$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d2d7a7a-9c2c-3baf-9298-2d3498b31351.roa File: 3d2d7a7a-9c2c-3baf-9298-2d3498b31351.roa (raw, json) Hash identifier: Udhn/6IpaUwAhIkwa+TcKyqKZNk7fyTx7Ij3zNVAw1w= Subject key identifier: 97:B5:5E:49:E2:FD:43:35:89:E7:0D:4E:FC:31:B2:E4:32:47:F9:08 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E26AECA313DDBB42398769C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d2d7a7a-9c2c-3baf-9298-2d3498b31351.roa Signing time: Fri 12 Jun 2026 21:21:25 +0000 ROA not before: Fri 12 Jun 2026 21:21:25 +0000 ROA not after: Thu 10 Sep 2026 21:21:25 +0000 asID: 274911 IP address blocks: 38.21.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:26:ae:ca:31:3d:db:b4:23:98:76:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 12 21:21:25 2026 GMT Not After : Sep 10 21:21:25 2026 GMT Subject: CN=7945e166-bab9-44c5-b99b-51299f652f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:c4:b1:08:0b:cf:da:96:99:e7:f3:e9:a5: 9f:4b:9a:66:64:ce:d2:e2:79:9d:c7:2e:73:5b:c1: 99:ab:c6:3b:6a:7e:9e:6f:9b:ac:a8:fd:e7:57:90: 0a:60:87:7f:e9:a2:b4:c7:80:82:2c:d0:a4:14:f0: d4:87:2c:0c:53:08:f2:a4:5d:e3:db:72:c9:03:e2: 5a:82:19:6d:c6:da:e2:f6:4f:d6:af:69:1b:0e:d4: d1:41:67:b0:43:f1:bb:2e:7d:3e:0a:b0:59:bc:54: aa:aa:cd:2f:52:d4:4c:e0:8d:0f:62:c1:a2:02:d1: a2:7e:63:4f:96:bd:51:79:43:5f:14:76:e0:c0:70: 24:d0:ab:a8:fb:a6:9c:28:e6:60:4d:70:2d:69:81: 7c:1d:8a:fb:b1:83:c6:de:99:c5:c1:e0:d2:48:60: 6e:68:56:9a:cd:f6:f9:ae:d7:a7:0d:6d:08:77:ad: 16:1f:6e:e3:48:25:28:27:84:ba:ab:60:d6:0b:b0: 38:71:a8:3a:4b:47:6a:0a:63:8c:53:08:2c:aa:fd: 99:ec:53:b6:c7:54:fb:24:cf:35:0a:11:63:7c:e8: ec:2a:73:c9:71:16:31:d1:ad:e5:a3:9a:9f:b0:c1: 51:9f:12:c5:ea:01:1c:bc:a2:46:9f:bd:b4:58:99: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:5E:49:E2:FD:43:35:89:E7:0D:4E:FC:31:B2:E4:32:47:F9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d2d7a7a-9c2c-3baf-9298-2d3498b31351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ec:b7:43:10:3c:b0:f6:2b:17:28:bd:9d:a9:8f:18:31:e7: 7e:7f:05:46:db:45:a5:cd:b7:4c:ff:4f:a0:4c:32:a3:47:00: 9b:54:2f:44:96:9d:b4:07:26:df:7d:98:a7:22:e8:65:13:7d: 12:28:40:2e:27:ae:17:ff:47:64:83:51:a1:a5:28:32:d6:b6: ce:f5:99:0b:2f:d0:30:61:7b:a7:85:e0:13:05:40:e8:be:71: 76:ef:6a:89:99:ac:46:a0:40:5e:6e:f2:7b:c1:b3:60:ff:dd: 91:3a:f6:71:e0:2c:97:0e:7d:fa:99:cf:b3:b2:c5:69:cf:0c: c2:8f:46:4a:8c:d1:88:3c:a8:39:67:65:54:7b:c9:6a:2d:11: 89:be:86:24:db:da:86:d0:eb:f6:4d:1f:5f:21:8c:25:25:be: c2:a9:5f:b7:0b:5d:8c:7a:6f:ed:9e:21:95:90:87:bd:ad:91: 59:4f:1f:c3:5f:d1:c0:72:be:81:eb:85:a0:05:55:bb:af:aa: b5:e5:24:08:cd:bf:67:9e:0b:19:6e:3c:39:7e:9c:22:20:4a: e3:07:53:be:aa:3a:25:aa:2f:f0:ad:7d:6f:16:0d:92:f9:6c: dd:82:c5:01:94:a2:4f:02:58:f2:af:8f:ab:d1:64:b7:60:35: 66:32:a6:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4mrsoxPdu0I5h2nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxMjIxMjEyNVoXDTI2MDkxMDIxMjEyNVowLzEtMCsGA1UEAxMk Nzk0NWUxNjYtYmFiOS00NGM1LWI5OWItNTEyOTlmNjUyZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7TEsQgLz9qWmefz6aWfS5pmZM7S4nmdxy5z W8GZq8Y7an6eb5usqP3nV5AKYId/6aK0x4CCLNCkFPDUhywMUwjypF3j23LJA+Ja ghltxtri9k/Wr2kbDtTRQWewQ/G7Ln0+CrBZvFSqqs0vUtRM4I0PYsGiAtGifmNP lr1ReUNfFHbgwHAk0Kuo+6acKOZgTXAtaYF8HYr7sYPG3pnFweDSSGBuaFaazfb5 rtenDW0Id60WH27jSCUoJ4S6q2DWC7A4cag6S0dqCmOMUwgsqv2Z7FO2x1T7JM81 ChFjfOjsKnPJcRYx0a3lo5qfsMFRnxLF6gEcvKJGn720WJlCEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe1Xkni/UM1iecNTvwxsuQyR/kIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2QyZDdhN2EtOWMyYy0z YmFmLTkyOTgtMmQzNDk4YjMxMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7st0MQPLD2KxcovZ2pjxgx535/BUbbRaXNt0z/T6BMMqNHAJtUL0SW nbQHJt99mKci6GUTfRIoQC4nrhf/R2SDUaGlKDLWts71mQsv0DBhe6eF4BMFQOi+ cXbvaomZrEagQF5u8nvBs2D/3ZE69nHgLJcOffqZz7OyxWnPDMKPRkqM0Yg8qDln ZVR7yWotEYm+hiTb2obQ6/ZNH18hjCUlvsKpX7cLXYx6b+2eIZWQh72tkVlPH8Nf 0cByvoHrhaAFVbuvqrXlJAjNv2eeCxluPDl+nCIgSuMHU76qOiWqL/CtfW8WDZL5 bN2CxQGUok8CWPKvj6vRZLdgNWYyphI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:01:15 2026 by rpki-client