$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3949819-377e-3793-a4ba-ca5af4aba49e.roa File: b3949819-377e-3793-a4ba-ca5af4aba49e.roa (raw, json) Hash identifier: aAxT2EU/rupQlIpMH1KPB2VMVtt8sy7QvrECcy7yudQ= Subject key identifier: 67:32:79:76:86:2D:A6:B2:91:87:61:F4:2D:46:2A:38:CC:A4:D9:B9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA44525FB2513719B4DCF4500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3949819-377e-3793-a4ba-ca5af4aba49e.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 11847 IP address blocks: 38.97.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:25:fb:25:13:71:9b:4d:cf:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=4cad247d-639a-4ffe-8025-80484425c6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:39:de:ed:a2:9c:dc:c5:63:c2:8c:79:96: e9:84:62:e1:1b:6a:3e:fd:cc:c9:f1:b8:a2:e1:8a: 1a:38:cd:bb:59:f3:c5:98:5a:13:17:1d:27:67:fb: af:00:72:46:8a:a7:ba:94:06:78:bb:98:98:74:9d: 52:d8:ef:1b:92:aa:e6:e0:2b:3a:f1:1e:66:db:bc: 95:9c:a6:37:98:21:a8:9b:b5:e9:79:f6:20:fb:99: ac:20:b8:a7:d5:8f:a7:6d:ea:2d:67:51:a1:69:1e: 86:f8:69:8c:f0:9e:2b:72:97:8b:1d:f9:10:a6:40: 1e:ad:24:cb:fe:71:6a:9a:15:35:51:ec:64:70:73: 08:85:40:16:47:90:49:d3:21:bf:71:39:07:02:7b: a3:73:1a:c8:b2:af:49:bb:ec:89:13:46:58:b2:dd: 4d:b9:a9:7e:2c:f7:a4:eb:4e:8a:b3:05:f8:11:96: f8:3a:ad:43:ea:e0:25:4e:74:06:49:4e:4a:cc:4d: ae:74:fa:be:12:2d:83:73:7c:06:63:56:55:a5:1c: 46:eb:79:e8:be:5e:86:d9:51:b6:60:49:f6:c6:f4: 32:af:e9:2a:c8:13:d6:eb:c1:f9:5f:23:01:98:22: f7:7b:d8:c6:5c:5b:e8:89:30:c7:1d:ba:c8:c1:d4: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:79:76:86:2D:A6:B2:91:87:61:F4:2D:46:2A:38:CC:A4:D9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3949819-377e-3793-a4ba-ca5af4aba49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.97.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:25:53:e5:ac:44:13:31:2f:4d:f8:a5:61:00:29:99:9f:49: 99:52:16:c4:da:1f:53:68:34:2d:38:75:5d:02:e9:f1:e1:54: cc:5e:76:8e:d0:2a:d7:48:45:49:85:fc:50:a2:2c:89:f1:36: c1:f3:99:00:3f:bb:2f:cb:56:c3:7d:de:53:a9:7c:da:62:94: 78:3c:ed:50:56:7e:fc:38:34:b7:20:d9:c7:48:14:9b:a1:6f: 4e:c0:ef:85:69:e4:64:77:a8:ca:0d:3c:17:98:83:71:de:90: 81:ce:0b:39:f7:7c:a1:b6:3e:f2:d7:41:98:2c:7f:63:83:98: b5:f8:95:66:eb:da:8e:67:7f:55:1c:65:cb:8b:bd:58:a6:3a: 1d:4a:bc:d6:88:67:f7:0f:c3:e2:ee:81:e0:6d:e4:6b:7f:21: 88:54:89:77:71:d0:d1:27:26:17:c1:1f:23:c2:da:8c:0b:1b: df:0a:dd:0e:dd:c2:bc:da:32:30:24:31:72:a8:e1:a4:64:ca: 6d:ee:85:10:8c:7a:76:af:20:00:ba:af:e9:80:de:88:48:91: 50:17:d2:14:ea:32:e4:89:d5:b4:e9:96:b2:b2:c4:a3:40:57: 5b:96:df:0f:b6:25:84:f9:f5:07:5e:3f:9b:11:70:53:f7:44: c0:27:34:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRSX7JRNxm03PRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk NGNhZDI0N2QtNjM5YS00ZmZlLTgwMjUtODA0ODQ0MjVjNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRc53u2inNzFY8KMeZbphGLhG2o+/czJ8bii 4YoaOM27WfPFmFoTFx0nZ/uvAHJGiqe6lAZ4u5iYdJ1S2O8bkqrm4Cs68R5m27yV nKY3mCGom7XpefYg+5msILin1Y+nbeotZ1GhaR6G+GmM8J4rcpeLHfkQpkAerSTL /nFqmhU1UexkcHMIhUAWR5BJ0yG/cTkHAnujcxrIsq9Ju+yJE0ZYst1Nual+LPek 606KswX4EZb4Oq1D6uAlTnQGSU5KzE2udPq+Ei2Dc3wGY1ZVpRxG63novl6G2VG2 YEn2xvQyr+kqyBPW68H5XyMBmCL3e9jGXFvoiTDHHbrIwdTKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcyeXaGLaaykYdh9C1GKjjMpNm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjM5NDk4MTktMzc3ZS0z NzkzLWE0YmEtY2E1YWY0YWJhNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJmGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIglU+WsRBMxL034pWEAKZmfSZlSFsTaH1NoNC04dV0C6fHhVMxedo7Q KtdIRUmF/FCiLInxNsHzmQA/uy/LVsN93lOpfNpilHg87VBWfvw4NLcg2cdIFJuh b07A74Vp5GR3qMoNPBeYg3HekIHOCzn3fKG2PvLXQZgsf2ODmLX4lWbr2o5nf1Uc ZcuLvVimOh1KvNaIZ/cPw+LugeBt5Gt/IYhUiXdx0NEnJhfBHyPC2owLG98K3Q7d wrzaMjAkMXKo4aRkym3uhRCMenavIAC6r+mA3ohIkVAX0hTqMuSJ1bTplrKyxKNA V1uW3w+2JYT59QdeP5sRcFP3RMAnNMM= -----END CERTIFICATE-----Generated at Tue Jul 28 23:13:38 2026 by rpki-client