$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa File: a508563b-abf1-396d-a8d4-35b26074b998.roa (raw, json) Hash identifier: zGsXnlIf61BZDogf7RBCH5v24AfaeDT3m1jns7MqDnc= Subject key identifier: 9F:DA:FD:74:9A:00:EB:E1:EF:AC:F0:61:0D:19:5B:E8:F0:E3:E6:B9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA3847148F1C67D183523A040 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa Signing time: Mon 27 Jul 2026 14:32:08 +0000 ROA not before: Mon 27 Jul 2026 14:32:08 +0000 ROA not after: Sun 25 Oct 2026 14:32:08 +0000 asID: 215886 IP address blocks: 38.21.160.0/20 maxlen: 20 38.27.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:84:71:48:f1:c6:7d:18:35:23:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 27 14:32:08 2026 GMT Not After : Oct 25 14:32:08 2026 GMT Subject: CN=fd577ee5-9ecb-4362-b5fd-98528f3b2386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:fb:ec:75:e8:fb:da:bb:28:ee:be:cd:f7: 65:64:cb:14:21:fa:d0:63:e8:95:e8:76:3b:2c:23: eb:9c:78:11:3c:85:69:e4:35:a0:9c:39:df:3f:30: d7:49:77:e6:c1:a5:26:2d:d1:18:3f:1e:b2:03:2b: 5d:11:08:a3:64:d2:4e:66:ec:3b:73:ba:e8:cb:dc: 65:62:fa:3c:10:e3:37:ba:98:eb:77:0c:47:28:e0: df:0a:bb:53:4f:2c:26:70:84:08:d3:8a:9a:1d:22: fa:8e:6e:ce:95:6b:08:3b:bf:bb:ce:bf:e5:d7:cd: 71:7d:87:88:6b:43:aa:6d:44:d3:6a:a9:29:4e:55: 2c:8b:d1:d7:69:23:28:19:fa:5b:89:e4:52:5d:5e: 11:c0:24:3b:c5:42:4c:6b:30:04:43:1c:24:04:38: 12:70:79:31:74:06:f6:16:c1:7a:6b:d4:50:f6:a5: ce:9a:b7:71:5b:e7:da:4a:f8:ec:84:62:b7:ff:9a: 2a:b4:86:bb:54:ad:30:d5:35:72:48:35:de:f8:a1: d4:7c:e8:0b:32:6c:91:e8:17:a9:35:68:51:54:39: 9d:ed:1e:a1:95:34:bf:91:84:33:c7:47:07:5b:4c: 9c:57:01:50:5b:95:4f:57:55:6c:40:d4:99:de:9e: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DA:FD:74:9A:00:EB:E1:EF:AC:F0:61:0D:19:5B:E8:F0:E3:E6:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.160.0/20 38.27.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3a:72:7f:ec:af:ee:da:0e:84:56:5f:92:6d:94:4e:28:f6: 9b:30:95:1e:08:96:6d:ca:59:b6:ac:38:b6:74:5d:09:be:c9: 05:23:d2:e6:a0:c5:13:cb:49:de:dd:ac:ed:2b:d5:3c:75:7b: ea:b4:02:c3:29:be:79:bb:1d:ca:34:7d:39:6f:29:2d:ec:81: 8a:1e:ba:c5:34:80:71:b7:e9:71:48:7f:21:bc:36:2c:f0:ce: e9:51:35:36:f4:cd:4d:73:9c:6d:e6:09:98:72:aa:af:aa:39: 71:dc:be:ca:d1:3e:20:cd:de:dc:80:e5:a1:eb:15:f3:cf:0c: 01:3e:66:5a:0c:76:83:9f:e0:70:d8:6a:90:c6:cf:15:3d:35: b4:59:e2:4d:e9:4c:88:e1:31:cf:75:cf:ef:5e:80:0c:e4:68: 95:e2:ef:32:73:e7:d6:b8:5e:89:0b:d3:e7:50:64:ed:a4:02: 1b:6c:0c:0c:8c:cc:0d:03:c5:10:72:41:f3:7a:83:36:01:5a: 8f:39:c9:c1:14:a5:71:80:1e:30:f9:f3:36:66:86:9c:0e:1b: 6d:c5:4a:00:1b:fc:99:c1:02:df:9a:16:75:50:28:5d:c6:86: 85:c7:38:6c:3e:54:6f:6a:3c:11:0b:43:49:86:48:ef:ac:7c: 2b:de:32:d7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6jhHFI8cZ9GDUjoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNzE0MzIwOFoXDTI2MTAyNTE0MzIwOFowLzEtMCsGA1UEAxMk ZmQ1NzdlZTUtOWVjYi00MzYyLWI1ZmQtOTg1MjhmM2IyMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35P77HXo+9q7KO6+zfdlZMsUIfrQY+iV6HY7 LCPrnHgRPIVp5DWgnDnfPzDXSXfmwaUmLdEYPx6yAytdEQijZNJOZuw7c7roy9xl Yvo8EOM3upjrdwxHKODfCrtTTywmcIQI04qaHSL6jm7OlWsIO7+7zr/l181xfYeI a0OqbUTTaqkpTlUsi9HXaSMoGfpbieRSXV4RwCQ7xUJMazAEQxwkBDgScHkxdAb2 FsF6a9RQ9qXOmrdxW+faSvjshGK3/5oqtIa7VK0w1TVySDXe+KHUfOgLMmyR6Bep NWhRVDmd7R6hlTS/kYQzx0cHW0ycVwFQW5VPV1VsQNSZ3p6FGQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ/a/XSaAOvh76zwYQ0ZW+jw4+a5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTUwODU2M2ItYWJmMS0z OTZkLWE4ZDQtMzViMjYwNzRiOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJhWgAwQD JhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADU6cn/sr+7aDoRWX5JtlE4o9pswlR4Ilm3KWbasOLZ0XQm+ yQUj0uagxRPLSd7drO0r1Tx1e+q0AsMpvnm7Hco0fTlvKS3sgYoeusU0gHG36XFI fyG8NizwzulRNTb0zU1znG3mCZhyqq+qOXHcvsrRPiDN3tyA5aHrFfPPDAE+ZloM doOf4HDYapDGzxU9NbRZ4k3pTIjhMc91z+9egAzkaJXi7zJz59a4XokL0+dQZO2k AhtsDAyMzA0DxRByQfN6gzYBWo85ycEUpXGAHjD58zZmhpwOG23FSgAb/JnBAt+a FnVQKF3GhoXHOGw+VG9qPBELQ0mGSO+sfCveMtc= -----END CERTIFICATE-----Generated at Tue Jul 28 00:16:31 2026 by rpki-client