$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95a108b3-dd17-33d3-805c-a64f96e55b32.roa File: 95a108b3-dd17-33d3-805c-a64f96e55b32.roa (raw, json) Hash identifier: ZNTzKD/8108kDNRwfZZrrvfNs7z81xRGfDJ5ZGUtcKQ= Subject key identifier: FC:78:8D:7C:99:E7:21:C8:6A:05:5C:B8:10:65:DF:D9:09:40:FB:60 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5CB4F60F5DD05B86F678B5C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95a108b3-dd17-33d3-805c-a64f96e55b32.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 263793 IP address blocks: 38.156.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f6:0f:5d:d0:5b:86:f6:78:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=33ef88e1-ce66-4d03-b951-58bf1fd2dfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:5a:7b:b5:60:43:d2:bc:65:a4:1c:b4:ba: 5e:5f:69:27:08:c0:47:ef:ad:33:8f:cc:a3:ba:77: 22:f7:5b:ba:6f:f3:7f:7a:2c:9c:45:d9:68:07:e6: 16:e2:30:b4:0e:5a:fa:2d:cc:dd:e3:07:b0:e9:86: c6:ab:aa:79:35:10:c0:13:54:9a:cb:48:e1:e9:75: f0:d0:47:31:f9:29:21:59:6e:c8:3d:a2:d5:93:1f: 97:dc:b9:91:d2:83:fc:75:a8:98:95:b4:1d:04:e6: 20:45:08:51:da:c4:e2:79:e3:7c:e7:b6:d9:ea:30: a1:57:4f:b2:e9:10:c0:70:d4:dc:77:d5:46:23:88: 3d:96:3f:97:6f:08:ac:49:24:78:fa:51:ef:72:c1: e1:1c:c0:db:43:b0:f7:1f:bc:10:f2:75:db:29:b8: 3e:cb:d7:b5:63:2d:b0:c6:cc:74:a6:12:40:4d:01: 45:94:c9:23:f0:ef:f3:23:1c:d4:d8:52:32:20:79: c9:09:64:40:9b:4e:0f:7d:a7:0f:cd:94:d3:ef:8f: 80:a6:ca:b0:34:7b:c1:d5:82:17:50:6b:96:91:da: 5a:f5:e4:e7:c7:2c:93:42:8d:b4:6f:9b:49:93:6d: f0:55:b2:23:26:fe:4d:da:94:04:d0:30:f6:9d:72: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:78:8D:7C:99:E7:21:C8:6A:05:5C:B8:10:65:DF:D9:09:40:FB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95a108b3-dd17-33d3-805c-a64f96e55b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f4:11:11:28:dd:ed:47:04:dc:6b:15:d5:bf:0a:29:ee:5d: a2:02:1c:34:c5:18:32:3c:fe:e6:c9:6e:b5:ac:9f:c7:e6:bb: 26:85:64:23:72:d9:85:66:2b:0c:2a:af:7a:da:c0:6c:6a:24: 84:c0:f7:1f:77:bc:bf:16:e3:3f:91:82:8e:17:20:0c:28:ec: cc:40:78:35:57:6c:d1:cc:6f:33:1f:d2:15:53:6d:b1:a2:b2: 3c:d5:42:3f:98:11:1d:42:ee:76:09:00:98:2e:52:35:9a:71: 1c:ac:f2:bc:e8:fe:e0:38:d1:85:f6:88:ac:d0:f1:f1:aa:d2: 0b:d3:cf:e3:04:6c:6d:61:24:d4:e8:eb:e1:5c:3e:da:16:63: 3f:a1:df:f4:8d:66:91:09:8a:e4:7e:58:2e:16:0a:d6:ac:56: 6a:7e:35:20:e3:94:36:ab:df:3a:d3:2f:d8:b0:5d:43:67:43: fa:fb:a7:55:6c:f0:92:35:c3:2e:c8:cd:76:e3:90:f7:b1:e6: 59:92:24:05:d2:08:28:09:14:a0:7a:35:53:e7:0c:5e:9a:5b: e9:34:d3:90:5c:dd:22:4e:bd:85:e4:62:2f:f1:59:11:af:05: cd:0d:e2:ea:60:57:f5:89:28:55:c3:57:43:0b:d2:f5:21:4e: 7a:1a:02:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPYPXdBbhvZ4tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk MzNlZjg4ZTEtY2U2Ni00ZDAzLWI5NTEtNThiZjFmZDJkZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutdae7VgQ9K8ZaQctLpeX2knCMBH760zj8yj unci91u6b/N/eiycRdloB+YW4jC0Dlr6Lczd4wew6YbGq6p5NRDAE1Say0jh6XXw 0Ecx+SkhWW7IPaLVkx+X3LmR0oP8daiYlbQdBOYgRQhR2sTieeN857bZ6jChV0+y 6RDAcNTcd9VGI4g9lj+XbwisSSR4+lHvcsHhHMDbQ7D3H7wQ8nXbKbg+y9e1Yy2w xsx0phJATQFFlMkj8O/zIxzU2FIyIHnJCWRAm04PfacPzZTT74+ApsqwNHvB1YIX UGuWkdpa9eTnxyyTQo20b5tJk23wVbIjJv5N2pQE0DD2nXK2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx4jXyZ5yHIagVcuBBl39kJQPtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTVhMTA4YjMtZGQxNy0z M2QzLTgwNWMtYTY0Zjk2ZTU1YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJpxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/0EREo3e1HBNxrFdW/CinuXaICHDTFGDI8/ubJbrWsn8fmuyaFZCNy 2YVmKwwqr3rawGxqJITA9x93vL8W4z+Rgo4XIAwo7MxAeDVXbNHMbzMf0hVTbbGi sjzVQj+YER1C7nYJAJguUjWacRys8rzo/uA40YX2iKzQ8fGq0gvTz+MEbG1hJNTo 6+FcPtoWYz+h3/SNZpEJiuR+WC4WCtasVmp+NSDjlDar3zrTL9iwXUNnQ/r7p1Vs 8JI1wy7IzXbjkPex5lmSJAXSCCgJFKB6NVPnDF6aW+k005Bc3SJOvYXkYi/xWRGv Bc0N4upgV/WJKFXDV0ML0vUhTnoaArU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:24 2026 by rpki-client