$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fd71001-d806-33d7-a77b-938d17ff6d6a.roa File: 3fd71001-d806-33d7-a77b-938d17ff6d6a.roa (raw, json) Hash identifier: Zm2CoaQjag87L2QZC10t6hBTfWXFdrlWgjMdFFkpl0g= Subject key identifier: 65:14:0B:98:24:F4:C2:B0:A1:9D:AD:D1:84:34:4C:F1:68:9E:CC:F9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E699F75115203E49A335E1400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fd71001-d806-33d7-a77b-938d17ff6d6a.roa Signing time: Mon 06 Jul 2026 20:49:41 +0000 ROA not before: Mon 06 Jul 2026 20:49:41 +0000 ROA not after: Sun 04 Oct 2026 20:49:41 +0000 asID: 399122 IP address blocks: 38.3.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:9f:75:11:52:03:e4:9a:33:5e:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 6 20:49:41 2026 GMT Not After : Oct 4 20:49:41 2026 GMT Subject: CN=20824a4e-9660-4b06-ab7a-a65361a31f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:04:a1:01:63:6b:49:c4:55:e0:4c:2a:5e: 2d:ef:e6:c5:a2:a6:0f:05:8e:cd:f8:45:a4:ca:d1: 40:f4:e9:e0:6f:a8:5b:16:2b:32:2a:2f:28:62:56: 66:a6:19:e9:f8:7f:ff:b4:b2:f9:06:1b:05:74:e6: 35:37:a2:7c:0a:0b:9f:de:2b:d0:7d:e8:58:41:58: 87:ef:a9:82:70:11:88:61:79:77:28:f7:66:75:5f: fe:68:eb:e6:23:ff:f7:d2:85:ad:68:f1:d9:e2:b6: 46:a2:51:49:9b:1e:e8:d6:b5:54:ac:84:bc:6a:c9: 58:e3:68:48:1a:b7:67:f1:4a:c5:7a:ce:41:d0:a1: e8:d1:ed:bf:89:94:9e:e0:d0:5f:a8:b2:ef:17:82: 37:1d:14:3c:da:e3:b6:e6:bb:7f:59:31:98:09:db: d9:93:9c:a5:b6:75:ab:4e:6c:e6:29:a9:53:a0:d9: c5:ee:50:07:1b:87:b0:aa:d8:36:7a:8a:52:d1:b9: 27:4a:31:d1:11:08:43:65:72:79:25:31:b1:00:1e: b5:d3:09:d1:5d:2a:1e:91:82:6c:b5:f4:f7:eb:89: 87:7f:81:16:04:45:56:f6:0d:58:33:96:ab:02:44: 1d:25:7e:1b:c8:51:32:7f:2e:5e:c0:57:20:13:01: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:14:0B:98:24:F4:C2:B0:A1:9D:AD:D1:84:34:4C:F1:68:9E:CC:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fd71001-d806-33d7-a77b-938d17ff6d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cc:9c:7e:26:d0:bd:2e:cc:82:da:e5:30:eb:47:5c:c6:13: d0:a8:74:d1:f6:fd:00:2a:dc:82:7b:28:ed:66:1a:ae:6b:61: 96:49:fb:71:07:ce:0d:d9:4c:a3:e0:1b:63:ae:90:f8:52:6e: d7:af:de:93:90:41:c7:e4:00:9a:fd:b5:02:f3:a0:0d:e3:59: 08:7f:90:75:59:9f:45:23:6c:59:c6:c4:0f:e7:33:68:b0:52: 57:fb:d4:2c:ab:20:7c:eb:d5:52:4d:2f:37:9b:bd:ec:de:09: db:dd:38:83:78:40:3f:f4:ce:d2:35:d7:6c:22:a7:30:02:b5: 54:03:bd:bc:8d:1d:27:32:55:fd:04:e4:5a:65:eb:65:1a:23: e7:50:c6:01:01:a5:fb:29:4e:00:9d:ba:26:1b:1d:30:ce:93: 9f:68:42:29:cf:30:7b:ea:21:f0:76:f9:50:44:a9:97:c7:0b: f1:1f:12:50:00:af:8b:dc:00:65:51:3d:eb:fa:8d:ca:50:94: a7:21:75:f2:e4:86:2b:af:8b:1b:68:9d:4e:d5:a9:37:8b:e0: 6b:8e:e6:c5:ca:5f:5f:42:70:7b:34:2c:71:ec:82:db:83:0c: 36:7d:a0:64:c1:da:5e:c1:25:d3:a6:ba:b9:0c:77:61:24:ba: f6:bd:ac:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5pn3URUgPkmjNeFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcwNjIwNDk0MVoXDTI2MTAwNDIwNDk0MVowLzEtMCsGA1UEAxMk MjA4MjRhNGUtOTY2MC00YjA2LWFiN2EtYTY1MzYxYTMxZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5QEoQFja0nEVeBMKl4t7+bFoqYPBY7N+EWk ytFA9Ongb6hbFisyKi8oYlZmphnp+H//tLL5BhsFdOY1N6J8Cguf3ivQfehYQViH 76mCcBGIYXl3KPdmdV/+aOvmI//30oWtaPHZ4rZGolFJmx7o1rVUrIS8aslY42hI Grdn8UrFes5B0KHo0e2/iZSe4NBfqLLvF4I3HRQ82uO25rt/WTGYCdvZk5yltnWr TmzmKalToNnF7lAHG4ewqtg2eopS0bknSjHREQhDZXJ5JTGxAB610wnRXSoekYJs tfT364mHf4EWBEVW9g1YM5arAkQdJX4byFEyfy5ewFcgEwE7ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUUC5gk9MKwoZ2t0YQ0TPFonsz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2ZkNzEwMDEtZDgwNi0z M2Q3LWE3N2ItOTM4ZDE3ZmY2ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJgNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfMnH4m0L0uzILa5TDrR1zGE9CodNH2/QAq3IJ7KO1mGq5rYZZJ+3EH zg3ZTKPgG2OukPhSbtev3pOQQcfkAJr9tQLzoA3jWQh/kHVZn0UjbFnGxA/nM2iw Ulf71CyrIHzr1VJNLzebvezeCdvdOIN4QD/0ztI112wipzACtVQDvbyNHScyVf0E 5Fpl62UaI+dQxgEBpfspTgCduiYbHTDOk59oQinPMHvqIfB2+VBEqZfHC/EfElAA r4vcAGVRPev6jcpQlKchdfLkhiuvixtonU7VqTeL4GuO5sXKX19CcHs0LHHsgtuD DDZ9oGTB2l7BJdOmurkMd2Ekuva9rGo= -----END CERTIFICATE-----Generated at Thu Jul 23 20:19:49 2026 by rpki-client