$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38774f99-c8aa-378a-8182-6262607bbe73.roa File: 38774f99-c8aa-378a-8182-6262607bbe73.roa (raw, json) Hash identifier: DUMdbZeFxz6w+WG+NsG0HtzSz8kh4USXoc4SIot4Ir8= Subject key identifier: 1A:E5:35:3E:BF:40:79:8B:07:32:49:E5:E9:E1:30:78:43:D3:45:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A054DEBABC16198E9203800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38774f99-c8aa-378a-8182-6262607bbe73.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 22691 IP address blocks: 216.44.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4d:eb:ab:c1:61:98:e9:20:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=b689b703-b06f-49b3-ae8b-3e719ff1ad8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:b9:ef:2f:71:7c:19:2b:03:f4:0f:cf:1d: 1a:64:ee:bd:ad:aa:6d:36:8c:af:dc:35:e4:bb:eb: ae:b8:64:21:bb:48:66:64:49:02:92:f8:9f:37:a8: d8:d8:93:27:ae:dc:ec:16:2e:cb:2c:a3:08:b0:63: 26:1b:09:99:b0:bb:2d:8e:95:ed:5c:b7:53:e8:bb: b0:eb:ea:f3:9d:78:36:72:d4:54:94:95:1a:a8:37: ff:bf:36:db:dd:8c:4e:29:69:99:5a:f8:a2:1f:aa: 90:bb:ff:2b:26:51:b2:9d:3d:ca:6b:fb:95:86:3e: 2a:be:4e:46:73:94:6e:ba:47:64:1a:45:c3:75:43: 16:de:11:aa:46:12:32:c9:f6:ed:f0:8d:40:92:bf: da:00:ca:99:b7:6e:cd:6c:a4:3b:ab:eb:37:b6:a3: 7b:65:12:48:59:03:92:21:ea:26:52:c3:db:a5:69: 0e:d9:78:dc:1a:24:8a:7e:28:08:b0:e7:66:c6:0a: d9:65:1e:4f:45:c0:c7:d9:7f:7b:68:e4:58:16:9f: 93:0b:c2:cf:6d:cf:4c:5f:1a:c5:e7:46:5d:97:ce: cf:de:c3:e1:a5:a6:4b:00:69:de:10:e5:f8:66:b3: 23:db:eb:1f:5a:54:b4:52:bf:b3:d1:29:4d:f7:f1: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E5:35:3E:BF:40:79:8B:07:32:49:E5:E9:E1:30:78:43:D3:45:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38774f99-c8aa-378a-8182-6262607bbe73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 216.44.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ed:54:dc:2c:0a:84:8f:48:6f:7b:b2:4a:39:62:c5:62:0e: 4c:ad:3e:f5:92:61:74:06:be:a2:2b:e3:d7:78:46:ec:81:47: c6:a2:8e:d5:e7:61:89:87:90:44:35:49:30:5e:78:65:3b:eb: 8f:63:c6:0d:85:14:25:a3:5f:20:2d:cb:1e:4c:1b:4b:a0:ad: 75:4f:12:04:aa:9f:20:8f:fa:b8:20:26:7a:d4:82:f0:6c:94: 47:cc:35:0c:89:12:83:ed:eb:bb:16:b3:f9:bf:98:75:2a:35: 4a:bd:e3:a0:46:23:c9:8c:31:cb:82:be:48:91:23:f9:3f:79: 5e:6c:88:e4:f9:79:0a:bf:6c:b8:07:1b:ab:99:48:eb:bf:fb: 56:69:0a:81:97:86:82:94:71:6b:ee:75:02:5b:52:66:ef:9b: ad:95:60:c9:b9:9b:d2:eb:68:08:af:0a:60:8c:b6:bd:67:54: 3b:e1:dd:1a:f8:cb:41:78:38:4a:18:1c:d7:3c:2e:ef:20:02: d4:7d:cc:85:e6:2d:64:fd:77:3f:81:d9:56:79:85:46:b7:bc: 2a:d9:99:75:45:4e:41:3c:69:d8:cf:3c:9f:7b:90:cf:48:64: 3e:b4:6e:99:12:19:02:b9:6d:e1:dd:d1:fa:2a:8f:68:b5:5a: ef:5e:f6:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BU3rq8FhmOkgOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YjY4OWI3MDMtYjA2Zi00OWIzLWFlOGItM2U3MTlmZjFhZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74+57y9xfBkrA/QPzx0aZO69raptNoyv3DXk u+uuuGQhu0hmZEkCkvifN6jY2JMnrtzsFi7LLKMIsGMmGwmZsLstjpXtXLdT6Luw 6+rznXg2ctRUlJUaqDf/vzbb3YxOKWmZWviiH6qQu/8rJlGynT3Ka/uVhj4qvk5G c5RuukdkGkXDdUMW3hGqRhIyyfbt8I1Akr/aAMqZt27NbKQ7q+s3tqN7ZRJIWQOS IeomUsPbpWkO2XjcGiSKfigIsOdmxgrZZR5PRcDH2X97aORYFp+TC8LPbc9MXxrF 50Zdl87P3sPhpaZLAGneEOX4ZrMj2+sfWlS0Ur+z0SlN9/Eh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrlNT6/QHmLBzJJ5enhMHhD00VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzg3NzRmOTktYzhhYS0z NzhhLTgxODItNjI2MjYwN2JiZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTtVNwsCoSPSG97sko5YsViDkytPvWSYXQGvqIr49d4RuyBR8aijtXn YYmHkEQ1STBeeGU7649jxg2FFCWjXyAtyx5MG0ugrXVPEgSqnyCP+rggJnrUgvBs lEfMNQyJEoPt67sWs/m/mHUqNUq946BGI8mMMcuCvkiRI/k/eV5siOT5eQq/bLgH G6uZSOu/+1ZpCoGXhoKUcWvudQJbUmbvm62VYMm5m9LraAivCmCMtr1nVDvh3Rr4 y0F4OEoYHNc8Lu8gAtR9zIXmLWT9dz+B2VZ5hUa3vCrZmXVFTkE8adjPPJ97kM9I ZD60bpkSGQK5beHd0foqj2i1Wu9e9mY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:11 2026 by rpki-client