$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa File: 84840b0a-e228-38dd-87c4-2a9194fb0372.roa (raw, json) Hash identifier: 7VnNoF94kcLxzxGV2HaBg1w8NuloRX3lt0ciz3BnZ/c= Subject key identifier: BC:F7:59:50:14:F8:A2:7D:0F:81:44:FE:BD:92:16:DE:A1:D5:5E:B5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E4989D8D4567549661DBB3580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa Signing time: Thu 25 Jun 2026 09:00:13 +0000 ROA not before: Thu 25 Jun 2026 09:00:13 +0000 ROA not after: Wed 23 Sep 2026 09:00:13 +0000 asID: 262231 IP address blocks: 38.21.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:49:89:d8:d4:56:75:49:66:1d:bb:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 25 09:00:13 2026 GMT Not After : Sep 23 09:00:13 2026 GMT Subject: CN=bdd683bd-3426-4455-8720-e2f07ca42296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:49:db:e3:f3:fa:f3:f9:75:cb:62:f8:75: 29:d5:0a:7c:ad:8a:da:f6:82:2a:79:a9:4f:e3:0c: d8:ae:b1:ca:3c:60:1f:cd:d9:47:ef:0d:75:d8:37: 28:fd:9e:17:e5:a1:01:41:f3:fa:e4:64:9c:98:13: 4c:ef:10:14:49:38:ee:bf:af:9a:d6:7d:83:14:2e: a7:3a:19:58:5d:71:b7:d1:c2:ca:7f:69:4a:8d:ca: f6:98:68:6d:cd:e8:a2:67:39:c4:1c:03:af:a9:da: 88:7b:d4:d7:91:70:3c:26:da:cb:38:15:56:74:64: 53:31:29:3d:ec:04:d2:93:97:fd:62:4f:6f:65:41: 31:29:fe:c8:12:2d:f1:5c:eb:47:21:b0:12:a5:a9: 35:4a:83:ff:9b:a2:b8:82:9f:72:af:88:24:95:d0: 93:ff:4f:df:66:26:5b:26:34:c1:49:13:ee:1d:ef: 21:97:d8:35:2e:dc:c7:ae:d5:cf:07:44:08:93:bf: d1:00:89:6e:7e:ef:d1:47:99:2b:6a:22:b6:d0:1a: b3:d1:ec:76:86:dc:54:37:9f:f5:d5:51:ce:26:33: fa:86:11:11:b4:66:17:53:6a:3c:d1:e2:1f:88:f4: ed:4f:92:1f:65:ec:53:e8:f4:12:7b:b7:ab:6f:82: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:59:50:14:F8:A2:7D:0F:81:44:FE:BD:92:16:DE:A1:D5:5E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:18:49:77:34:ee:fc:44:2b:92:28:a5:e3:b6:71:e8:43:35: ef:be:3f:70:bd:be:39:d3:ca:1f:3f:f9:77:d9:70:a4:45:19: b0:2e:1b:86:ef:fd:91:a2:48:96:a6:ba:41:f6:53:ed:7e:c4: ed:28:52:60:da:93:1c:bf:b1:74:ac:e5:a0:b6:b7:58:f2:4f: 4f:6e:54:68:8a:fe:d3:93:84:0f:7d:a5:44:14:85:54:ef:71: 1d:fd:ad:03:d3:4e:e1:e9:35:31:a3:6a:1e:9f:10:a2:35:66: d4:e3:58:2d:65:f8:ee:e0:06:5c:56:b5:fe:a5:5c:26:aa:e5: f2:31:56:e8:85:f3:aa:1a:82:a2:28:f0:cd:af:56:a7:bc:5c: ee:1c:8d:58:2f:1e:37:75:f1:ed:9b:7a:da:d3:26:17:62:32: e9:73:13:0f:d8:11:f7:98:d3:4b:39:05:59:65:28:7d:95:6c: c3:54:92:00:a9:40:55:79:93:21:d6:86:27:f1:cd:23:56:b0: 08:ec:bf:3a:fd:b7:94:18:55:21:b2:4a:b3:94:39:87:9d:74: 7a:d3:06:6c:87:c2:b1:9b:66:8f:e0:4b:49:2a:bc:56:8e:da: f6:85:81:42:f8:e3:a0:52:a1:0a:22:31:3e:0b:07:18:b1:6b: a6:bf:bc:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5JidjUVnVJZh27NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk YmRkNjgzYmQtMzQyNi00NDU1LTg3MjAtZTJmMDdjYTQyMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1BJ2+Pz+vP5dcti+HUp1Qp8rYra9oIqealP 4wzYrrHKPGAfzdlH7w112Dco/Z4X5aEBQfP65GScmBNM7xAUSTjuv6+a1n2DFC6n OhlYXXG30cLKf2lKjcr2mGhtzeiiZznEHAOvqdqIe9TXkXA8JtrLOBVWdGRTMSk9 7ATSk5f9Yk9vZUExKf7IEi3xXOtHIbASpak1SoP/m6K4gp9yr4gkldCT/0/fZiZb JjTBSRPuHe8hl9g1LtzHrtXPB0QIk7/RAIlufu/RR5kraiK20Bqz0ex2htxUN5/1 1VHOJjP6hhERtGYXU2o80eIfiPTtT5IfZexT6PQSe7erb4KfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz3WVAU+KJ9D4FE/r2SFt6h1V61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODQ4NDBiMGEtZTIyOC0z OGRkLTg3YzQtMmE5MTk0ZmIwMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJhVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4YSXc07vxEK5IopeO2cehDNe++P3C9vjnTyh8/+XfZcKRFGbAuG4bv /ZGiSJamukH2U+1+xO0oUmDakxy/sXSs5aC2t1jyT09uVGiK/tOThA99pUQUhVTv cR39rQPTTuHpNTGjah6fEKI1ZtTjWC1l+O7gBlxWtf6lXCaq5fIxVuiF86oagqIo 8M2vVqe8XO4cjVgvHjd18e2betrTJhdiMulzEw/YEfeY00s5BVllKH2VbMNUkgCp QFV5kyHWhifxzSNWsAjsvzr9t5QYVSGySrOUOYeddHrTBmyHwrGbZo/gS0kqvFaO 2vaFgUL446BSoQoiMT4LBxixa6a/vMc= -----END CERTIFICATE-----Generated at Thu Jul 23 20:21:23 2026 by rpki-client