$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58a82f4e-abec-3b27-87f3-d66287b9d579.roa File: 58a82f4e-abec-3b27-87f3-d66287b9d579.roa (raw, json) Hash identifier: dZ6CuwzVxWWy4Pu77zcIuoapy5V8kkkhPaqOL7WYRG0= Subject key identifier: F1:BA:76:3D:78:71:6B:62:07:3A:83:95:10:8E:FD:65:27:C2:10:93 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D7E3526751E3C2EFF3D18F1C8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58a82f4e-abec-3b27-87f3-d66287b9d579.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 46475 IP address blocks: 38.86.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:26:75:1e:3c:2e:ff:3d:18:f1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=2e8f31e3-760b-4a0d-ae38-0f17f455eaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:cf:55:6b:91:24:9a:9e:6a:ea:e8:63:b3: 75:ff:5d:f2:fc:8a:01:54:b0:c3:f0:9f:28:e2:eb: 0d:0b:41:32:69:59:2a:31:b3:84:71:27:ca:92:c7: 79:c2:1d:1d:58:d3:08:b8:1f:0d:64:d1:7e:fa:b0: 4a:09:a6:37:6f:c1:f3:22:39:59:13:6c:23:39:20: 9e:00:57:1c:a4:32:0c:33:8b:0e:9b:49:fc:9e:1e: 65:00:e1:52:8b:c7:fa:46:e8:bd:dd:a3:46:6a:89: c3:cb:07:b5:62:85:7e:3c:46:f9:70:54:e9:39:39: 1d:42:6b:16:33:24:1b:a0:a0:a6:b8:d0:c2:10:8b: 56:da:4a:7a:59:54:b9:35:6c:91:b6:c3:4f:0a:3f: 78:66:fb:d8:8d:1e:5d:5b:2b:1c:14:b5:91:8a:83: fd:89:86:bd:ff:42:9a:77:5d:3c:d5:a2:10:13:0d: 38:6f:8a:ee:e1:d2:71:74:68:d3:f3:02:8d:5f:b4: cd:6c:5b:64:fd:04:b2:f5:aa:13:df:c2:38:c7:8d: c4:5e:57:a8:af:4a:01:91:b3:73:b1:43:3f:88:da: 0c:5c:55:05:5a:b8:20:9d:29:de:67:2d:7e:a6:2b: bb:4c:ee:54:86:07:22:70:c8:68:0d:8b:c7:f3:79: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BA:76:3D:78:71:6B:62:07:3A:83:95:10:8E:FD:65:27:C2:10:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58a82f4e-abec-3b27-87f3-d66287b9d579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:b4:72:e3:4c:46:0e:e3:9c:b8:87:9e:6f:88:b7:ce:e4:bd: cb:1b:84:6e:25:3e:e8:a2:13:5f:1d:d5:fa:ce:a2:99:74:00: 26:fe:58:3e:34:59:80:1d:a9:8e:e4:9b:f4:a5:cd:99:67:31: 60:06:a2:98:f1:83:46:4b:4e:1a:88:2f:2e:ae:5d:f3:5a:af: 6b:fc:a8:c0:6e:95:66:05:c2:9c:a2:ac:5e:9b:db:6d:83:2b: fb:d9:d0:41:df:93:f4:c5:61:b6:bf:ff:a1:45:a2:c7:18:64: 6c:72:c8:b9:68:d0:74:e2:b2:c3:f3:02:e8:66:e7:7d:c4:83: ba:26:a9:63:d1:5f:b4:04:00:df:3c:66:7a:02:bf:4d:15:21: f9:ad:a7:53:d4:52:11:73:32:44:d4:b3:d4:7c:54:4a:da:60: 68:7b:df:c2:29:00:8a:42:c9:ae:88:0d:0e:cb:11:4b:82:da: 86:22:24:8b:1d:56:55:5e:7e:a1:01:c6:21:87:eb:a0:ab:31: 67:9d:df:5f:15:95:dc:ed:51:58:ac:c6:e9:38:f1:97:77:4a: 41:92:f4:2c:9e:81:77:ed:ad:68:5a:8a:aa:b4:53:1f:5c:61: 94:0a:7e:b0:01:ec:0a:77:80:0b:d7:bf:52:df:9e:96:c0:56: c9:f0:87:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NSZ1Hjwu/z0Y8cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk MmU4ZjMxZTMtNzYwYi00YTBkLWFlMzgtMGYxN2Y0NTVlYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTbPVWuRJJqeauroY7N1/13y/IoBVLDD8J8o 4usNC0EyaVkqMbOEcSfKksd5wh0dWNMIuB8NZNF++rBKCaY3b8HzIjlZE2wjOSCe AFccpDIMM4sOm0n8nh5lAOFSi8f6Rui93aNGaonDywe1YoV+PEb5cFTpOTkdQmsW MyQboKCmuNDCEItW2kp6WVS5NWyRtsNPCj94ZvvYjR5dWyscFLWRioP9iYa9/0Ka d1081aIQEw04b4ru4dJxdGjT8wKNX7TNbFtk/QSy9aoT38I4x43EXleor0oBkbNz sUM/iNoMXFUFWrggnSneZy1+piu7TO5UhgcicMhoDYvH83nzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG6dj14cWtiBzqDlRCO/WUnwhCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNThhODJmNGUtYWJlYy0z YjI3LTg3ZjMtZDY2Mjg3YjlkNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM60cuNMRg7jnLiHnm+It87kvcsbhG4lPuiiE18d1frOopl0ACb+WD40 WYAdqY7km/SlzZlnMWAGopjxg0ZLThqILy6uXfNar2v8qMBulWYFwpyirF6b222D K/vZ0EHfk/TFYba//6FFoscYZGxyyLlo0HTissPzAuhm533Eg7omqWPRX7QEAN88 ZnoCv00VIfmtp1PUUhFzMkTUs9R8VEraYGh738IpAIpCya6IDQ7LEUuC2oYiJIsd VlVefqEBxiGH66CrMWed318VldztUVisxuk48Zd3SkGS9CyegXftrWhaiqq0Ux9c YZQKfrAB7Ap3gAvXv1LfnpbAVsnwh9s= -----END CERTIFICATE-----Generated at Fri Apr 17 07:33:28 2026 by rpki-client