$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae76414c-aa5b-3647-801d-9c3002b201b2.roa File: ae76414c-aa5b-3647-801d-9c3002b201b2.roa (raw, json) Hash identifier: pypVuBXgvg+UdDO8e+32S3pQN7SkmPyKW1MJd74m4nk= Subject key identifier: 3D:18:59:44:99:87:46:3E:8D:65:F1:24:50:0D:5F:C0:94:B1:7E:04 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5625967429779E869086F9C8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae76414c-aa5b-3647-801d-9c3002b201b2.roa Signing time: Tue 29 Sep 2026 14:10:42 +0000 ROA not before: Tue 29 Sep 2026 14:10:42 +0000 ROA not after: Mon 28 Dec 2026 15:10:42 +0000 asID: 272106 IP address blocks: 38.21.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:25:96:74:29:77:9e:86:90:86:f9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 14:10:42 2026 GMT Not After : Dec 28 15:10:42 2026 GMT Subject: CN=534bb173-e7a6-4921-b175-1ea7ff46c228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:12:d9:b1:7d:1f:27:0f:50:3e:e1:e9:c5: eb:fd:e2:70:18:6b:17:95:34:c6:2c:7f:44:92:5f: 3d:14:78:b9:ce:09:05:df:74:54:cb:b3:61:16:75: 6a:79:9b:57:20:cb:1a:bb:13:3a:59:9e:15:fe:90: c7:cc:52:00:ae:22:e3:c0:09:12:49:dc:d8:6c:48: 5e:7b:dd:59:54:99:10:07:d7:ca:c3:3a:35:4c:ee: d4:96:4d:33:2e:39:e4:7e:d1:8d:f7:45:b2:c1:c7: a3:fc:b4:22:f9:16:8f:55:7f:0c:7a:d8:69:00:c5: 3e:be:8f:72:4d:87:a0:eb:fa:5b:10:cb:2a:39:d3: 37:03:99:44:a3:0d:87:87:ac:a5:8d:0b:a9:a6:95: 82:1f:c8:df:fe:12:83:56:8e:2f:56:39:24:0c:c7: 94:3d:ce:e2:97:86:bc:f5:ec:cc:56:5f:0d:13:e0: 18:6b:f4:30:d8:d7:1d:cc:df:40:4c:bb:b2:e7:91: 17:cf:cc:51:8c:74:2c:6a:07:d0:c3:d9:22:6a:a2: 96:64:ab:24:aa:7e:df:f7:52:de:86:53:4a:0d:86: 0b:52:bc:31:c2:0e:ee:92:c0:d7:ac:1d:dd:3f:6f: 17:18:62:02:2a:bb:63:ac:49:b3:ae:f8:dd:5f:af: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:18:59:44:99:87:46:3E:8D:65:F1:24:50:0D:5F:C0:94:B1:7E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae76414c-aa5b-3647-801d-9c3002b201b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a3:2a:8b:86:90:43:22:76:37:df:42:eb:30:17:8d:0b:6a: b3:e0:d5:a3:66:ed:0b:be:5e:07:3a:4b:9a:c4:d5:dc:e0:e7: 26:90:ca:99:18:f7:39:ae:5a:68:b3:9e:da:d3:ec:2a:97:19: 05:96:30:b6:34:9e:8d:5c:25:19:17:d9:17:9d:17:ce:8c:0b: bd:e1:98:4c:eb:45:92:d7:6a:03:0b:0f:42:fe:23:e5:87:3e: 26:35:98:7d:ee:63:39:c3:03:ce:a1:84:be:6a:ac:42:f9:c2: 77:27:5b:70:3b:df:84:ac:e8:be:a1:1b:3a:a9:3a:40:8c:dc: ca:a6:17:bb:c5:f8:fc:92:3f:a0:ad:3f:84:dc:29:b4:72:59: d2:92:f7:1f:dd:81:29:8f:71:07:cb:32:ae:7f:96:76:47:4c: b4:e1:0d:98:32:89:4a:11:0a:a6:e8:eb:ce:0d:34:fd:97:11: 80:d1:5f:a2:f0:df:21:74:2b:52:07:49:bb:ad:75:c1:f1:5d: d3:83:bf:7f:85:ca:a1:87:41:c0:87:7f:ae:03:3c:63:da:99: 34:fd:a5:11:31:8f:79:7e:16:34:72:e6:a7:17:5c:1b:ef:49: af:9e:6f:c6:ba:7e:dc:11:78:79:22:fc:5b:04:e8:cc:6e:82: 84:1d:ab:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WJZZ0KXeehpCG+cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTE0MTA0MloXDTI2MTIyODE1MTA0MlowLzEtMCsGA1UEAxMk NTM0YmIxNzMtZTdhNi00OTIxLWIxNzUtMWVhN2ZmNDZjMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+8S2bF9HycPUD7h6cXr/eJwGGsXlTTGLH9E kl89FHi5zgkF33RUy7NhFnVqeZtXIMsauxM6WZ4V/pDHzFIAriLjwAkSSdzYbEhe e91ZVJkQB9fKwzo1TO7Ulk0zLjnkftGN90Wywcej/LQi+RaPVX8MethpAMU+vo9y TYeg6/pbEMsqOdM3A5lEow2Hh6yljQupppWCH8jf/hKDVo4vVjkkDMeUPc7il4a8 9ezMVl8NE+AYa/Qw2NcdzN9ATLuy55EXz8xRjHQsagfQw9kiaqKWZKskqn7f91Le hlNKDYYLUrwxwg7uksDXrB3dP28XGGICKrtjrEmzrvjdX6+jHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0YWUSZh0Y+jWXxJFANX8CUsX4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWU3NjQxNGMtYWE1Yi0z NjQ3LTgwMWQtOWMzMDAyYjIwMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJhVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACijKouGkEMidjffQuswF40LarPg1aNm7Qu+Xgc6S5rE1dzg5yaQypkY 9zmuWmizntrT7CqXGQWWMLY0no1cJRkX2RedF86MC73hmEzrRZLXagMLD0L+I+WH PiY1mH3uYznDA86hhL5qrEL5wncnW3A734Ss6L6hGzqpOkCM3MqmF7vF+PySP6Ct P4TcKbRyWdKS9x/dgSmPcQfLMq5/lnZHTLThDZgyiUoRCqbo684NNP2XEYDRX6Lw 3yF0K1IHSbutdcHxXdODv3+FyqGHQcCHf64DPGPamTT9pRExj3l+FjRy5qcXXBvv Sa+eb8a6ftwReHki/FsE6MxugoQdq44= -----END CERTIFICATE-----Generated at Tue Oct 27 18:14:28 2026 by rpki-client