$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa File: 84840b0a-e228-38dd-87c4-2a9194fb0372.roa (raw, json) Hash identifier: vTqllxTIJp1WjxFoJUr5TW3pciU1Vlr3MBwQopYi8nQ= Subject key identifier: 7E:18:66:06:5C:AC:06:67:9B:05:74:D5:18:B6:1D:00:13:FF:0A:7E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EEBECA205509C2175C6D6F080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 262231 IP address blocks: 38.21.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:a2:05:50:9c:21:75:c6:d6:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=67169dbe-d600-45d3-8d9f-555f307e15c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:b9:8c:c4:4a:ba:57:08:64:72:97:e2:cd: 7c:3c:e2:ff:b4:83:ce:3a:7a:2b:db:81:2b:94:c6: 33:45:61:b3:63:2f:c9:0d:b3:1a:3b:35:88:8f:c9: ed:98:1a:ae:df:b3:62:19:58:fa:f7:17:25:9a:97: d3:46:fe:d0:ea:36:96:2c:55:34:23:6e:df:c0:aa: cf:ff:4b:be:00:b8:a7:fe:4a:d0:a5:c2:ce:5c:e0: 65:e0:08:58:45:ad:f8:5c:95:fa:c6:36:62:36:96: af:6a:aa:31:f0:f5:9b:0e:b5:d4:86:fd:77:01:bd: e8:e8:94:c6:90:90:7b:92:af:6d:7e:84:1b:96:7a: db:f4:e7:b7:57:54:57:f6:bd:5d:ee:ab:c9:e2:c0: a2:44:f8:17:bb:b7:77:4c:d8:bb:78:2f:86:31:3f: ea:7a:47:1f:01:a6:50:6d:eb:c7:ef:1b:c0:8b:5e: 3e:06:a4:8c:84:38:dd:89:f3:a5:79:5b:46:48:d9: bc:5b:60:b0:72:9f:70:00:c4:59:5f:f2:78:10:a0: d2:55:9a:12:03:c3:f0:a1:f1:86:4e:54:f9:dd:52: 9e:6c:aa:3f:ed:d6:74:7c:2a:37:a0:1e:b8:d5:99: 01:e7:2b:f5:90:05:30:5c:79:ba:1d:bf:70:f2:f8: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:18:66:06:5C:AC:06:67:9B:05:74:D5:18:B6:1D:00:13:FF:0A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:54:f5:dd:e4:e0:57:87:1e:d3:e0:e4:46:46:97:ae:cf:94: d0:43:07:62:50:57:fc:84:96:32:a3:65:14:a7:18:2d:fa:30: bc:25:6d:17:6d:d2:21:bd:0a:73:e9:4e:25:37:2f:2e:0d:55: 64:f2:4e:cd:58:73:1d:66:9b:17:b5:1f:50:72:b9:a3:aa:09: 1d:2d:dd:94:dd:02:e1:36:9b:e7:9b:87:21:73:89:0f:96:08: 75:e9:22:d6:49:7c:e3:4f:f5:12:9c:ad:18:77:c6:75:b5:02: 7f:a6:54:9f:0b:c4:b4:1b:17:31:68:b1:da:3a:83:77:c1:d1: 64:97:01:d2:87:0e:a6:5a:69:84:59:4e:7f:9b:28:20:1b:12: 74:49:bf:1b:29:5d:34:56:28:59:bb:6c:16:bc:c0:0e:33:b5: 45:11:a0:91:69:cb:d2:fb:27:ea:ff:19:d2:49:57:1f:1a:93: 47:7d:7d:fa:a7:0c:86:0f:ac:75:d9:e8:6e:0c:c3:a4:7c:a5: 4b:fb:d8:3b:7c:75:36:fa:8a:e8:48:68:eb:96:43:aa:d4:21: e0:7e:7f:e5:30:d4:9b:26:2c:f9:6e:c5:55:e3:5a:7e:cd:e7: 79:c8:a9:53:42:4c:44:f5:00:4f:a3:65:5c:c6:3c:b9:dc:09: f1:f8:e9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7r7KIFUJwhdcbW8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjcxNjlkYmUtZDYwMC00NWQzLThkOWYtNTU1ZjMwN2UxNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcW5jMRKulcIZHKX4s18POL/tIPOOnor24Er lMYzRWGzYy/JDbMaOzWIj8ntmBqu37NiGVj69xclmpfTRv7Q6jaWLFU0I27fwKrP /0u+ALin/krQpcLOXOBl4AhYRa34XJX6xjZiNpavaqox8PWbDrXUhv13Ab3o6JTG kJB7kq9tfoQblnrb9Oe3V1RX9r1d7qvJ4sCiRPgXu7d3TNi7eC+GMT/qekcfAaZQ bevH7xvAi14+BqSMhDjdifOleVtGSNm8W2Cwcp9wAMRZX/J4EKDSVZoSA8PwofGG TlT53VKebKo/7dZ0fCo3oB641ZkB5yv1kAUwXHm6Hb9w8vgTcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4YZgZcrAZnmwV01Ri2HQAT/wp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODQ4NDBiMGEtZTIyOC0z OGRkLTg3YzQtMmE5MTk0ZmIwMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJhVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRU9d3k4FeHHtPg5EZGl67PlNBDB2JQV/yEljKjZRSnGC36MLwlbRdt 0iG9CnPpTiU3Ly4NVWTyTs1Ycx1mmxe1H1ByuaOqCR0t3ZTdAuE2m+ebhyFziQ+W CHXpItZJfONP9RKcrRh3xnW1An+mVJ8LxLQbFzFosdo6g3fB0WSXAdKHDqZaaYRZ Tn+bKCAbEnRJvxspXTRWKFm7bBa8wA4ztUURoJFpy9L7J+r/GdJJVx8ak0d9ffqn DIYPrHXZ6G4Mw6R8pUv72Dt8dTb6iuhIaOuWQ6rUIeB+f+Uw1JsmLPluxVXjWn7N 53nIqVNCTET1AE+jZVzGPLncCfH46Y4= -----END CERTIFICATE-----Generated at Fri Sep 11 13:55:16 2026 by rpki-client