$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa File: 11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa (raw, json) Hash identifier: l27NX5RlXgczLJAApGlJqmTLbCAR2Ez+vEg/lxgP+8c= Subject key identifier: 7C:A3:80:A1:16:9F:7C:7A:75:1E:4F:2E:A0:AB:72:17:E5:24:37:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E957425711A141EEA858D4980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa Signing time: Wed 22 Jul 2026 13:37:59 +0000 ROA not before: Wed 22 Jul 2026 13:37:59 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 398721 IP address blocks: 38.3.64.0/20 maxlen: 20 38.3.96.0/19 maxlen: 20 38.9.64.0/19 maxlen: 19 38.17.47.0/24 maxlen: 24 38.18.128.0/21 maxlen: 21 38.21.48.0/21 maxlen: 21 38.23.160.0/19 maxlen: 19 38.23.224.0/19 maxlen: 19 38.29.128.0/20 maxlen: 20 38.30.128.0/19 maxlen: 19 38.35.192.0/19 maxlen: 19 38.39.136.0/21 maxlen: 21 38.40.96.0/20 maxlen: 20 38.40.112.0/20 maxlen: 20 38.49.160.0/19 maxlen: 19 38.55.64.0/21 maxlen: 21 38.59.160.0/20 maxlen: 20 38.61.48.0/20 maxlen: 20 38.61.64.0/19 maxlen: 19 38.74.32.0/20 maxlen: 20 38.80.94.0/23 maxlen: 23 38.80.96.0/20 maxlen: 20 38.85.160.0/19 maxlen: 19 38.86.0.0/19 maxlen: 19 38.108.78.0/24 maxlen: 24 38.108.82.0/24 maxlen: 24 38.131.64.0/19 maxlen: 19 38.133.32.0/20 maxlen: 20 38.141.128.0/19 maxlen: 19 38.141.170.0/23 maxlen: 23 38.141.172.0/23 maxlen: 23 38.141.174.0/24 maxlen: 24 38.141.192.0/19 maxlen: 19 38.143.192.0/19 maxlen: 19 38.145.85.0/24 maxlen: 24 38.147.240.0/20 maxlen: 20 38.175.128.0/19 maxlen: 19 38.240.192.0/19 maxlen: 19 149.115.32.0/20 maxlen: 20 149.115.64.0/19 maxlen: 20 149.115.192.0/20 maxlen: 20 154.22.96.0/19 maxlen: 19 154.27.32.0/19 maxlen: 19 207.60.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:95:74:25:71:1a:14:1e:ea:85:8d:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 22 13:37:59 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=636ea84c-bf1b-4b04-94fb-d5cde21261e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:86:39:25:8f:01:05:c6:89:e2:e2:1d:d4: 8c:02:1c:eb:16:bf:ab:24:a2:b9:7c:b0:96:26:3d: 09:85:21:4f:4a:c9:80:be:ac:49:86:74:1b:28:bf: 91:a9:bc:a4:9f:9c:0f:1d:d4:27:3b:3e:36:6b:48: ed:fc:fb:fe:af:8c:11:cc:62:50:89:0f:c8:71:96: 96:83:2c:9a:fa:1f:68:48:3b:e0:43:19:9a:b4:fe: 44:cf:0f:50:76:50:c5:e9:ff:59:ae:86:ab:cc:41: 55:d6:f8:da:45:a8:52:60:74:b5:01:c3:90:d2:e9: e6:ce:93:9e:0a:d3:4c:75:9e:0d:e5:c5:b9:92:4e: 84:b9:00:60:a5:dc:10:7c:06:52:71:32:70:bb:03: 22:f5:e0:ab:e7:92:07:5a:e0:e0:c7:11:fb:c4:08: 83:b0:1f:0a:12:bd:55:98:83:a1:89:97:7b:e7:23: c9:28:a4:2d:4c:1a:1c:9f:2b:00:fa:d4:91:dd:37: 4c:dd:cc:4f:67:6a:bf:c1:e9:7c:e0:de:11:22:9e: 61:19:b6:e3:6f:05:12:a0:3d:e1:15:3f:1f:fe:5f: be:1f:04:a2:da:53:43:4b:43:bd:bb:2d:54:25:59: 09:9c:1b:ab:89:6f:9a:3c:d2:98:50:2f:9c:72:a0: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:80:A1:16:9F:7C:7A:75:1E:4F:2E:A0:AB:72:17:E5:24:37:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.64.0/20 38.3.96.0/19 38.9.64.0/19 38.17.47.0/24 38.18.128.0/21 38.21.48.0/21 38.23.160.0/19 38.23.224.0/19 38.29.128.0/20 38.30.128.0/19 38.35.192.0/19 38.39.136.0/21 38.40.96.0/19 38.49.160.0/19 38.55.64.0/21 38.59.160.0/20 38.61.48.0-38.61.95.255 38.74.32.0/20 38.80.94.0-38.80.111.255 38.85.160.0/19 38.86.0.0/19 38.108.78.0/24 38.108.82.0/24 38.131.64.0/19 38.133.32.0/20 38.141.128.0/19 38.141.170.0-38.141.174.255 38.141.192.0/19 38.143.192.0/19 38.145.85.0/24 38.147.240.0/20 38.175.128.0/19 38.240.192.0/19 149.115.32.0/20 149.115.64.0/19 149.115.192.0/20 154.22.96.0/19 154.27.32.0/19 207.60.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:04:6d:4d:34:d8:62:e4:6e:cc:e1:dd:96:00:37:76:9e:cb: 5d:ae:48:24:bb:ca:5b:5e:af:51:ab:8e:b6:9d:01:ec:d4:06: 9b:17:98:d0:0f:df:26:cf:5c:cc:ff:d0:0f:88:d8:5b:dc:98: 95:2a:01:fe:1d:4e:7a:e9:78:89:7a:83:f2:db:2e:0c:7b:63: 57:45:e0:01:dc:f0:4e:10:92:ae:ef:74:24:a9:d1:05:1f:ab: 25:40:be:9d:70:36:5c:ed:88:6f:ab:d6:1b:63:60:95:c2:1e: b0:77:3f:8b:4a:a6:77:d9:86:e1:6c:bb:43:82:90:48:79:6f: 3f:e5:e4:b4:55:77:27:2b:ef:22:bd:a9:8f:29:1b:a2:f7:29: 52:7a:5f:76:80:f0:bb:ac:83:0c:a3:eb:b3:0b:c3:f7:0d:d2: 68:c4:95:a0:e4:9b:a6:16:f5:b4:f1:96:c4:c6:b3:41:e7:c1: 10:6b:60:2b:3b:69:74:fd:73:bd:c2:70:6e:2a:b5:2d:d5:d7: 6f:38:ef:7e:97:bf:6a:72:ca:90:d3:75:19:4f:85:e8:75:65: d7:98:1b:79:16:6a:85:3e:10:e6:ab:45:c2:54:20:6b:12:79: e3:a7:eb:78:c3:2d:89:c0:6f:80:d0:14:10:81:56:0a:7f:bb: e9:c6:c4:49 -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWE6VdCVxGhQe6oWNSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMjEzMzc1OVoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NjM2ZWE4NGMtYmYxYi00YjA0LTk0ZmItZDVjZGUyMTI2MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwCGOSWPAQXGieLiHdSMAhzrFr+rJKK5fLCW Jj0JhSFPSsmAvqxJhnQbKL+Rqbykn5wPHdQnOz42a0jt/Pv+r4wRzGJQiQ/IcZaW gyya+h9oSDvgQxmatP5Ezw9QdlDF6f9ZroarzEFV1vjaRahSYHS1AcOQ0unmzpOe CtNMdZ4N5cW5kk6EuQBgpdwQfAZScTJwuwMi9eCr55IHWuDgxxH7xAiDsB8KEr1V mIOhiZd75yPJKKQtTBocnysA+tSR3TdM3cxPZ2q/wel84N4RIp5hGbbjbwUSoD3h FT8f/l++HwSi2lNDS0O9uy1UJVkJnBuriW+aPNKYUC+ccqB7vQIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFHyjgKEWn3x6dR5PLqCrchflJDcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTFmZjZiNGUtMmJiNi0z YTU4LTkzZDQtYmRiOTY1YzM0YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEBCYDQAMEBSYDYAMEBSYJQAMEACYRLwMEAyYSgAMEAyYVMAMEBSYXoAMEBSYX 4AMEBCYdgAMEBSYegAMEBSYjwAMEAyYniAMEBSYoYAMEBSYxoAMEAyY3QAMEBCY7 oDAMAwQEJj0wAwQFJj1AAwQEJkogMAwDBAEmUF4DBAQmUGADBAUmVaADBAUmVgAD BAAmbE4DBAAmbFIDBAUmg0ADBAQmhSADBAUmjYAwDAMEASaNqgMEACaNrgMEBSaN wAMEBSaPwAMEACaRVQMEBCaT8AMEBSavgAMEBSbwwAMEBJVzIAMEBZVzQAMEBJVz wAMEBZoWYAMEBZobIAMEBc88QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiBG1NNNhi5G7M4d2WADd2nstd rkgku8pbXq9Rq462nQHs1AabF5jQD98mz1zM/9APiNhb3JiVKgH+HU566XiJeoPy 2y4Me2NXReAB3PBOEJKu73QkqdEFH6slQL6dcDZc7Yhvq9YbY2CVwh6wdz+LSqZ3 2YbhbLtDgpBIeW8/5eS0VXcnK+8ivamPKRui9ylSel92gPC7rIMMo+uzC8P3DdJo xJWg5JumFvW08ZbExrNB58EQa2ArO2l0/XO9wnBuKrUt1ddvOO9+l79qcsqQ03UZ T4XodWXXmBt5FmqFPhDmq0XCVCBrEnnjp+t4wy2JwG+A0BQQgVYKf7vpxsRJ -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:20 2026 by rpki-client