$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21b87f03-7759-3749-9f9c-cd9d2456e639.roa File: 21b87f03-7759-3749-9f9c-cd9d2456e639.roa (raw, json) Hash identifier: gaQ05ALW8YQHIqEzxNX9XChVHFJkdC42VGCndDcc+CU= Subject key identifier: 2F:5B:CE:BE:26:9A:B4:E8:BA:AE:86:C7:15:43:C9:7F:F7:58:67:F7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F053ABF9C9FA17EB923BB8A30 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21b87f03-7759-3749-9f9c-cd9d2456e639.roa Signing time: Mon 31 Aug 2026 14:32:52 +0000 ROA not before: Mon 31 Aug 2026 14:32:52 +0000 ROA not after: Sun 29 Nov 2026 15:32:52 +0000 asID: 274249 IP address blocks: 38.210.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:3a:bf:9c:9f:a1:7e:b9:23:bb:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 31 14:32:52 2026 GMT Not After : Nov 29 15:32:52 2026 GMT Subject: CN=5e0f646d-4aca-4d8c-b9c8-b79d7df96cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:45:36:c7:8d:5b:48:7a:fe:4e:a7:c5:25: a7:d8:0d:c1:29:2e:59:20:9a:de:97:0a:25:40:f0: 52:4a:ad:2f:cb:ad:db:a5:ea:b4:f7:a9:13:1a:87: 3d:47:bd:a0:23:c5:05:8f:08:30:b3:bb:3b:65:7c: b0:d2:49:fc:5f:c5:95:63:ac:df:91:d4:bf:40:7e: 0f:9f:79:35:8d:05:59:c3:af:49:9b:eb:6d:4d:9e: 27:f2:e2:8f:e7:b0:ed:1a:eb:01:95:5a:23:7d:c4: dd:c3:f6:aa:7c:8b:d2:24:f2:0d:e1:2a:26:da:c0: 6f:e6:14:50:25:5b:ef:e3:da:ef:0f:03:02:ea:7c: 34:22:cc:b5:34:90:f4:d5:50:03:cb:73:aa:02:c4: 3e:0f:2d:d1:e2:c2:a6:76:05:ee:49:cb:24:6c:80: c0:9d:ae:3e:6a:d1:74:67:32:b8:3e:59:99:fd:7f: 4d:26:e3:fa:23:eb:c7:4f:8a:a5:c5:b9:26:28:b0: e3:a4:fb:4d:49:27:fa:a1:58:6a:4d:2d:e3:e0:13: 54:62:92:86:79:35:1c:0d:18:ae:20:8d:2f:e9:63: e7:89:c1:a0:1f:96:cb:11:16:be:17:1a:79:70:b1: b2:1c:68:19:4b:93:12:fd:c6:a4:52:82:4c:b3:3f: 7c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5B:CE:BE:26:9A:B4:E8:BA:AE:86:C7:15:43:C9:7F:F7:58:67:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21b87f03-7759-3749-9f9c-cd9d2456e639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8f:a2:22:a6:75:8f:c8:6e:62:93:02:8e:9f:e8:b0:d3:73: a4:1f:71:b9:b3:9f:98:f1:82:b5:b6:75:72:0a:21:70:c6:8e: 2e:e9:13:f7:5b:b4:aa:55:08:91:3f:37:10:f5:40:5f:b2:d4: 67:0d:7b:fe:39:a1:3a:78:bb:5f:07:e2:9d:25:ba:f4:5b:9b: 24:15:c4:22:32:58:64:17:6f:87:20:6b:fd:93:da:4b:8f:c2: 67:a2:8e:49:1c:96:9c:2b:03:a3:e9:11:6f:93:0b:49:52:1d: 92:49:1c:cf:a7:f5:62:18:99:74:2a:b1:41:5b:05:6f:05:5f: 23:f3:d0:c9:61:c0:e0:55:0f:cc:46:7d:0e:ef:59:47:ec:28: c2:7a:b4:46:c8:6e:13:85:29:5a:10:01:96:c3:26:49:cc:d8: 58:92:1d:44:f5:61:0b:ee:fb:de:41:10:a1:0e:3b:f9:8c:3a: d4:f1:cf:ff:19:3f:27:2e:3d:f4:11:85:ad:54:73:88:4f:d2: 2b:19:49:32:6d:45:e7:f5:95:05:60:97:9d:08:61:5d:80:e3: fe:aa:ba:8b:b8:da:4f:b1:8e:8b:15:9b:7a:73:0b:87:45:c8: 74:5e:69:93:02:b9:67:6a:de:73:2f:30:0c:49:fc:34:ef:92: 83:55:c6:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FOr+cn6F+uSO7ijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMTE0MzI1MloXDTI2MTEyOTE1MzI1MlowLzEtMCsGA1UEAxMk NWUwZjY0NmQtNGFjYS00ZDhjLWI5YzgtYjc5ZDdkZjk2Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ5FNseNW0h6/k6nxSWn2A3BKS5ZIJrelwol QPBSSq0vy63bpeq096kTGoc9R72gI8UFjwgws7s7ZXyw0kn8X8WVY6zfkdS/QH4P n3k1jQVZw69Jm+ttTZ4n8uKP57DtGusBlVojfcTdw/aqfIvSJPIN4Som2sBv5hRQ JVvv49rvDwMC6nw0Isy1NJD01VADy3OqAsQ+Dy3R4sKmdgXuScskbIDAna4+atF0 ZzK4PlmZ/X9NJuP6I+vHT4qlxbkmKLDjpPtNSSf6oVhqTS3j4BNUYpKGeTUcDRiu II0v6WPnicGgH5bLERa+Fxp5cLGyHGgZS5MS/cakUoJMsz98XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9bzr4mmrTouq6GxxVDyX/3WGf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjFiODdmMDMtNzc1OS0z NzQ5LTlmOWMtY2Q5ZDI0NTZlNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJtIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJePoiKmdY/IbmKTAo6f6LDTc6Qfcbmzn5jxgrW2dXIKIXDGji7pE/db tKpVCJE/NxD1QF+y1GcNe/45oTp4u18H4p0luvRbmyQVxCIyWGQXb4cga/2T2kuP wmeijkkclpwrA6PpEW+TC0lSHZJJHM+n9WIYmXQqsUFbBW8FXyPz0MlhwOBVD8xG fQ7vWUfsKMJ6tEbIbhOFKVoQAZbDJknM2FiSHUT1YQvu+95BEKEOO/mMOtTxz/8Z PycuPfQRha1Uc4hP0isZSTJtRef1lQVgl50IYV2A4/6quou42k+xjosVm3pzC4dF yHReaZMCuWdq3nMvMAxJ/DTvkoNVxpg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:05:06 2026 by rpki-client