$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/820da546-2211-3781-82ae-6a7eef799443.roa File: 820da546-2211-3781-82ae-6a7eef799443.roa (raw, json) Hash identifier: 6FrKSfhl9nPQuM2yAXE7oc+s9vLJhO21u5SGhqQlV54= Subject key identifier: F8:4A:00:1D:30:7C:C6:90:FD:4B:C3:56:0C:19:03:B8:41:A5:2D:96 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E3069AD96357BF5733EE10700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/820da546-2211-3781-82ae-6a7eef799443.roa Signing time: Tue 16 Jun 2026 09:00:12 +0000 ROA not before: Tue 16 Jun 2026 09:00:12 +0000 ROA not after: Mon 14 Sep 2026 09:00:12 +0000 asID: 13692 IP address blocks: 38.21.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:69:ad:96:35:7b:f5:73:3e:e1:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 16 09:00:12 2026 GMT Not After : Sep 14 09:00:12 2026 GMT Subject: CN=b1326de7-204f-4abe-9797-437384eebb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:16:df:43:7d:41:7b:7d:fa:0c:b2:13:46:ca: 12:9e:b8:85:f2:31:ce:7e:f2:c8:62:e0:ed:59:56: 8f:d2:bd:7d:91:96:2b:0f:b2:9e:4d:38:dd:ca:74: a3:b7:70:3d:54:d1:8e:b1:2c:9f:eb:30:20:6b:3b: 36:6f:54:83:a1:61:c3:9b:e4:a8:40:6e:c0:ac:f4: 2e:c4:fe:b6:8b:34:83:25:11:a4:58:cc:ff:ec:ae: 0f:27:58:08:cb:ee:31:59:5e:64:41:50:5c:2c:e0: 8a:0c:12:e1:4c:20:15:bb:27:13:d8:36:bb:26:db: 73:da:79:36:ea:1c:26:6b:10:76:8b:20:09:d1:ca: e9:83:3e:be:cb:36:a8:2f:7c:a2:f3:4e:c2:e1:45: 47:b2:68:43:14:92:80:65:82:8e:ef:47:97:30:9e: 56:47:c4:ab:19:22:43:5b:0c:85:ed:5d:30:90:e6: cf:4e:1f:84:9d:0e:9e:80:28:b3:5c:67:7e:f7:4d: f2:e6:77:09:77:b7:24:02:d3:07:7a:b2:59:eb:02: 5e:c6:12:d5:a0:58:59:96:e6:f4:c9:8c:4e:0a:9b: 25:6b:fd:08:2f:36:39:1d:c3:dd:d0:7b:c0:4a:54: bf:de:0d:06:61:c6:c7:9a:5d:81:f8:ab:cf:62:00: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:00:1D:30:7C:C6:90:FD:4B:C3:56:0C:19:03:B8:41:A5:2D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/820da546-2211-3781-82ae-6a7eef799443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f5:47:5e:b0:f6:b7:e7:c9:fe:f6:af:cb:3b:e6:e1:fe:7e: 64:55:c1:e2:31:66:dd:27:15:ad:f8:b2:03:15:ba:fb:ee:ef: 57:c9:88:44:66:c1:07:17:e1:da:be:55:6f:c8:dd:5f:5e:c8: 40:49:e2:1a:fc:da:e6:45:40:ac:63:20:2c:89:13:87:9b:1c: 4e:ca:05:9e:d1:e0:81:9d:21:11:d1:7a:31:48:96:78:80:f6: b1:bb:54:cc:59:e6:45:9a:d0:8a:04:96:12:22:b9:29:7f:62: d9:d4:09:db:b5:83:2c:d2:87:37:2f:29:b0:84:27:f6:65:57: 19:31:b5:c9:b9:46:1d:e4:f8:56:a7:67:b0:98:b0:0d:b3:ed: 62:df:9b:4a:9f:c4:e1:dd:b8:15:5d:c3:b0:b5:63:32:e3:67: 96:cf:b3:75:73:9c:40:14:c8:87:5e:b8:27:9c:71:18:c9:dd: ff:cf:05:b1:e7:40:98:35:39:cf:c9:c5:48:9c:3c:b1:f9:e4: aa:7e:a7:0d:69:93:fc:9d:46:28:e4:5a:f5:6b:35:e9:28:1d: 90:e8:bc:64:bf:3c:5c:77:18:ec:76:06:0e:7f:71:65:5c:dd: 69:59:63:de:cf:4d:da:c1:61:d6:e9:c5:13:08:5e:ef:26:fc: b7:64:be:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4waa2WNXv1cz7hBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk YjEzMjZkZTctMjA0Zi00YWJlLTk3OTctNDM3Mzg0ZWViYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBbfQ31Be336DLITRsoSnriF8jHOfvLIYuDt WVaP0r19kZYrD7KeTTjdynSjt3A9VNGOsSyf6zAgazs2b1SDoWHDm+SoQG7ArPQu xP62izSDJRGkWMz/7K4PJ1gIy+4xWV5kQVBcLOCKDBLhTCAVuycT2Da7Jttz2nk2 6hwmaxB2iyAJ0crpgz6+yzaoL3yi807C4UVHsmhDFJKAZYKO70eXMJ5WR8SrGSJD WwyF7V0wkObPTh+EnQ6egCizXGd+903y5ncJd7ckAtMHerJZ6wJexhLVoFhZlub0 yYxOCpsla/0ILzY5HcPd0HvASlS/3g0GYcbHml2B+KvPYgBi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhKAB0wfMaQ/UvDVgwZA7hBpS2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODIwZGE1NDYtMjIxMS0z NzgxLTgyYWUtNmE3ZWVmNzk5NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJhU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD1R16w9rfnyf72r8s75uH+fmRVweIxZt0nFa34sgMVuvvu71fJiERm wQcX4dq+VW/I3V9eyEBJ4hr82uZFQKxjICyJE4ebHE7KBZ7R4IGdIRHRejFIlniA 9rG7VMxZ5kWa0IoElhIiuSl/YtnUCdu1gyzShzcvKbCEJ/ZlVxkxtcm5Rh3k+Fan Z7CYsA2z7WLfm0qfxOHduBVdw7C1YzLjZ5bPs3VznEAUyIdeuCeccRjJ3f/PBbHn QJg1Oc/JxUicPLH55Kp+pw1pk/ydRijkWvVrNekoHZDovGS/PFx3GOx2Bg5/cWVc 3WlZY97PTdrBYdbpxRMIXu8m/LdkvjI= -----END CERTIFICATE-----Generated at Thu Jul 23 20:25:55 2026 by rpki-client