$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa File: a508563b-abf1-396d-a8d4-35b26074b998.roa (raw, json) Hash identifier: WjyMiiHMLxOHgrDXEXlczHz9BUPRa6/DfESiJ88y20E= Subject key identifier: 90:F4:C2:D7:51:93:F5:14:11:8F:DA:1E:44:CE:64:80:F3:25:F6:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F46A7D8A9881073E2EC574700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 215886 IP address blocks: 38.21.160.0/20 maxlen: 21 38.27.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:d8:a9:88:10:73:e2:ec:57:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=3481135e-a252-4a35-b3ef-ad05d2cd4c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:c9:e5:ec:c4:61:60:24:a7:75:b9:97:5f: fc:90:9d:27:89:4a:6d:5d:8e:63:8f:1e:ee:5a:43: 26:2a:a5:03:51:b4:a7:3d:bf:e3:a5:c7:70:db:ec: 25:6f:dc:6e:56:94:87:8d:9b:51:7e:20:fe:28:32: 3f:cf:62:f5:61:0b:d0:09:79:28:17:ea:2e:b7:a8: 6a:31:67:85:6f:1d:3c:7b:56:0c:84:db:7d:96:f0: 4c:07:27:e2:a8:05:d5:bf:ea:de:fd:f2:82:78:2a: d4:a7:26:54:7f:c9:83:ac:4f:41:85:35:36:21:e5: ae:86:d4:0a:d4:e6:0f:79:25:44:99:f4:0e:0f:4b: 23:bb:e9:bb:dc:b0:35:86:de:91:a3:eb:77:16:3b: d9:ba:5d:02:06:0e:5f:f8:6c:f2:ba:02:73:e4:0e: 6f:f0:9b:95:3c:01:fe:07:fe:ea:10:9d:3c:05:b8: 1d:d9:7a:5d:cd:81:e4:a6:26:9b:db:b7:16:43:86: 24:ad:42:96:0c:b9:a7:14:fb:a4:4a:fc:20:b0:49: b3:2c:06:e4:35:ae:bc:2a:0d:f4:da:8c:82:f9:c9: cb:b4:c2:00:1f:24:26:07:5a:ef:96:60:c9:15:7c: 19:30:83:bd:fc:c7:bc:c0:fc:5d:2f:6f:c2:b1:f2: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F4:C2:D7:51:93:F5:14:11:8F:DA:1E:44:CE:64:80:F3:25:F6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a508563b-abf1-396d-a8d4-35b26074b998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.160.0/20 38.27.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:30:54:17:1a:41:fc:0a:f7:46:3c:61:91:80:94:48:6c:6f: 87:85:8a:73:ee:f8:a1:2a:a1:50:bd:bd:3b:8b:6d:33:e4:5c: 04:92:46:6b:2c:b0:bc:97:32:ee:e0:3b:10:31:f1:cc:03:59: f8:1b:e4:90:3a:e4:cf:a0:78:d6:cb:ac:52:f7:54:92:81:ad: 7a:f0:96:04:2c:8b:4c:74:6d:f6:6f:8e:25:6b:8e:65:02:32: 41:82:f0:85:49:38:db:24:28:c0:9f:ba:55:4f:99:2f:1e:0c: 76:b8:50:a1:71:25:94:c9:4b:ce:a8:8d:61:d8:ac:56:e5:c4: 2c:b2:01:c7:80:d9:42:29:98:9f:7c:63:88:08:24:57:36:76: 55:ad:ba:93:e7:f5:39:86:f9:6a:6c:80:a3:a5:63:07:a5:01: 21:08:75:2d:11:d9:7f:d6:67:87:3c:60:e3:14:94:5d:a9:ff: 17:af:fc:f3:b6:c7:81:a2:90:56:d0:0f:0a:3c:6c:4b:81:0e: 41:16:84:41:a1:55:26:a7:80:e3:ff:9e:10:b3:1b:31:c7:a5: 9b:0d:72:2d:26:fc:30:57:7c:b6:3c:47:37:81:eb:e4:c2:19: 58:70:ae:fb:27:ad:c4:9c:e5:27:fb:40:4c:a4:c4:ef:0d:e5: 52:47:fa:1e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Gp9ipiBBz4uxXRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzQ4MTEzNWUtYTI1Mi00YTM1LWIzZWYtYWQwNWQyY2Q0YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wvJ5ezEYWAkp3W5l1/8kJ0niUptXY5jjx7u WkMmKqUDUbSnPb/jpcdw2+wlb9xuVpSHjZtRfiD+KDI/z2L1YQvQCXkoF+out6hq MWeFbx08e1YMhNt9lvBMByfiqAXVv+re/fKCeCrUpyZUf8mDrE9BhTU2IeWuhtQK 1OYPeSVEmfQOD0sju+m73LA1ht6Ro+t3FjvZul0CBg5f+GzyugJz5A5v8JuVPAH+ B/7qEJ08Bbgd2XpdzYHkpiab27cWQ4YkrUKWDLmnFPukSvwgsEmzLAbkNa68Kg30 2oyC+cnLtMIAHyQmB1rvlmDJFXwZMIO9/Me8wPxdL2/CsfKrcQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJD0wtdRk/UUEY/aHkTOZIDzJfYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTUwODU2M2ItYWJmMS0z OTZkLWE4ZDQtMzViMjYwNzRiOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJhWgAwQD JhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMowVBcaQfwK90Y8YZGAlEhsb4eFinPu+KEqoVC9vTuLbTPk XASSRmsssLyXMu7gOxAx8cwDWfgb5JA65M+geNbLrFL3VJKBrXrwlgQsi0x0bfZv jiVrjmUCMkGC8IVJONskKMCfulVPmS8eDHa4UKFxJZTJS86ojWHYrFblxCyyAceA 2UIpmJ98Y4gIJFc2dlWtupPn9TmG+WpsgKOlYwelASEIdS0R2X/WZ4c8YOMUlF2p /xev/PO2x4GikFbQDwo8bEuBDkEWhEGhVSangOP/nhCzGzHHpZsNci0m/DBXfLY8 RzeB6+TCGVhwrvsnrcSc5Sf7QEykxO8N5VJH+h4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:42:52 2026 by rpki-client