$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80d50a97-528d-3a04-a6e3-452e1452f81d.roa File: 80d50a97-528d-3a04-a6e3-452e1452f81d.roa (raw, json) Hash identifier: IzjWj+UIKDn4A3nDl3sQK105d0LxCNs46JFTr7X+3QQ= Subject key identifier: F9:84:B9:A7:6A:75:8F:C3:0B:46:FA:06:71:97:25:21:DE:15:DD:AC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D81B7506634A65241A529B340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80d50a97-528d-3a04-a6e3-452e1452f81d.roa Signing time: Tue 14 Apr 2026 19:10:12 +0000 ROA not before: Tue 14 Apr 2026 19:10:12 +0000 ROA not after: Mon 13 Jul 2026 19:10:12 +0000 asID: 266737 IP address blocks: 38.211.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:b7:50:66:34:a6:52:41:a5:29:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 14 19:10:12 2026 GMT Not After : Jul 13 19:10:12 2026 GMT Subject: CN=46228b9a-7757-4c69-83a9-efba61001a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:f5:48:b7:c6:79:f4:37:23:3a:38:53:6e: 63:13:ba:d3:39:66:7f:81:2d:7b:08:f5:bb:f4:bb: f2:c8:a3:65:9b:bb:1f:0d:18:e5:bb:61:35:5e:12: 39:c3:6c:60:71:61:92:86:5f:04:54:a4:de:84:a3: 4c:c6:d1:52:cc:0c:58:4e:8e:90:fb:ee:23:f8:08: 74:02:94:a3:09:84:04:a3:a4:a8:1e:5d:65:7d:72: 6c:42:45:66:b9:06:94:fe:fc:21:07:14:00:7e:37: 23:a0:37:dc:fe:2b:6e:12:cb:e4:90:56:bc:e5:33: df:d8:d3:90:84:6f:a5:92:b4:de:5d:24:7e:b9:64: f7:a4:1f:48:48:05:1e:88:a6:91:86:7f:08:5e:56: e6:d3:1a:95:88:34:af:2e:ab:7b:6e:8d:75:bc:38: 00:55:b5:5f:e8:62:54:74:ec:ed:5e:05:17:67:c2: 94:34:53:85:25:72:b1:77:bc:4e:86:99:2f:93:57: f7:f4:87:9e:b1:38:0d:8a:8b:35:c0:31:b2:d1:7c: e5:b5:e2:ee:94:32:ab:a3:00:af:61:ed:67:31:55: fa:48:62:0c:ac:72:5d:aa:f0:8d:9b:a5:96:76:6b: ea:b4:38:af:8b:fe:31:c3:3e:c8:48:bc:4d:c7:d1: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:B9:A7:6A:75:8F:C3:0B:46:FA:06:71:97:25:21:DE:15:DD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80d50a97-528d-3a04-a6e3-452e1452f81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fe:60:ad:ba:5e:2a:76:78:16:5e:04:c0:80:56:5b:bb:11: ac:37:ef:02:93:3a:48:5c:f8:b1:a4:d4:a6:b1:c8:98:b2:aa: f6:90:6f:33:9c:dc:fa:f6:3e:39:39:73:4d:fd:c0:a7:98:a1: 54:23:47:2e:f5:74:28:ff:8a:8d:c5:81:ae:8e:73:89:32:b7: df:d1:4f:2d:fa:cc:41:96:9c:e3:32:7f:66:70:7c:62:9b:c1: 0e:1d:84:e6:67:64:6b:83:84:72:6b:0f:ec:ea:8e:1a:52:6b: 05:c7:8e:71:c1:af:83:97:2f:37:09:d5:71:82:76:48:e5:53: 16:8d:ae:0a:2c:5f:e4:33:06:aa:71:59:b0:f1:75:52:ce:12: a6:9e:e9:3f:fd:92:d0:4b:12:ce:d8:03:23:ca:ae:df:ae:95: 66:a2:9b:1d:33:0e:c6:d7:d4:27:12:b6:ed:59:5a:db:f4:cb: 49:43:b1:f8:e2:a4:d6:c3:56:13:de:d1:cd:df:73:b7:3f:3a: 77:59:11:18:af:ec:33:ae:d7:79:07:0c:fc:61:be:dc:38:87: a6:61:22:8e:a3:51:3a:9a:29:86:93:d4:8e:6f:cd:91:71:d3: f4:c3:25:31:fc:8d:91:2d:a7:c1:a6:26:3c:0e:79:cb:21:c5: bc:03:ca:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Bt1BmNKZSQaUps0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxNDE5MTAxMloXDTI2MDcxMzE5MTAxMlowLzEtMCsGA1UEAxMk NDYyMjhiOWEtNzc1Ny00YzY5LTgzYTktZWZiYTYxMDAxYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjf1SLfGefQ3Izo4U25jE7rTOWZ/gS17CPW7 9LvyyKNlm7sfDRjlu2E1XhI5w2xgcWGShl8EVKTehKNMxtFSzAxYTo6Q++4j+Ah0 ApSjCYQEo6SoHl1lfXJsQkVmuQaU/vwhBxQAfjcjoDfc/ituEsvkkFa85TPf2NOQ hG+lkrTeXSR+uWT3pB9ISAUeiKaRhn8IXlbm0xqViDSvLqt7bo11vDgAVbVf6GJU dOztXgUXZ8KUNFOFJXKxd7xOhpkvk1f39IeesTgNios1wDGy0XzlteLulDKrowCv Ye1nMVX6SGIMrHJdqvCNm6WWdmvqtDivi/4xwz7ISLxNx9EklwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmEuadqdY/DC0b6BnGXJSHeFd2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODBkNTBhOTctNTI4ZC0z YTA0LWE2ZTMtNDUyZTE0NTJmODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJtNGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH+YK26Xip2eBZeBMCAVlu7Eaw37wKTOkhc+LGk1KaxyJiyqvaQbzOc 3Pr2Pjk5c039wKeYoVQjRy71dCj/io3Fga6Oc4kyt9/RTy36zEGWnOMyf2ZwfGKb wQ4dhOZnZGuDhHJrD+zqjhpSawXHjnHBr4OXLzcJ1XGCdkjlUxaNrgosX+QzBqpx WbDxdVLOEqae6T/9ktBLEs7YAyPKrt+ulWaimx0zDsbX1CcStu1ZWtv0y0lDsfji pNbDVhPe0c3fc7c/OndZERiv7DOu13kHDPxhvtw4h6ZhIo6jUTqaKYaT1I5vzZFx 0/TDJTH8jZEtp8GmJjwOecshxbwDyj4= -----END CERTIFICATE-----Generated at Fri Apr 17 13:45:04 2026 by rpki-client