$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa File: 5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa (raw, json) Hash identifier: Ug5cKBW8NoLw2CcujdYVfVmGDn91X+kjsS2aci5Jcvg= Subject key identifier: B9:58:24:F1:E7:C3:DE:D5:5F:7B:D9:32:45:B9:62:D5:5A:78:08:21 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D6944FDE55B636F12B354FB00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 273273 IP address blocks: 38.236.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:fd:e5:5b:63:6f:12:b3:54:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=9c1742f6-9204-4189-8a7e-1665c63c65dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6b:b3:53:c4:fc:55:e7:de:44:b9:6a:7a:cd: fa:9c:4a:6b:9e:f7:18:8f:52:43:21:d1:ef:78:4e: ca:31:4e:ce:32:3e:6b:c8:ce:d0:18:3b:62:da:57: e5:dc:77:64:92:44:73:e8:bc:a8:99:bc:fb:e3:85: 4d:f1:5f:fc:e8:5e:8f:ca:37:57:01:80:e5:91:fa: af:93:f4:12:06:f6:11:79:ba:65:d6:29:3d:70:2e: 95:4c:8a:db:59:7f:59:4c:c0:c3:0e:3a:82:4b:d9: c7:1e:f5:8b:61:ac:b1:88:68:83:0c:f1:63:e6:77: 6d:b8:bd:7c:1d:04:b8:1e:7c:3a:3b:26:2a:5a:a8: 9b:dd:33:d8:8a:4e:b8:16:3e:ad:17:26:1a:72:40: 16:3d:9a:cf:b1:82:27:f7:5f:26:b6:5c:07:8a:10: 1c:2a:b2:e3:75:b0:cc:15:2f:fb:6a:01:e0:2e:f7: b8:d5:13:2b:07:af:e7:f9:8d:1b:c3:8e:d4:d8:fa: 1f:06:a2:38:f8:c6:e0:06:24:97:4d:ed:de:c0:0a: da:a4:36:2d:4c:43:8c:16:24:42:f8:9c:be:7e:9e: 89:32:d5:42:2b:d6:3c:2d:67:b9:dc:28:a5:9b:cb: c1:4d:9b:c5:67:6f:33:c6:e6:21:fa:55:d6:d5:a4: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:58:24:F1:E7:C3:DE:D5:5F:7B:D9:32:45:B9:62:D5:5A:78:08:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:0e:83:cd:5a:e4:44:e8:a3:bf:c5:06:05:b0:c1:71:b3:45: b5:bb:19:4b:4c:78:ce:82:94:a0:55:14:72:d5:2d:09:25:5e: 1a:22:f3:fd:41:23:34:f0:29:cc:a3:ab:1b:95:03:2e:a1:e5: 04:70:5e:bc:9c:b8:dd:97:c5:c2:ec:1b:c2:9b:d2:26:aa:c8: cf:70:9a:d2:28:e4:0c:7c:49:3d:da:39:e0:e0:b7:38:ef:62: b6:90:9f:55:1a:85:ef:71:91:1b:c6:c7:a5:bf:04:8b:f4:52: 51:00:da:d1:b7:c6:7d:35:e1:07:91:f3:a5:41:35:56:1f:cc: 1c:5d:1c:e8:e6:e3:d0:3e:ee:3a:4f:65:de:d8:d7:1f:26:ae: eb:0f:50:e6:c8:c0:96:c4:2f:b7:f7:f0:4e:29:2b:e3:25:c9: da:0a:0e:dc:a9:90:7c:20:35:b5:da:11:2e:d7:95:20:c1:9b: 33:c5:b6:72:e7:91:a9:db:29:00:c6:b8:38:38:e1:d1:95:88: 70:33:21:4a:55:0b:62:d8:5c:a5:86:70:a2:e5:ae:b8:11:64: 11:67:1e:e2:94:b3:35:8d:eb:e8:e7:81:0a:dc:9e:6a:e6:bd: 21:ad:d7:e3:7d:ce:0d:f1:14:1d:08:5e:92:c0:04:07:d7:3f: 82:6c:07:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRP3lW2NvErNU+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk OWMxNzQyZjYtOTIwNC00MTg5LThhN2UtMTY2NWM2M2M2NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2uzU8T8VefeRLlqes36nEprnvcYj1JDIdHv eE7KMU7OMj5ryM7QGDti2lfl3HdkkkRz6Lyombz744VN8V/86F6PyjdXAYDlkfqv k/QSBvYRebpl1ik9cC6VTIrbWX9ZTMDDDjqCS9nHHvWLYayxiGiDDPFj5ndtuL18 HQS4Hnw6OyYqWqib3TPYik64Fj6tFyYackAWPZrPsYIn918mtlwHihAcKrLjdbDM FS/7agHgLve41RMrB6/n+Y0bw47U2PofBqI4+MbgBiSXTe3ewArapDYtTEOMFiRC +Jy+fp6JMtVCK9Y8LWe53Cilm8vBTZvFZ28zxuYh+lXW1aQslwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlYJPHnw97VX3vZMkW5YtVaeAghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWEzZmM0M2QtYjk1Zi0z NTkwLWEyZTItNTcxNWY5YjcxZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8Og81a5EToo7/FBgWwwXGzRbW7GUtMeM6ClKBVFHLVLQklXhoi8/1B IzTwKcyjqxuVAy6h5QRwXrycuN2XxcLsG8Kb0iaqyM9wmtIo5Ax8ST3aOeDgtzjv YraQn1Uahe9xkRvGx6W/BIv0UlEA2tG3xn014QeR86VBNVYfzBxdHOjm49A+7jpP Zd7Y1x8mrusPUObIwJbEL7f38E4pK+MlydoKDtypkHwgNbXaES7XlSDBmzPFtnLn kanbKQDGuDg44dGViHAzIUpVC2LYXKWGcKLlrrgRZBFnHuKUszWN6+jngQrcnmrm vSGt1+N9zg3xFB0IXpLABAfXP4JsBzo= -----END CERTIFICATE-----Generated at Fri Apr 17 10:14:31 2026 by rpki-client