$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa File: 3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa (raw, json) Hash identifier: Wc76LZW6mJlQKtEWUJ2TgsrHryyiiiaO01PkZ6U38VQ= Subject key identifier: C0:DA:DA:89:D8:69:31:3E:74:D0:AA:F4:1A:39:59:E1:C0:75:2A:55 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E2E28FBBD6D1498D7119A0D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa Signing time: Mon 15 Jun 2026 13:38:16 +0000 ROA not before: Mon 15 Jun 2026 13:38:16 +0000 ROA not after: Sun 13 Sep 2026 13:38:16 +0000 asID: 274272 IP address blocks: 38.21.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:28:fb:bd:6d:14:98:d7:11:9a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 15 13:38:16 2026 GMT Not After : Sep 13 13:38:16 2026 GMT Subject: CN=42d7ecd8-0258-4c2a-8d13-21cb7c17b950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:77:ed:75:4d:93:3e:d7:52:cf:ae:5d:23: 44:94:d4:7d:b7:9b:b3:7c:81:b0:28:fa:f4:f3:da: d6:7f:9a:1b:af:9e:71:13:55:6f:f3:c4:0d:ef:7c: 29:f7:c6:6b:74:ec:2b:fa:25:83:84:45:9b:59:52: c5:8c:e3:ff:e8:a0:0d:cf:63:97:6d:6d:d1:34:c9: 86:ff:9e:d1:b2:63:33:47:76:fa:ac:5f:de:8b:30: 3e:83:96:24:61:96:fc:f9:f0:f1:2a:83:b4:9b:f6: 6f:f0:d9:0a:44:ed:78:a6:8c:a7:56:c2:2a:55:68: 96:3e:b1:47:d8:af:bb:32:7a:6e:8e:46:a8:8e:1d: 41:14:85:dd:a8:73:22:59:7a:52:e4:af:15:46:94: 7f:54:5d:01:2d:f5:03:e7:e7:0b:55:58:7c:93:4e: bd:7a:fd:34:ee:11:32:2f:db:d3:6e:60:57:34:f9: bb:3d:19:23:72:af:20:e0:31:0b:a6:81:14:10:08: 74:26:c9:c0:05:ed:63:04:cf:74:dc:72:e7:35:3b: 71:a2:da:a0:57:ef:91:b1:09:c5:f8:20:0a:89:c2: c9:3b:e2:49:39:90:bd:57:11:76:d6:3e:0e:78:36: 5c:c7:5b:49:e5:3d:46:b5:16:57:0e:e0:45:b1:3f: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:DA:89:D8:69:31:3E:74:D0:AA:F4:1A:39:59:E1:C0:75:2A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f5:99:62:ab:8b:67:8a:60:e6:da:c6:90:d1:f9:8d:17:54: 24:31:9e:84:5a:01:f0:cb:59:37:b9:9d:e9:a9:15:b7:91:1a: c6:8c:a0:99:8e:ef:91:de:0d:0c:c9:b4:0f:d9:68:ab:8a:48: bc:ae:8f:64:b4:75:bc:77:12:6e:cd:6c:cb:77:d4:08:eb:5e: 3f:d8:55:2d:a4:63:25:d1:a5:c1:db:c9:7b:64:8f:b2:c2:7f: da:4b:a6:1d:46:4d:36:08:6c:f3:1c:2b:49:65:5a:9b:6f:7e: 39:38:1f:f1:86:51:e8:bb:30:99:b6:60:b5:98:45:51:b7:8a: a6:47:23:6f:16:85:6a:5c:67:e3:99:97:23:f6:2f:34:e4:84: b9:f6:ff:c9:22:88:4b:e8:bb:1d:a0:f1:ec:12:88:37:d6:59: 3d:03:e8:9a:6b:52:ec:38:9b:a8:e4:52:9d:ca:5c:d7:78:99: fd:19:48:92:89:7f:56:b3:e0:51:d8:94:68:d8:6b:3c:8b:a0: 34:b8:78:59:fb:65:89:9a:fc:13:76:3f:31:2f:bc:62:56:53: 76:f3:3c:7f:9e:b3:44:ce:7e:43:0d:3a:fd:ee:0f:2a:d9:48: 7b:b2:b3:92:30:b0:dd:29:96:5d:b2:8e:50:e3:9d:7c:44:4f: f5:5b:35:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4uKPu9bRSY1xGaDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxNTEzMzgxNloXDTI2MDkxMzEzMzgxNlowLzEtMCsGA1UEAxMk NDJkN2VjZDgtMDI1OC00YzJhLThkMTMtMjFjYjdjMTdiOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2md37XVNkz7XUs+uXSNElNR9t5uzfIGwKPr0 89rWf5obr55xE1Vv88QN73wp98ZrdOwr+iWDhEWbWVLFjOP/6KANz2OXbW3RNMmG /57RsmMzR3b6rF/eizA+g5YkYZb8+fDxKoO0m/Zv8NkKRO14poynVsIqVWiWPrFH 2K+7Mnpujkaojh1BFIXdqHMiWXpS5K8VRpR/VF0BLfUD5+cLVVh8k069ev007hEy L9vTbmBXNPm7PRkjcq8g4DELpoEUEAh0JsnABe1jBM903HLnNTtxotqgV++RsQnF +CAKicLJO+JJOZC9VxF21j4OeDZcx1tJ5T1GtRZXDuBFsT+rnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDa2onYaTE+dNCq9Bo5WeHAdSpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2ZjN2YzNWEtOWY0OC0z ZDkzLWFjYTUtZGU3N2EzY2VhN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn1mWKri2eKYObaxpDR+Y0XVCQxnoRaAfDLWTe5nempFbeRGsaMoJmO 75HeDQzJtA/ZaKuKSLyuj2S0dbx3Em7NbMt31AjrXj/YVS2kYyXRpcHbyXtkj7LC f9pLph1GTTYIbPMcK0llWptvfjk4H/GGUei7MJm2YLWYRVG3iqZHI28WhWpcZ+OZ lyP2LzTkhLn2/8kiiEvoux2g8ewSiDfWWT0D6JprUuw4m6jkUp3KXNd4mf0ZSJKJ f1az4FHYlGjYazyLoDS4eFn7ZYma/BN2PzEvvGJWU3bzPH+es0TOfkMNOv3uDyrZ SHuys5IwsN0pll2yjlDjnXxET/VbNV4= -----END CERTIFICATE-----Generated at Thu Jul 23 20:20:03 2026 by rpki-client