$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/820da546-2211-3781-82ae-6a7eef799443.roa File: 820da546-2211-3781-82ae-6a7eef799443.roa (raw, json) Hash identifier: z14WgOfhf++sJ8kj5V8crJJpYB9P4T9WJSKbwlov5ts= Subject key identifier: A8:E1:DE:8B:3B:80:52:7C:F4:C0:18:D5:9D:C4:94:61:D6:A1:F1:49 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED2CC796F7D46935D9668A980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/820da546-2211-3781-82ae-6a7eef799443.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 13692 IP address blocks: 38.21.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:79:6f:7d:46:93:5d:96:68:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=27f52ae5-3407-4923-8a20-21d9f4c4935c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:d3:85:c8:f4:ff:03:ca:a8:0b:3b:40:06: 72:93:8d:5c:88:f9:c6:59:5a:21:54:53:c5:56:b7: 9e:50:e1:ff:77:86:23:a3:59:8b:2a:9f:d4:16:5d: d5:d8:bb:eb:0f:37:f2:12:34:86:7e:14:8c:0b:d2: dc:a3:2e:8a:33:e6:c3:0b:b1:1f:e7:4e:03:41:cc: f8:c6:a1:cc:01:f3:df:3d:96:97:86:d1:c5:bc:b0: 45:9c:fc:12:72:e3:68:cf:23:a1:a8:fd:46:7e:e6: b4:e7:5a:bf:5a:f7:eb:20:fc:df:97:d7:4c:9f:18: 40:e5:ef:ca:00:b0:45:11:8f:ae:e8:67:97:0f:5f: a8:bb:e8:04:bc:49:d2:08:7f:04:bc:24:fa:fa:64: 60:b8:4e:e6:40:9e:cd:fd:dc:99:81:fe:af:80:a4: 77:cd:b5:45:e6:5d:91:19:4c:a4:6c:da:d4:b2:f1: 1b:5f:b8:bc:eb:20:3a:d1:65:ea:67:a6:ae:3f:f3: 24:d4:5e:69:74:ec:8c:88:9f:61:dd:a8:20:71:e8: 41:a1:09:82:41:8b:ca:ab:96:b3:50:d4:d4:24:51: a1:bd:0d:4f:95:f1:c9:e5:e0:44:d3:87:a4:27:5c: 7a:e1:61:a5:c9:26:f8:7a:a0:ed:5a:37:a9:30:be: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:DE:8B:3B:80:52:7C:F4:C0:18:D5:9D:C4:94:61:D6:A1:F1:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/820da546-2211-3781-82ae-6a7eef799443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9e:31:6c:ef:18:f9:8a:d1:51:74:94:8b:ed:3c:24:44:08: 61:b5:6c:15:eb:e4:d0:15:51:b1:ec:60:7a:11:74:a9:b0:ae: d8:0c:1b:9e:d3:76:5f:86:f7:ad:0b:25:b6:b2:90:a2:38:29: 4b:4f:a9:b3:48:46:b6:01:11:97:a9:75:8d:e8:65:a9:d6:4f: 4c:dc:c8:fa:d6:3f:13:6f:4b:a2:8b:2a:e6:7c:50:b9:3a:4b: a2:96:bb:8f:a5:ae:af:18:20:e1:09:d6:00:9c:da:a3:d8:2f: 30:52:c6:74:81:fb:fd:8f:80:87:e1:c9:94:f1:4a:da:94:96: 8b:24:23:a9:cd:a2:c4:67:5c:9d:2c:72:7e:3f:ed:ae:b6:70: 51:2f:a0:5b:d3:61:52:52:6f:6c:b0:a8:ce:a8:0d:5f:78:87: 92:ec:68:55:9d:3e:c7:db:fa:64:69:ef:01:b0:0b:db:10:04: 93:e0:1e:1a:3a:a4:f2:2e:91:ce:86:7e:a2:a9:0d:e1:63:fd: 9e:f1:44:9a:ca:f2:fe:15:df:fc:92:3a:5e:7e:4b:94:b8:a2: e5:d1:e5:45:89:7b:80:ed:ec:9d:b7:40:07:f4:dd:c2:51:9b: 1b:f7:8a:52:28:67:8f:8d:9f:ef:47:05:db:c7:7e:20:c1:09: b6:5a:be:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHlvfUaTXZZoqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk MjdmNTJhZTUtMzQwNy00OTIzLThhMjAtMjFkOWY0YzQ5MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbjThcj0/wPKqAs7QAZyk41ciPnGWVohVFPF VreeUOH/d4Yjo1mLKp/UFl3V2LvrDzfyEjSGfhSMC9Lcoy6KM+bDC7Ef504DQcz4 xqHMAfPfPZaXhtHFvLBFnPwScuNozyOhqP1Gfua051q/WvfrIPzfl9dMnxhA5e/K ALBFEY+u6GeXD1+ou+gEvEnSCH8EvCT6+mRguE7mQJ7N/dyZgf6vgKR3zbVF5l2R GUykbNrUsvEbX7i86yA60WXqZ6auP/Mk1F5pdOyMiJ9h3aggcehBoQmCQYvKq5az UNTUJFGhvQ1PlfHJ5eBE04ekJ1x64WGlySb4eqDtWjepML59lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjh3os7gFJ89MAY1Z3ElGHWofFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODIwZGE1NDYtMjIxMS0z NzgxLTgyYWUtNmE3ZWVmNzk5NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJhU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyeMWzvGPmK0VF0lIvtPCRECGG1bBXr5NAVUbHsYHoRdKmwrtgMG57T dl+G960LJbaykKI4KUtPqbNIRrYBEZepdY3oZanWT0zcyPrWPxNvS6KLKuZ8ULk6 S6KWu4+lrq8YIOEJ1gCc2qPYLzBSxnSB+/2PgIfhyZTxStqUloskI6nNosRnXJ0s cn4/7a62cFEvoFvTYVJSb2ywqM6oDV94h5LsaFWdPsfb+mRp7wGwC9sQBJPgHho6 pPIukc6GfqKpDeFj/Z7xRJrK8v4V3/ySOl5+S5S4ouXR5UWJe4Dt7J23QAf03cJR mxv3ilIoZ4+Nn+9HBdvHfiDBCbZavvk= -----END CERTIFICATE-----Generated at Fri Sep 11 13:12:39 2026 by rpki-client