a5:3c:37:8b: 22:fb:25:d6:a1:d2:92:cc:15:ac:cd:7f:a7:3f:d9:b8:9b:6f: 11:a3:c9:35:43:c7:24:4a:51:21:16:98:8b:13:f3:c4:0c:f9: 84:ca:c5:bb:18:8e:c7:93:53:e9:70:9b:19:8b:2f:8c:a8:38: f5:3e:28:cf:92:c1:c2:96:1e:4f:70:1d:35:f5:5d:52:8e:7a: 72:61:84:4f:58:c9:6c:b0:d1:01:8d:b7:52:a0:5e:86:83:9e: 7e:e8:2b:85:3d:9b:ca:22:7a:91:27:e3:90:e5:26:ab:cf:b5: be:61:f9:fb:54:aa:76:1d:8c:92:b1:34:23:99:22:ec:36:48: 92:f6:23:75:8d:02:89:5a:ee:2c:a0:e0:c5:7e:ca:16:06:e0: 14:12:8c:20:c6:80:6e:74:de:3d:ad:32:c6:f0:0c:25:fd:81: da:d7:26:df:bd:d3:f6:e3:c6:af:57:b2:30:b2:2f:e3:e8:75: 45:de:6b:03:95:49:ab:6f:2e:29:ce:da:38:c6:61:b4:fc:e2: e5:1b:11:80:8e:16:c1:e0:67:b2:6e:55:fd:d5:78:9b:d9:fa: af:82:99:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZxoPG/y31ULGzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk NGE4OTEzZmYtZjZiNy00MzVhLTkxYWUtOGI3ZmRkODY4ZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3UDOIZCyKRnYZY3xE2IgQghrZ18TSBkaIgH nPyiNmQ+uDymQvGqlSwsFth1f62xYW8aXh0akaD+P35oiL2J8PYxj7i1NHW13iRQ Zsdt7E+ENQaa8d0Fnx58oHeuwMBwKhenZm9f5IPQupPwzitKmXtWxIY314gXwgkV b8f/LOAGlzk+iKyjaJlbkzRq8OQQ124pWLhqpeynhs3Mo7lUfVWwSMUFzqZam8V8 tfJf2j3jhlCya6tfVlymbZAWqAyr9aei2+uoIct4WTtx5g0JHdJC7rVi0g7VNgKH 2uPWKWWJdfnrhvob8skfFsQv7QAhcNk9G+RtaUmudvs3/rWWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3MtbzYgKshrruJGf4IRV3Gzcv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWJmOGJmOTEtZGY4NS0z MDQ0LWFmMjgtOTk3ZDY1MzBiYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7XaC/p+Q+VotlR2ancifklJ+AtifXh/fpxtHTmHN0ApTw3iyL7Jdah 0pLMFazNf6c/2bibbxGjyTVDxyRKUSEWmIsT88QM+YTKxbsYjseTU+lwmxmLL4yo OPU+KM+SwcKWHk9wHTX1XVKOenJhhE9YyWyw0QGNt1KgXoaDnn7oK4U9m8oiepEn 45DlJqvPtb5h+ftUqnYdjJKxNCOZIuw2SJL2I3WNAola7iyg4MV+yhYG4BQSjCDG gG503j2tMsbwDCX9gdrXJt+90/bjxq9XsjCyL+PodUXeawOVSatvLinO2jjGYbT8 4uUbEYCOFsHgZ7JuVf3VeJvZ+q+CmaU= -----END CERTIFICATE-----Generated at Sat Sep 5 07:56:57 2026 by rpki-client