$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86bfa981-4ab6-334f-a96d-ff7a677ee561.roa File: 86bfa981-4ab6-334f-a96d-ff7a677ee561.roa (raw, json) Hash identifier: tRmSEC//7VhraQd5UCs6nqq4+8flbGckjsE0UUnCUP4= Subject key identifier: DD:9A:35:BC:7E:E0:CA:CB:A4:C4:1B:2D:2E:04:46:3E:C4:E0:33:85 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E815F920F085F8F54EFD12C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86bfa981-4ab6-334f-a96d-ff7a677ee561.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 198949 IP address blocks: 38.135.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:92:0f:08:5f:8f:54:ef:d1:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=2d88a593-55e6-4815-9bb8-7a85b7837201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:fb:94:a6:ef:00:e0:51:a5:37:16:da:00: c3:05:ed:01:15:03:b6:8f:62:29:da:45:16:0a:c2: 90:38:89:21:84:cd:89:46:02:0c:81:bc:a0:a4:54: 1a:33:5f:3b:69:78:57:57:df:36:38:ec:6b:1a:b3: c7:d7:30:e0:0c:71:8d:6e:c2:43:d3:fa:18:e9:b8: 1b:f8:0d:fb:9d:5e:f9:77:e0:ea:86:96:cd:f8:ae: 64:d6:db:9a:b3:70:fd:73:2a:45:fc:8d:46:5b:ee: 15:91:3e:19:6c:c9:ec:81:3b:9b:38:10:c0:ec:2b: 4f:27:9b:86:3c:84:9d:d4:d1:a8:ec:29:e0:a4:9e: 4d:64:c8:27:3d:fb:4e:7e:26:f4:ab:88:74:c3:59: ff:44:4f:14:2a:e1:ff:30:cf:d2:1d:38:ea:0b:28: 5b:7b:cb:f4:a6:99:89:df:da:cb:d5:4b:6c:e2:ff: a5:34:a0:cb:4c:a1:a5:65:bb:b0:de:fe:e9:04:5c: f7:ff:f4:8e:fd:09:47:51:4f:7d:77:70:8d:dc:f1: 23:a0:fc:79:3a:67:2f:71:46:d4:d8:db:2a:fc:6a: 77:88:bf:f3:15:ce:36:93:86:34:c1:90:40:79:d0: c5:c2:36:1f:93:6e:09:87:84:52:5b:63:4e:3e:94: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:35:BC:7E:E0:CA:CB:A4:C4:1B:2D:2E:04:46:3E:C4:E0:33:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86bfa981-4ab6-334f-a96d-ff7a677ee561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:d6:30:e5:3f:f5:a7:eb:f0:d6:40:64:de:06:f5:4e:23:ff: e2:37:ad:6f:96:71:ee:e0:ae:43:49:1f:ec:a0:77:d8:b9:9a: 8e:b0:95:94:7a:12:62:c8:8a:26:1a:7a:2b:4a:43:8d:59:7f: ac:81:95:80:8a:ad:dd:e6:04:7f:9b:00:c1:68:a3:69:51:4e: 43:03:12:45:88:c4:f6:54:48:24:8b:7e:01:11:e6:34:01:64: 97:82:b4:f8:fb:e7:0d:42:40:52:5e:90:83:57:8b:76:ea:5f: 14:d3:d2:4f:7d:6e:e2:1e:a0:d8:6c:63:c3:41:88:11:58:52: 52:99:a9:39:4c:4c:b2:df:35:2d:76:e8:7b:c4:7d:8a:a0:85: c6:1b:8d:f1:9c:c0:33:2c:04:77:cc:db:1c:cb:95:fc:ad:d3: d5:d6:85:e4:70:8e:19:ee:3e:b5:77:11:48:eb:48:b9:7f:ca: 46:ce:c1:f0:35:13:bc:69:af:38:a3:87:48:66:41:f2:8b:d7: e7:a9:6c:a7:40:9c:e1:6d:85:36:17:7a:79:a9:e9:97:69:1f: 09:91:d0:27:1d:72:5c:cf:a6:be:07:df:7a:39:96:26:f1:60: 74:6e:21:5c:7a:76:c6:ec:ac:04:97:4c:a2:c8:3e:57:e2:62: 2a:77:81:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5IPCF+PVO/RLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk MmQ4OGE1OTMtNTVlNi00ODE1LTliYjgtN2E4NWI3ODM3MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSz7lKbvAOBRpTcW2gDDBe0BFQO2j2Ip2kUW CsKQOIkhhM2JRgIMgbygpFQaM187aXhXV982OOxrGrPH1zDgDHGNbsJD0/oY6bgb +A37nV75d+DqhpbN+K5k1tuas3D9cypF/I1GW+4VkT4ZbMnsgTubOBDA7CtPJ5uG PISd1NGo7CngpJ5NZMgnPftOfib0q4h0w1n/RE8UKuH/MM/SHTjqCyhbe8v0ppmJ 39rL1Uts4v+lNKDLTKGlZbuw3v7pBFz3//SO/QlHUU99d3CN3PEjoPx5OmcvcUbU 2Nsq/Gp3iL/zFc42k4Y0wZBAedDFwjYfk24Jh4RSW2NOPpQjaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2aNbx+4MrLpMQbLS4ERj7E4DOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODZiZmE5ODEtNGFiNi0z MzRmLWE5NmQtZmY3YTY3N2VlNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJoeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvWMOU/9afr8NZAZN4G9U4j/+I3rW+Wce7grkNJH+ygd9i5mo6wlZR6 EmLIiiYaeitKQ41Zf6yBlYCKrd3mBH+bAMFoo2lRTkMDEkWIxPZUSCSLfgER5jQB ZJeCtPj75w1CQFJekINXi3bqXxTT0k99buIeoNhsY8NBiBFYUlKZqTlMTLLfNS12 6HvEfYqghcYbjfGcwDMsBHfM2xzLlfyt09XWheRwjhnuPrV3EUjrSLl/ykbOwfA1 E7xprzijh0hmQfKL1+epbKdAnOFthTYXenmp6ZdpHwmR0CcdclzPpr4H33o5libx YHRuIVx6dsbsrASXTKLIPlfiYip3gbk= -----END CERTIFICATE-----Generated at Tue Jul 21 14:00:10 2026 by rpki-client