$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa File: df0b34e2-e449-34cd-8b4f-82098402cffa.roa (raw, json) Hash identifier: 2I3A8/B1iM4NRpkCAHAFhEzvkmuWUYU96GWlQL20x+Y= Subject key identifier: 02:0C:BE:B8:28:F5:34:FA:1C:47:64:C8:03:5F:9B:F0:46:9B:1F:81 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E66DA0EF4F9636EF580D48D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 393436 IP address blocks: 38.20.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0e:f4:f9:63:6e:f5:80:d4:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=68fb75c3-4cc5-4165-9445-087211802627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:e2:24:ae:1a:9f:99:93:64:79:52:d5:41: ea:3b:9e:aa:81:4c:86:c8:1f:f7:52:ad:56:b5:c8: 2f:cc:2c:31:81:e5:87:44:8e:b1:05:6d:ab:3f:f2: 42:b3:69:92:b6:2a:37:de:ec:89:05:f8:13:66:d1: e4:55:c6:7c:d5:92:bb:e5:97:c9:25:eb:43:10:f2: 71:bf:33:e4:da:6f:31:53:b8:5b:77:e4:13:bc:f9: 3b:c1:a1:be:2a:5b:81:3b:e9:7b:aa:6e:86:1e:69: a2:3a:c0:b9:2c:08:73:16:ab:4a:53:67:21:ca:03: 25:93:2a:61:b2:1e:77:e1:20:a5:7c:6e:22:1d:eb: 9c:9f:1b:10:85:b0:fe:b5:c7:65:e8:06:05:fc:d9: 08:4a:88:2b:36:2a:b9:84:d6:6e:6e:a5:6f:57:7e: 13:cf:e3:3d:bd:ae:5c:68:1d:0a:fe:2e:45:6a:61: 75:16:fc:b9:90:37:03:45:1c:51:08:57:30:2d:a6: 0e:bc:01:31:d3:8d:48:76:a6:51:04:8e:33:06:9e: 67:b8:e9:32:b0:d0:24:e9:65:a0:ed:66:92:63:c7: 21:71:99:be:b2:96:ec:b4:de:b2:ea:9b:d9:e3:8f: 96:c4:6b:c2:6c:51:e3:79:79:b9:a2:d9:9e:ea:9d: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0C:BE:B8:28:F5:34:FA:1C:47:64:C8:03:5F:9B:F0:46:9B:1F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a2:05:b7:67:19:0b:5a:2e:99:b2:81:d3:2c:ae:19:45:7d: 49:1d:d6:83:72:a4:8d:32:a0:5e:88:fa:04:78:55:fe:32:7d: c0:8b:23:b4:01:9c:55:e6:5f:5d:ba:a7:91:c7:a8:2e:44:af: 91:ea:dc:a9:05:64:8c:c0:15:ab:7a:cc:e7:44:b1:0e:78:a1: 20:23:19:e8:50:3c:24:7f:0f:a0:86:86:04:04:31:f1:96:20: 16:d5:9b:84:33:ee:d7:4c:7e:e9:e7:fa:b5:d2:e6:0d:b5:5f: 65:b6:c9:f9:82:6a:d1:51:f2:91:f4:b9:6d:f5:22:33:f3:fc: 9b:fa:c7:71:57:b9:78:4d:20:5c:a9:6a:8e:7f:d0:56:eb:41: 24:fc:c6:9f:86:b7:b3:4c:f7:f1:4c:c2:67:4f:23:19:3d:89: f6:84:af:20:4f:59:fc:33:66:03:95:cc:5d:fe:c7:c4:a6:5a: 42:78:34:37:55:fa:75:30:49:db:cd:b3:49:ce:3d:a2:22:82: 44:f9:f1:05:c6:21:28:72:ab:b7:98:a8:d4:cf:2d:da:55:23: f0:1c:fd:b3:98:76:16:73:1f:8d:63:18:1d:df:8b:c5:2d:b0: f5:5b:06:cd:3e:d4:9b:67:af:e3:83:fa:fb:13:46:32:3e:cf: 53:8b:ce:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2g70+WNu9YDUjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NjhmYjc1YzMtNGNjNS00MTY1LTk0NDUtMDg3MjExODAyNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaviJK4an5mTZHlS1UHqO56qgUyGyB/3Uq1W tcgvzCwxgeWHRI6xBW2rP/JCs2mStio33uyJBfgTZtHkVcZ81ZK75ZfJJetDEPJx vzPk2m8xU7hbd+QTvPk7waG+KluBO+l7qm6GHmmiOsC5LAhzFqtKU2chygMlkyph sh534SClfG4iHeucnxsQhbD+tcdl6AYF/NkISogrNiq5hNZubqVvV34Tz+M9va5c aB0K/i5FamF1Fvy5kDcDRRxRCFcwLaYOvAEx041IdqZRBI4zBp5nuOkysNAk6WWg 7WaSY8chcZm+spbstN6y6pvZ44+WxGvCbFHjeXm5otme6p1SywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIMvrgo9TT6HEdkyANfm/BGmx+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGYwYjM0ZTItZTQ0OS0z NGNkLThiNGYtODIwOTg0MDJjZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCiBbdnGQtaLpmygdMsrhlFfUkd1oNypI0yoF6I+gR4Vf4yfcCLI7QB nFXmX126p5HHqC5Er5Hq3KkFZIzAFat6zOdEsQ54oSAjGehQPCR/D6CGhgQEMfGW IBbVm4Qz7tdMfunn+rXS5g21X2W2yfmCatFR8pH0uW31IjPz/Jv6x3FXuXhNIFyp ao5/0FbrQST8xp+Gt7NM9/FMwmdPIxk9ifaEryBPWfwzZgOVzF3+x8SmWkJ4NDdV +nUwSdvNs0nOPaIigkT58QXGIShyq7eYqNTPLdpVI/Ac/bOYdhZzH41jGB3fi8Ut sPVbBs0+1Jtnr+OD+vsTRjI+z1OLznU= -----END CERTIFICATE-----Generated at Thu Jul 23 21:41:18 2026 by rpki-client