$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa File: a508563b-abf1-396d-a8d4-35b26074b998.roa (raw, json) Hash identifier: d+hfIhkC4ydVGCYw6XeI+kPBtc5NjMXaOiS5ZvHEQcQ= Subject key identifier: 1F:C5:95:76:12:0A:5B:C7:1E:99:27:4F:7E:C2:06:2B:B1:F5:FB:1F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA9163BE365F0CDDDD8381D60 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa Signing time: Wed 29 Jul 2026 14:24:55 +0000 ROA not before: Wed 29 Jul 2026 14:24:55 +0000 ROA not after: Sun 25 Oct 2026 14:32:08 +0000 asID: 215886 IP address blocks: 38.21.160.0/20 maxlen: 21 38.27.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a9:16:3b:e3:65:f0:cd:dd:d8:38:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 14:24:55 2026 GMT Not After : Oct 25 14:32:08 2026 GMT Subject: CN=9346b001-984b-44b3-a488-5163e7dbe783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:d4:5a:7d:61:19:14:eb:76:be:1a:05:ea: cb:db:a1:c4:3a:4a:1a:d0:7c:ee:ef:e7:54:4b:20: 3f:48:57:6f:df:b9:d3:e6:11:8c:2d:d3:57:96:cb: e6:77:95:bb:a7:50:50:86:a7:10:ee:fc:21:ef:8f: 13:a6:dd:cc:eb:66:0d:c9:f5:d0:f8:26:88:25:dd: 20:72:f5:fe:8d:0e:f8:11:9e:d6:25:7a:ef:77:bd: 52:22:04:89:f3:e9:e3:9a:d5:21:28:bb:dd:d2:3b: 47:d0:b4:7f:5e:21:8d:4b:31:04:4e:9d:7e:e8:8f: 73:ca:b0:f7:9d:13:3b:b7:57:e9:48:b8:7b:86:4c: 92:52:6c:2a:63:ab:0d:57:fb:1d:72:6d:82:af:1d: 8b:58:17:4a:08:c2:fe:6c:cb:5b:6b:f2:71:44:79: d6:5f:43:f2:be:f2:40:fb:dc:a4:41:97:78:4e:62: 06:1f:19:42:ac:27:ac:23:a9:51:d8:a3:44:6c:76: 6c:36:b9:82:1d:45:ae:44:62:a2:f8:0b:f0:7e:17: 91:d8:6a:e3:14:85:08:73:5a:7c:1a:f6:c2:da:55: bc:7c:28:1e:85:93:2c:92:d9:43:0f:26:50:fa:36: bf:5c:60:3b:e7:f8:64:db:c8:ae:27:49:80:df:f2: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C5:95:76:12:0A:5B:C7:1E:99:27:4F:7E:C2:06:2B:B1:F5:FB:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.160.0/20 38.27.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ae:b8:27:7d:b3:cf:d6:bb:78:cd:f3:4b:d7:de:cc:ef:d2: 93:1c:46:09:9c:75:57:28:aa:90:7b:83:e6:6a:fd:57:71:71: 70:98:4f:59:ce:a4:53:0c:cf:b4:66:32:c6:05:78:6c:56:c0: d2:e5:07:da:dc:b8:90:ce:fe:a4:72:01:ce:15:b4:13:bf:c3: 0e:24:1d:b1:24:47:84:bc:2a:2a:70:34:20:40:21:bc:f6:af: 37:b0:ee:56:a8:75:32:ac:3f:b8:bc:e1:b6:64:23:4a:fd:f5: a5:6a:48:9d:5d:12:98:14:71:60:ad:af:c5:a6:a9:a4:e6:c9: 25:50:bd:92:d0:63:f7:62:9e:90:8f:1a:96:4a:ee:4e:d1:55: 37:8a:c6:4f:95:a8:f4:f2:40:e9:79:3a:04:98:74:e6:33:a5: f3:d8:ed:d9:76:eb:7a:73:8a:af:b2:f3:98:10:95:ec:33:0b: 27:ba:f2:89:8d:ed:0e:2f:10:c5:8c:a0:0d:4b:f7:24:ae:a1: 5e:3d:1d:8d:c2:08:25:b9:e8:89:fb:13:ac:e9:38:0e:69:58: 5a:5b:21:f9:10:81:53:39:3e:3a:fb:eb:93:2c:a3:90:e9:db: 55:fe:80:a7:b8:57:dc:8f:4c:b8:a1:e1:16:78:e4:7d:e2:c4: 6f:c9:cf:1b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6pFjvjZfDN3dg4HWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTE0MjQ1NVoXDTI2MTAyNTE0MzIwOFowLzEtMCsGA1UEAxMk OTM0NmIwMDEtOTg0Yi00NGIzLWE0ODgtNTE2M2U3ZGJlNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05HUWn1hGRTrdr4aBerL26HEOkoa0Hzu7+dU SyA/SFdv37nT5hGMLdNXlsvmd5W7p1BQhqcQ7vwh748Tpt3M62YNyfXQ+CaIJd0g cvX+jQ74EZ7WJXrvd71SIgSJ8+njmtUhKLvd0jtH0LR/XiGNSzEETp1+6I9zyrD3 nRM7t1fpSLh7hkySUmwqY6sNV/sdcm2Crx2LWBdKCML+bMtba/JxRHnWX0PyvvJA +9ykQZd4TmIGHxlCrCesI6lR2KNEbHZsNrmCHUWuRGKi+AvwfheR2GrjFIUIc1p8 GvbC2lW8fCgehZMsktlDDyZQ+ja/XGA75/hk28iuJ0mA3/JU0QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB/FlXYSClvHHpknT37CBiux9fsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTUwODU2M2ItYWJmMS0z OTZkLWE4ZDQtMzViMjYwNzRiOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJhWgAwQD JhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA+uuCd9s8/Wu3jN80vX3szv0pMcRgmcdVcoqpB7g+Zq/Vdx cXCYT1nOpFMMz7RmMsYFeGxWwNLlB9rcuJDO/qRyAc4VtBO/ww4kHbEkR4S8Kipw NCBAIbz2rzew7laodTKsP7i84bZkI0r99aVqSJ1dEpgUcWCtr8WmqaTmySVQvZLQ Y/dinpCPGpZK7k7RVTeKxk+VqPTyQOl5OgSYdOYzpfPY7dl263pziq+y85gQlewz Cye68omN7Q4vEMWMoA1L9ySuoV49HY3CCCW56In7E6zpOA5pWFpbIfkQgVM5Pjr7 65Mso5Dp21X+gKe4V9yPTLih4RZ45H3ixG/Jzxs= -----END CERTIFICATE-----Generated at Fri Sep 11 15:43:30 2026 by rpki-client