$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a41824e7-bc70-30da-8ec6-e610aea92c0b.roa File: a41824e7-bc70-30da-8ec6-e610aea92c0b.roa (raw, json) Hash identifier: qn0J3S9yk+MaesNJRPLHOG6fZxCz0NPxa+4zohMVrFI= Subject key identifier: 93:E6:E5:1E:2C:4E:A1:2D:57:C5:1F:20:25:89:AA:08:97:34:44:81 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EAA518E707C0800AFBD5ADD40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a41824e7-bc70-30da-8ec6-e610aea92c0b.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 0 IP address blocks: 38.107.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:8e:70:7c:08:00:af:bd:5a:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=907ba40c-4843-4fbd-b6e0-a176e6778e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:3a:ce:d2:8e:24:e2:c2:ba:8d:a3:87:ee: 65:29:0e:14:f0:a0:18:54:d0:4f:f8:d9:cd:b4:ff: 42:3e:7d:af:2d:9a:58:2b:d5:02:56:e0:c2:19:b8: 41:fd:a9:43:d1:39:67:68:db:83:a9:05:42:86:fd: 2e:c6:11:bb:7b:2f:07:90:33:fa:59:d5:16:c5:5c: 8e:2c:1c:fe:73:cb:05:d3:e8:b8:58:b2:d7:2d:c8: 74:92:d5:fe:38:6e:0c:8e:6d:2d:b5:0a:46:bc:16: ee:91:5c:69:51:a5:0d:e8:b9:d0:0a:98:60:c7:6c: 0d:4a:b5:20:d7:24:38:4d:bc:4e:a2:2c:58:3d:07: 31:06:ad:6e:3a:63:96:2a:e2:38:9d:db:59:ac:bd: 9c:d8:60:fd:72:2a:9c:97:7a:7f:dd:64:ee:54:01: 57:6a:fd:24:01:7a:e5:0b:f4:37:0d:41:30:42:24: ce:c5:ff:42:72:a1:6c:17:03:c7:36:3c:61:2a:13: b0:98:f8:c5:9e:d9:55:d7:50:b0:ac:da:2b:73:35: 5d:b9:38:df:95:60:a9:6e:8f:2e:ce:04:bd:c1:50: 3f:da:7c:06:bc:7f:9f:15:05:86:ee:f9:e4:4f:91: 8e:be:85:44:22:ad:c4:1d:19:e3:cf:a1:5c:0f:4a: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:E5:1E:2C:4E:A1:2D:57:C5:1F:20:25:89:AA:08:97:34:44:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a41824e7-bc70-30da-8ec6-e610aea92c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.107.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7c:4e:aa:87:29:44:7d:6a:9e:19:7e:91:2b:c4:80:72:be: 5c:17:90:fe:92:c4:8f:09:57:3e:f5:12:8b:0e:b0:88:81:23: 92:be:03:4a:6b:48:7a:e1:23:91:4b:d0:fd:af:3e:6e:0a:0d: 38:8f:8a:42:d8:c3:bd:a4:ff:27:e2:f4:4c:fe:ff:d1:8c:6b: e3:40:90:27:1a:53:69:fe:73:47:b4:3b:a6:64:84:fd:64:01: 71:2a:57:ca:ae:18:db:2a:2e:ad:63:3d:98:9a:1e:1f:0b:8d: 3b:ca:b0:3d:6b:05:46:3a:93:ef:71:3c:de:1b:48:e4:72:e9: 9f:d9:c0:ca:6c:14:86:b0:76:f8:e7:7a:55:de:83:9f:bc:56: 0a:3d:66:ab:bd:de:3b:72:e5:6a:40:20:df:7a:61:c4:32:8a: ab:1e:b0:77:13:19:f2:99:c8:1f:45:d9:fa:5b:cc:64:36:3d: 50:f3:ef:92:8e:c1:b3:b8:d8:cd:94:6f:9c:79:77:5e:4c:84: a9:17:bc:02:61:73:ca:6a:30:4d:36:89:a5:fb:40:3b:37:06: ac:4f:5f:96:1e:d9:51:ec:2d:0f:f9:1e:4e:43:ae:43:a1:cc: ce:05:17:11:b4:f8:08:38:50:7d:09:c8:42:a0:ce:f5:7d:c5: f5:ab:ec:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUY5wfAgAr71a3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk OTA3YmE0MGMtNDg0My00ZmJkLWI2ZTAtYTE3NmU2Nzc4ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZU6ztKOJOLCuo2jh+5lKQ4U8KAYVNBP+NnN tP9CPn2vLZpYK9UCVuDCGbhB/alD0TlnaNuDqQVChv0uxhG7ey8HkDP6WdUWxVyO LBz+c8sF0+i4WLLXLch0ktX+OG4Mjm0ttQpGvBbukVxpUaUN6LnQCphgx2wNSrUg 1yQ4TbxOoixYPQcxBq1uOmOWKuI4ndtZrL2c2GD9ciqcl3p/3WTuVAFXav0kAXrl C/Q3DUEwQiTOxf9CcqFsFwPHNjxhKhOwmPjFntlV11CwrNorczVduTjflWCpbo8u zgS9wVA/2nwGvH+fFQWG7vnkT5GOvoVEIq3EHRnjz6FcD0rK3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPm5R4sTqEtV8UfICWJqgiXNESBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTQxODI0ZTctYmM3MC0z MGRhLThlYzYtZTYxMGFlYTkyYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJmt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF8TqqHKUR9ap4ZfpErxIByvlwXkP6SxI8JVz71EosOsIiBI5K+A0pr SHrhI5FL0P2vPm4KDTiPikLYw72k/yfi9Ez+/9GMa+NAkCcaU2n+c0e0O6ZkhP1k AXEqV8quGNsqLq1jPZiaHh8LjTvKsD1rBUY6k+9xPN4bSORy6Z/ZwMpsFIawdvjn elXeg5+8Vgo9Zqu93jty5WpAIN96YcQyiqsesHcTGfKZyB9F2fpbzGQ2PVDz75KO wbO42M2Ub5x5d15MhKkXvAJhc8pqME02iaX7QDs3BqxPX5Ye2VHsLQ/5Hk5DrkOh zM4FFxG0+Ag4UH0JyEKgzvV9xfWr7IQ= -----END CERTIFICATE-----Generated at Fri Aug 21 22:28:18 2026 by rpki-client