$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa File: 8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa (raw, json) Hash identifier: spObNF//p+y1rXT9U9EJ6Dywdbxe0u7W5cd6kS8fQRc= Subject key identifier: C3:87:8F:DD:87:FB:55:CA:07:20:45:BA:91:C0:3F:48:ED:07:73:35 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D773A82E71C4683019472CE80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 27884 IP address blocks: 38.172.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:82:e7:1c:46:83:01:94:72:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=242207d5-861f-4160-8424-fe9121fd1c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bf:83:2a:0e:29:54:b3:7f:f5:14:31:6f:ea: 6d:07:74:fe:9f:a3:49:63:8e:6d:52:0d:6b:03:7e: 15:60:36:cb:9a:8d:59:20:50:95:b4:07:36:63:40: 82:e1:c5:3a:9f:62:d6:6a:e9:e0:79:95:a9:36:37: 4e:e4:20:95:df:f5:98:66:b5:23:e1:47:61:2d:ba: 00:3c:6d:dd:7e:ae:de:3b:da:23:85:61:17:c6:2d: bf:98:af:f5:8c:eb:a1:42:a8:1c:b8:92:13:b3:3c: 44:89:0b:72:54:e0:51:16:d7:4f:70:af:e3:6a:68: 86:57:58:96:68:59:c0:51:f8:6a:43:17:66:36:5d: 7a:23:3b:c1:72:70:a9:cb:a1:51:00:cf:a6:31:60: 6c:a8:25:b2:05:88:d4:a1:59:10:ca:e5:e5:36:e8: 63:31:d5:6d:74:fb:4b:20:b0:f2:62:dc:b8:81:f4: d6:57:a6:e7:2f:ea:fa:86:0e:37:ac:9b:78:18:d9: 6c:d1:15:75:98:ad:1c:98:07:a3:2a:0c:9b:c2:97: 20:d0:36:1e:31:07:85:b5:c9:14:5b:46:a7:19:a6: 88:aa:7d:ee:c8:de:62:e1:16:40:3e:7b:78:80:4d: 0b:8c:f9:f5:a7:92:ce:6e:74:0f:9c:cf:e5:3d:dc: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:87:8F:DD:87:FB:55:CA:07:20:45:BA:91:C0:3F:48:ED:07:73:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ffa36cf-21ad-39d4-b901-70d9bfefbf5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:9e:90:80:2f:e7:d6:6e:57:25:4d:c3:1f:ae:95:9c:d8:cb: c8:b7:47:ca:0c:35:7c:b4:4d:6d:3c:3d:67:01:fc:09:cc:44: a7:be:2d:9b:cf:e7:ef:c5:19:71:fe:bc:9f:b0:c6:d9:8b:23: 37:b7:9b:08:6a:a4:1f:f1:5e:81:b9:4f:00:31:b2:a8:fe:02: 9f:76:7d:85:9a:da:18:ae:94:34:39:87:aa:a1:bf:9f:af:aa: 58:7d:c1:8a:79:f2:7e:d4:7f:67:81:80:7c:39:57:90:e2:63: 38:0d:f0:74:14:c8:18:45:b5:61:d8:c1:71:ca:8e:ba:8d:52: ed:56:9f:6d:c5:35:b4:56:0a:fc:2d:f1:27:0e:5d:2c:fe:1c: 18:7b:1e:3f:cd:0e:f2:bc:29:9e:6e:2e:be:57:16:5f:48:0a: db:d3:b2:eb:44:79:34:90:4d:74:65:b0:8a:5d:67:0c:e0:db: bb:0b:79:36:b7:a9:35:10:ed:4f:ff:f2:26:66:a8:0d:6b:01: cd:ba:5c:11:9d:18:5e:06:7f:fe:3e:e8:30:da:b1:2a:33:7c: 8b:cd:12:c2:8e:cb:d2:0d:69:42:06:1b:f4:50:3d:c0:1e:b8: 3a:31:c2:85:c7:3d:3f:fe:13:8a:80:db:0f:05:c9:62:e8:2f: e9:14:52:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoLnHEaDAZRyzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MjQyMjA3ZDUtODYxZi00MTYwLTg0MjQtZmU5MTIxZmQxYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L+DKg4pVLN/9RQxb+ptB3T+n6NJY45tUg1r A34VYDbLmo1ZIFCVtAc2Y0CC4cU6n2LWaungeZWpNjdO5CCV3/WYZrUj4UdhLboA PG3dfq7eO9ojhWEXxi2/mK/1jOuhQqgcuJITszxEiQtyVOBRFtdPcK/jamiGV1iW aFnAUfhqQxdmNl16IzvBcnCpy6FRAM+mMWBsqCWyBYjUoVkQyuXlNuhjMdVtdPtL ILDyYty4gfTWV6bnL+r6hg43rJt4GNls0RV1mK0cmAejKgybwpcg0DYeMQeFtckU W0anGaaIqn3uyN5i4RZAPnt4gE0LjPn1p5LObnQPnM/lPdxm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOHj92H+1XKByBFupHAP0jtB3M1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGZmYTM2Y2YtMjFhZC0z OWQ0LWI5MDEtNzBkOWJmZWZiZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+ekIAv59ZuVyVNwx+ulZzYy8i3R8oMNXy0TW08PWcB/AnMRKe+LZvP 5+/FGXH+vJ+wxtmLIze3mwhqpB/xXoG5TwAxsqj+Ap92fYWa2hiulDQ5h6qhv5+v qlh9wYp58n7Uf2eBgHw5V5DiYzgN8HQUyBhFtWHYwXHKjrqNUu1Wn23FNbRWCvwt 8ScOXSz+HBh7Hj/NDvK8KZ5uLr5XFl9ICtvTsutEeTSQTXRlsIpdZwzg27sLeTa3 qTUQ7U//8iZmqA1rAc26XBGdGF4Gf/4+6DDasSozfIvNEsKOy9INaUIGG/RQPcAe uDoxwoXHPT/+E4qA2w8FyWLoL+kUUk0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:22:02 2026 by rpki-client