$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa File: 5af6404e-b862-3f39-82aa-0122630f1a3a.roa (raw, json) Hash identifier: JO6uiOg8Z2v+2B0q3DX/XDJRgABxOxelIHhj2wt1Dwg= Subject key identifier: 03:98:01:69:B8:7C:C7:90:9D:B1:8C:46:85:DC:BD:31:47:6C:72:65 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E8B24F42F28C1A8A8D8B8DD30 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 204731 IP address blocks: 38.126.80.0/20 maxlen: 22 154.62.164.0/22 maxlen: 23 154.62.168.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:f4:2f:28:c1:a8:a8:d8:b8:dd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=f733a6e7-4cf2-4e92-9069-6d5376f15ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:97:3f:42:a6:bf:06:7a:00:a2:05:d6:0a: 78:bc:63:10:31:06:5a:02:c3:66:59:e5:4b:8f:e6: f6:b5:33:13:25:2d:36:80:1b:03:5d:0d:55:67:0b: 49:3d:63:d7:32:bf:ff:20:5e:98:8a:34:ff:81:29: 40:b5:81:20:7f:96:0d:35:83:1e:0d:54:2a:0c:e5: df:55:40:cb:c2:5d:0c:5a:05:83:74:a4:72:93:b1: 07:e9:07:14:33:87:ff:9b:03:01:8f:ab:94:c4:25: 0d:fe:2f:58:bb:36:93:3d:84:53:1e:b9:8d:11:b8: 74:99:8a:dc:4d:66:de:83:33:63:d8:b5:d8:59:c7: 0f:c8:93:b8:1f:94:00:5b:7f:63:22:f1:ef:2b:cc: ca:18:3e:cc:18:8d:f0:29:4e:0d:46:36:06:01:61: 0a:e1:ae:8b:cb:b1:3f:9c:aa:99:6a:b1:bf:9f:54: ca:aa:3f:8c:c5:c9:56:c4:56:ab:39:e1:a7:11:73: 30:8f:9f:39:48:2e:ef:ad:05:87:9c:24:8b:c8:47: 49:9c:64:7c:85:63:5c:dc:17:cd:f2:b3:be:e1:d7: 7b:7a:e1:42:38:90:fa:25:ac:5e:6c:e2:ae:fa:37: a8:e1:fe:dc:fd:a2:17:a9:c4:8a:d3:9a:76:7d:e6: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:98:01:69:B8:7C:C7:90:9D:B1:8C:46:85:DC:BD:31:47:6C:72:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.126.80.0/20 154.62.164.0-154.62.171.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e1:10:05:4a:df:d8:20:68:ec:91:98:61:34:fc:2b:e3:0f: 87:fd:3c:10:a2:e9:83:7d:dd:05:8a:08:06:91:5d:d9:45:95: fe:b9:74:1e:1c:7c:fe:09:14:07:b9:11:b9:4f:a8:43:4b:85: dd:29:7b:80:b2:e4:2d:1d:ba:d4:20:74:1b:72:1a:f9:0b:d8: 74:f3:8b:7f:ae:7e:c7:1b:90:6c:22:a8:50:22:37:7e:1d:3c: 59:6c:ce:88:c8:44:ef:12:c7:18:85:bb:fd:0b:53:b8:3c:94: e3:10:ea:04:b0:84:92:a5:99:ab:3d:96:7d:40:35:ed:a8:bd: 06:95:23:c6:12:de:f6:18:26:27:41:92:d0:b7:b7:d5:75:c1: cb:9d:20:46:4a:f1:00:c5:c3:2d:17:40:15:f8:b9:3e:2e:d3: 7f:7a:33:30:96:17:2a:31:64:ac:f3:46:c5:71:73:61:2c:f8: bf:b6:66:97:d6:d8:65:d9:b2:09:dc:88:ad:70:e4:80:d2:d0: 98:14:2f:c5:c8:6c:d8:e9:1d:c5:8b:7c:e7:b7:f7:84:27:da: 09:73:45:2d:d6:ec:db:19:65:7e:2a:a4:61:c1:0d:63:fd:bb: 40:42:3e:e0:8d:4d:df:97:40:a2:6f:16:e8:d4:27:08:c1:c2: e6:8a:60:af -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE6LJPQvKMGoqNi43TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk ZjczM2E2ZTctNGNmMi00ZTkyLTkwNjktNmQ1Mzc2ZjE1Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj6XP0KmvwZ6AKIF1gp4vGMQMQZaAsNmWeVL j+b2tTMTJS02gBsDXQ1VZwtJPWPXMr//IF6YijT/gSlAtYEgf5YNNYMeDVQqDOXf VUDLwl0MWgWDdKRyk7EH6QcUM4f/mwMBj6uUxCUN/i9YuzaTPYRTHrmNEbh0mYrc TWbegzNj2LXYWccPyJO4H5QAW39jIvHvK8zKGD7MGI3wKU4NRjYGAWEK4a6Ly7E/ nKqZarG/n1TKqj+MxclWxFarOeGnEXMwj585SC7vrQWHnCSLyEdJnGR8hWNc3BfN 8rO+4dd7euFCOJD6JaxebOKu+jeo4f7c/aIXqcSK05p2feamWQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFAOYAWm4fMeQnbGMRoXcvTFHbHJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFmNjQwNGUtYjg2Mi0z ZjM5LTgyYWEtMDEyMjYzMGYxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEJn5QMAwD BAKaPqQDBAKaPqgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEANeEQBUrf2CBo7JGYYTT8K+MPh/08EKLpg33d BYoIBpFd2UWV/rl0Hhx8/gkUB7kRuU+oQ0uF3Sl7gLLkLR261CB0G3Ia+QvYdPOL f65+xxuQbCKoUCI3fh08WWzOiMhE7xLHGIW7/QtTuDyU4xDqBLCEkqWZqz2WfUA1 7ai9BpUjxhLe9hgmJ0GS0Le31XXBy50gRkrxAMXDLRdAFfi5Pi7Tf3ozMJYXKjFk rPNGxXFzYSz4v7Zml9bYZdmyCdyIrXDkgNLQmBQvxchs2OkdxYt857f3hCfaCXNF Ldbs2xllfiqkYcENY/27QEI+4I1N35dAom8W6NQnCMHC5opgrw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:04 2026 by rpki-client