$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa File: 8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa (raw, json) Hash identifier: t5CKjA5ogRiUjrHBOHFJWxDBlE+xIr1jx24Di3cNc7o= Subject key identifier: CD:C7:1F:3C:D4:CC:9C:65:40:76:2F:3E:78:B3:C3:12:FF:35:B7:2A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D75D54EFC45217456D30EDEC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 399728 IP address blocks: 38.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:4e:fc:45:21:74:56:d3:0e:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=10d50145-f428-45f7-915e-6acc240a1faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:09:a6:c9:f5:24:39:fe:96:f0:0c:82:cf: 31:1b:bd:d5:1b:cd:31:7a:9d:4b:42:54:36:f2:0b: bb:18:0a:34:50:56:80:93:7c:c0:cb:b9:ef:a2:1f: bf:37:fa:6e:fe:ee:e3:47:d2:67:1f:7f:8b:3e:60: bd:39:f5:29:b5:d4:62:14:37:15:21:52:d5:22:ae: 0b:fd:48:7f:96:46:9d:f0:6a:97:95:53:89:db:8e: a1:ef:6d:b4:56:48:0c:0b:b9:11:d9:62:ea:99:0d: 66:fd:72:98:04:8c:69:14:90:8a:74:ca:c9:d4:22: 0d:fa:23:6f:a9:a3:fc:67:4c:3e:55:48:fe:f6:ed: eb:46:26:b8:d2:4c:2c:54:52:41:e8:98:3a:22:73: b3:d0:49:a1:17:a9:2e:53:09:33:94:15:d0:7a:23: 5d:0c:e7:91:f4:58:e9:ee:a4:4f:bf:79:3f:08:dd: 89:cc:f4:f0:bd:2e:7e:57:d7:60:b6:fc:cc:e2:d6: 52:c9:d1:ac:1a:90:7f:67:7b:69:8a:4c:52:ec:85: 43:13:16:2e:d5:89:66:94:2c:4d:a1:16:e8:35:75: 9e:c5:a0:42:a4:e6:07:d3:b9:11:4b:c5:69:03:c0: f7:50:1e:71:8b:45:9e:b8:fa:7a:41:36:8d:b3:f8: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C7:1F:3C:D4:CC:9C:65:40:76:2F:3E:78:B3:C3:12:FF:35:B7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.87.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b0:40:89:df:c8:88:74:30:7b:2c:73:ff:11:38:3e:c4:31: 5e:74:5f:5d:68:21:a0:fd:13:ac:0c:bf:3b:51:19:47:55:d7: bd:f0:ed:14:02:f9:1d:49:7a:ac:6d:26:99:08:83:fc:bd:77: 84:d1:1e:77:42:9c:78:14:4e:23:1e:a3:44:21:8a:92:17:f8: a0:b5:3a:bd:cf:aa:19:85:88:48:8f:68:aa:2b:2e:25:21:81: 65:45:ab:46:db:b6:a1:e6:16:8c:a9:16:9e:56:6b:c6:42:e6: b7:5a:3e:31:12:c5:e8:da:60:84:c5:84:ad:8d:88:b7:9a:24: a8:99:bf:44:06:0c:e5:0f:b0:53:b1:80:7a:d6:96:89:4d:d0: 2a:00:57:4f:0c:7c:d4:c8:bb:3b:94:f4:f6:bc:7b:94:c9:a2: 05:54:7d:f1:aa:6b:e1:ba:53:2e:8e:5a:3d:82:73:fb:6d:74: a8:c2:7f:7a:df:99:d9:67:2d:7e:a3:4c:4a:b2:df:ef:c5:3b: 75:9d:1f:2f:53:3f:99:cf:bf:24:19:91:86:d9:9e:20:e3:9c: aa:d5:47:b3:1f:e7:1a:44:67:e5:11:32:36:74:e0:16:13:40: 7a:9e:71:f6:d0:7e:5f:88:3c:8f:44:af:01:28:c8:99:71:0b: 06:9b:0f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111U78RSF0VtMO3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MTBkNTAxNDUtZjQyOC00NWY3LTkxNWUtNmFjYzI0MGExZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYkJpsn1JDn+lvAMgs8xG73VG80xep1LQlQ2 8gu7GAo0UFaAk3zAy7nvoh+/N/pu/u7jR9JnH3+LPmC9OfUptdRiFDcVIVLVIq4L /Uh/lkad8GqXlVOJ246h7220VkgMC7kR2WLqmQ1m/XKYBIxpFJCKdMrJ1CIN+iNv qaP8Z0w+VUj+9u3rRia40kwsVFJB6Jg6InOz0EmhF6kuUwkzlBXQeiNdDOeR9Fjp 7qRPv3k/CN2JzPTwvS5+V9dgtvzM4tZSydGsGpB/Z3tpikxS7IVDExYu1YlmlCxN oRboNXWexaBCpOYH07kRS8VpA8D3UB5xi0WeuPp6QTaNs/gCQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3HHzzUzJxlQHYvPnizwxL/NbcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGU2MTUxZTctZjNhNC0z MDJlLTljMGQtMTliNWI0MWZiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJld7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABewQInfyIh0MHssc/8ROD7EMV50X11oIaD9E6wMvztRGUdV173w7RQC +R1JeqxtJpkIg/y9d4TRHndCnHgUTiMeo0QhipIX+KC1Or3PqhmFiEiPaKorLiUh gWVFq0bbtqHmFoypFp5Wa8ZC5rdaPjESxejaYITFhK2NiLeaJKiZv0QGDOUPsFOx gHrWlolN0CoAV08MfNTIuzuU9Pa8e5TJogVUffGqa+G6Uy6OWj2Cc/ttdKjCf3rf mdlnLX6jTEqy3+/FO3WdHy9TP5nPvyQZkYbZniDjnKrVR7Mf5xpEZ+URMjZ04BYT QHqecfbQfl+IPI9ErwEoyJlxCwabDzk= -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:18 2026 by rpki-client