$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa File: 8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa (raw, json) Hash identifier: 3S8oY7dYBkosjrus/xBL2BPpkJmvsP7On2WLEtEbzo8= Subject key identifier: 25:DA:24:C4:47:E5:1A:F3:7B:FF:AB:82:E9:C6:7D:64:29:D1:79:18 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5234F428BAAB286B80C7DF40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa Signing time: Sat 28 Mar 2026 18:44:33 +0000 ROA not before: Sat 28 Mar 2026 18:44:33 +0000 ROA not after: Tue 05 May 2026 13:42:48 +0000 asID: 393559 IP address blocks: 38.135.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f4:28:ba:ab:28:6b:80:c7:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 28 18:44:33 2026 GMT Not After : May 5 13:42:48 2026 GMT Subject: CN=c6937001-a867-43fe-9b01-451099819aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:f1:cf:eb:05:26:8b:f3:a3:d0:f1:54:76: 0d:20:c1:83:d2:a2:46:a7:42:4f:83:2d:c4:03:fb: 15:8d:68:5a:1e:8f:04:c8:b9:54:e7:e1:41:35:88: 64:d5:f6:d5:38:2c:6e:75:b2:bd:b9:e9:59:13:23: be:14:de:aa:e2:77:93:98:1b:e8:bd:3e:7d:94:b4: 5d:67:2a:fe:a9:5a:eb:d6:2a:5e:de:63:c7:2d:f7: 86:a5:ab:36:00:e3:31:a2:35:5f:c2:f1:d8:94:ca: d1:36:54:71:06:23:04:29:38:36:8b:6a:3d:c1:3c: 2f:f3:ed:f2:4a:8f:8b:1b:a9:10:9a:fa:8b:ac:27: ae:27:fe:ee:7d:74:85:c5:8c:39:7f:ac:76:9e:f6: 54:42:08:d7:26:c2:33:0f:0c:a0:3e:d7:9f:90:f8: a1:a8:c4:f9:de:17:bc:e2:f6:df:87:37:30:a3:92: 38:59:43:64:d5:af:2f:4c:ed:aa:9d:02:52:5a:6f: 78:93:c0:e4:ed:5f:ce:f9:cd:86:19:28:2c:17:e0: f0:b7:7e:19:f6:00:ca:9b:73:7c:2e:90:fe:d7:e0: b2:21:d2:4e:d7:b7:ec:74:8d:ba:11:ff:7f:2a:bd: 75:97:7e:0e:97:2c:88:c3:34:f4:76:4f:ae:db:87: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DA:24:C4:47:E5:1A:F3:7B:FF:AB:82:E9:C6:7D:64:29:D1:79:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0b:d4:f9:fb:fa:38:0e:52:a3:a0:05:42:6a:00:84:51:76: cf:11:60:d4:21:80:98:b8:34:0c:01:9e:73:05:a7:5c:86:59: 22:de:46:c5:62:3b:8a:cb:d1:99:91:2c:61:00:17:9a:cb:e2: 9a:51:8c:af:da:d5:ff:23:ef:6b:db:60:60:6e:f5:86:0e:26: 60:a3:0b:ea:2f:46:98:4a:5c:df:fa:51:11:95:70:47:c0:f7: b1:b4:d7:7b:fb:e7:09:af:1b:b1:ed:0a:69:fa:94:42:fc:02: 1c:b8:59:36:1e:83:e6:05:01:27:66:cc:e3:51:9d:3b:de:ec: e3:4d:54:64:6b:ce:b0:b8:83:18:36:93:bd:43:6a:13:cd:67: bc:70:2a:6c:97:45:f7:5b:4e:9a:b1:86:33:34:e8:4b:e8:e4: 38:2e:ac:19:e3:ac:d8:dc:12:a1:ab:1a:59:a0:08:ac:3f:68: 89:12:87:28:b1:84:62:0e:0c:c7:c2:27:a4:9e:3e:ee:61:ad: c9:05:f6:6e:ab:36:e2:36:34:c5:5c:e2:fc:cc:cd:c9:af:1f: e5:03:8c:2f:b5:3a:43:f7:30:99:8e:5e:ef:ca:4b:bf:36:43: f7:79:70:9c:d4:9c:b3:dc:5a:72:01:9b:32:e5:c1:da:73:70: 20:f8:99:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNPQouqsoa4DH30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyODE4NDQzM1oXDTI2MDUwNTEzNDI0OFowLzEtMCsGA1UEAxMk YzY5MzcwMDEtYTg2Ny00M2ZlLTliMDEtNDUxMDk5ODE5YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXbxz+sFJovzo9DxVHYNIMGD0qJGp0JPgy3E A/sVjWhaHo8EyLlU5+FBNYhk1fbVOCxudbK9uelZEyO+FN6q4neTmBvovT59lLRd Zyr+qVrr1ipe3mPHLfeGpas2AOMxojVfwvHYlMrRNlRxBiMEKTg2i2o9wTwv8+3y So+LG6kQmvqLrCeuJ/7ufXSFxYw5f6x2nvZUQgjXJsIzDwygPtefkPihqMT53he8 4vbfhzcwo5I4WUNk1a8vTO2qnQJSWm94k8Dk7V/O+c2GGSgsF+Dwt34Z9gDKm3N8 LpD+1+CyIdJO17fsdI26Ef9/Kr11l34OlyyIwzT0dk+u24cb6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXaJMRH5Rrze/+rgunGfWQp0XkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGMxOWI5NmMtNmYwMi0z ODkyLTliYjUtNGI0NjcwMmU2MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJoeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgL1Pn7+jgOUqOgBUJqAIRRds8RYNQhgJi4NAwBnnMFp1yGWSLeRsVi O4rL0ZmRLGEAF5rL4ppRjK/a1f8j72vbYGBu9YYOJmCjC+ovRphKXN/6URGVcEfA 97G013v75wmvG7HtCmn6lEL8Ahy4WTYeg+YFASdmzONRnTve7ONNVGRrzrC4gxg2 k71DahPNZ7xwKmyXRfdbTpqxhjM06Evo5DgurBnjrNjcEqGrGlmgCKw/aIkShyix hGIODMfCJ6SePu5hrckF9m6rNuI2NMVc4vzMzcmvH+UDjC+1OkP3MJmOXu/KS782 Q/d5cJzUnLPcWnIBmzLlwdpzcCD4mTQ= -----END CERTIFICATE-----Generated at Fri Apr 17 01:25:56 2026 by rpki-client