$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16f34a57-3f20-31b3-9b11-27305f3f0876.roa File: 16f34a57-3f20-31b3-9b11-27305f3f0876.roa (raw, json) Hash identifier: mUATD12YR58Xjw0HdJbnKuMTfu6bn2N/TwhJzAZnuZw= Subject key identifier: 4D:55:42:31:21:F9:39:8B:4F:A7:B7:F3:9B:59:05:D4:31:37:E4:62 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D87FA96FFF24BE35998F90F80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16f34a57-3f20-31b3-9b11-27305f3f0876.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 206706 IP address blocks: 38.236.87.0/24 maxlen: 24 38.236.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:96:ff:f2:4b:e3:59:98:f9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=ca41a621-9301-4fcd-8ce0-3fc965a22563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:9f:a5:14:4d:37:cb:d2:51:af:b3:4e:d5: f9:18:75:dc:56:96:22:0b:39:2b:a3:3a:1e:9d:b9: 18:e0:25:e8:9c:0c:bd:69:c0:a3:d7:1f:73:a0:b1: 8d:a9:7b:36:6d:a8:2c:ce:11:98:5b:f9:87:00:ef: 01:4b:fb:07:48:1e:0f:85:7e:fa:82:8f:f3:0a:fe: fa:a1:de:c5:79:15:8a:52:25:c3:f2:66:ba:a6:f4: d2:7f:0f:08:5b:b9:cf:20:1b:a0:76:14:2b:5d:43: 58:5c:7d:ca:4e:25:cc:c0:db:47:49:65:04:7c:51: 18:a8:c7:13:d5:59:01:99:c5:12:04:64:b6:3c:45: 20:4e:09:58:ef:7d:4a:64:d1:4e:b0:80:15:84:e2: 94:b1:f8:e7:9b:3d:d8:37:9a:9d:e6:7a:84:00:27: d0:e0:44:2b:b3:a8:63:b5:55:4e:f2:44:97:5a:08: 1f:ed:e5:d3:01:63:40:bf:f4:3e:56:8c:fc:06:00: 22:51:de:55:cf:9c:3e:79:19:fc:f1:aa:08:99:db: 10:b3:b3:42:11:7e:6d:0a:e0:a1:d5:8b:7a:1f:f8: a2:6b:15:43:8a:d4:fc:c6:8f:56:1f:78:bd:0f:4c: c0:47:91:49:66:1c:ff:97:9b:36:f2:09:ff:c2:dd: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:55:42:31:21:F9:39:8B:4F:A7:B7:F3:9B:59:05:D4:31:37:E4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16f34a57-3f20-31b3-9b11-27305f3f0876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.87.0/24 38.236.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:08:41:f7:0f:3a:5f:22:51:18:d7:85:d0:fd:e6:a7:33:8f: 80:f2:b2:fd:31:b6:4c:12:eb:da:c1:b5:a5:d5:5c:b1:ef:49: 16:3d:bb:2d:61:38:7c:49:9b:4d:1c:ac:76:67:ef:66:c9:9b: 5b:a1:b4:5c:46:de:d8:a9:3c:70:85:7f:90:10:e1:f5:88:8c: 65:27:7a:55:84:b1:e4:07:f3:ed:a6:79:87:98:bf:c7:45:be: 1c:45:76:32:ad:8c:44:43:ae:de:2e:af:d5:24:c2:4d:21:ba: 20:8b:d2:19:19:ab:2b:71:e6:e6:09:23:4e:fc:74:b9:19:32: f0:56:42:6d:4c:8d:b1:a0:4f:d9:87:a6:05:26:08:a1:14:b3: 49:00:8e:1a:ef:30:f7:d8:99:53:b7:3e:03:5c:4b:31:c4:b6: b1:b8:90:db:e8:24:8a:88:6f:20:43:8e:35:6d:44:d5:5c:5d: 41:db:bf:ec:17:1e:b9:92:90:ad:3f:7c:64:21:99:a8:ac:47: 9a:3a:52:0d:2e:c5:d9:a0:07:7e:b5:28:a2:85:e0:de:8a:6f: b9:43:2c:f0:1e:3f:73:f1:8d:6e:62:eb:fa:f9:6e:9d:87:16: bd:82:3a:2c:4c:90:ed:47:55:2d:17:19:eb:02:f5:7e:2c:8a: 24:39:5e:d9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2H+pb/8kvjWZj5D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk Y2E0MWE2MjEtOTMwMS00ZmNkLThjZTAtM2ZjOTY1YTIyNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHCfpRRNN8vSUa+zTtX5GHXcVpYiCzkrozoe nbkY4CXonAy9acCj1x9zoLGNqXs2bagszhGYW/mHAO8BS/sHSB4PhX76go/zCv76 od7FeRWKUiXD8ma6pvTSfw8IW7nPIBugdhQrXUNYXH3KTiXMwNtHSWUEfFEYqMcT 1VkBmcUSBGS2PEUgTglY731KZNFOsIAVhOKUsfjnmz3YN5qd5nqEACfQ4EQrs6hj tVVO8kSXWggf7eXTAWNAv/Q+Voz8BgAiUd5Vz5w+eRn88aoImdsQs7NCEX5tCuCh 1Yt6H/iiaxVDitT8xo9WH3i9D0zAR5FJZhz/l5s28gn/wt0v9wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE1VQjEh+TmLT6e385tZBdQxN+RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTZmMzRhNTctM2YyMC0z MWIzLTliMTEtMjczMDVmM2YwODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJuxXAwQA JuyrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABoIQfcPOl8iURjXhdD95qczj4Dysv0xtkwS69rBtaXVXLHv SRY9uy1hOHxJm00crHZn72bJm1uhtFxG3tipPHCFf5AQ4fWIjGUnelWEseQH8+2m eYeYv8dFvhxFdjKtjERDrt4ur9Ukwk0huiCL0hkZqytx5uYJI078dLkZMvBWQm1M jbGgT9mHpgUmCKEUs0kAjhrvMPfYmVO3PgNcSzHEtrG4kNvoJIqIbyBDjjVtRNVc XUHbv+wXHrmSkK0/fGQhmaisR5o6Ug0uxdmgB361KKKF4N6Kb7lDLPAeP3PxjW5i 6/r5bp2HFr2COixMkO1HVS0XGesC9X4siiQ5Xtk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:37 2026 by rpki-client