$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa File: a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa (raw, json) Hash identifier: zWeeBqVjZ0zgwehFZ3gmUXP6paNjls8gODMpT3yY5Rk= Subject key identifier: 0C:87:72:F5:C5:42:A9:D1:A2:E0:63:11:B5:3A:AD:48:47:0D:D4:AE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D6D750B891D8F4217F8382900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 274004 IP address blocks: 38.224.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:0b:89:1d:8f:42:17:f8:38:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=21277c45-98b3-4cc1-9563-afe54cf4565f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:75:fa:89:96:5b:94:4a:44:ec:0c:4d:ae: 0e:41:73:fb:8a:56:ee:a4:c7:46:de:4a:f2:ca:79: e2:5d:39:12:af:22:a7:0d:68:8a:42:5f:cd:5a:6e: e1:5a:41:95:d3:cc:33:eb:ee:d5:0b:9d:e5:fc:fd: 81:bd:fd:ef:79:57:17:bf:44:7b:88:63:f0:98:96: 9a:bc:4a:34:af:e4:e2:f7:51:76:78:25:0e:d7:47: d9:5b:73:1f:5f:55:e1:88:bc:9e:d2:17:70:e9:b5: a5:ec:21:a2:94:53:74:24:80:cf:ea:bd:37:53:b1: 25:55:22:2c:57:1c:91:2c:eb:dd:b1:55:9b:2e:43: 8a:fd:ab:a1:df:26:1a:a5:26:03:0a:61:ba:8f:5c: de:69:e4:f0:55:b2:e7:43:3d:8c:3e:40:90:85:1b: 72:9d:4b:93:0e:d9:1d:86:a3:58:04:c5:bb:b3:76: cc:db:30:e6:50:ae:b4:f5:9e:c2:1d:d0:fc:3b:46: 02:c7:7b:90:59:4a:3a:ea:9c:76:03:09:44:48:d1: 8b:08:29:d3:f1:a1:ca:19:55:89:7d:70:6a:5b:68: 77:81:b8:66:28:f1:d4:7b:2e:b9:b4:6f:fa:56:3f: 06:73:9d:e5:91:b9:63:c0:85:4a:3f:ea:14:bc:fe: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:87:72:F5:C5:42:A9:D1:A2:E0:63:11:B5:3A:AD:48:47:0D:D4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:35:91:25:8e:f1:24:1b:f7:9e:e5:27:58:4d:40:a1:65:c0: 62:b9:80:96:33:f1:74:76:e9:48:3e:9e:ad:a5:0e:0c:d5:8c: 07:02:fb:39:dd:5c:17:92:2f:e9:57:a4:70:76:2f:b5:43:11: 33:16:0e:a0:a5:61:66:33:ff:33:80:6b:cd:9f:7f:fc:a0:67: 3e:3c:66:8e:ed:38:2a:f5:a0:2f:fa:bf:d1:37:1e:a1:79:fc: 67:6a:21:b3:31:33:a1:22:5f:71:a0:2a:81:c6:4c:13:5d:a3: 24:9a:7e:38:d7:e6:58:1e:ec:72:a4:50:03:cc:fe:a4:4d:cd: f0:0e:8a:c8:32:df:ff:cc:fc:bc:6b:16:60:b4:80:85:59:dd: 40:17:70:09:71:31:87:a1:aa:69:7a:17:1d:73:ae:ed:2d:cf: dd:03:7d:03:74:da:ad:75:b6:81:e9:48:06:b0:e8:99:3e:e0: f3:15:dc:50:cc:9d:31:b8:36:b4:b0:b1:81:f6:8d:21:6f:55: 90:46:45:3e:a8:70:f2:57:10:f7:d2:8c:47:9d:d5:a5:fb:e4: e7:d6:3e:a4:8f:26:bf:55:05:6e:44:c1:49:95:0c:02:36:99: a4:23:96:22:b6:42:5a:1c:66:91:62:73:7a:b1:fe:a3:50:c0: b9:66:f0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tdQuJHY9CF/g4KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk MjEyNzdjNDUtOThiMy00Y2MxLTk1NjMtYWZlNTRjZjQ1NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNt1+omWW5RKROwMTa4OQXP7ilbupMdG3kry ynniXTkSryKnDWiKQl/NWm7hWkGV08wz6+7VC53l/P2Bvf3veVcXv0R7iGPwmJaa vEo0r+Ti91F2eCUO10fZW3MfX1XhiLye0hdw6bWl7CGilFN0JIDP6r03U7ElVSIs VxyRLOvdsVWbLkOK/auh3yYapSYDCmG6j1zeaeTwVbLnQz2MPkCQhRtynUuTDtkd hqNYBMW7s3bM2zDmUK609Z7CHdD8O0YCx3uQWUo66px2AwlESNGLCCnT8aHKGVWJ fXBqW2h3gbhmKPHUey65tG/6Vj8Gc53lkbljwIVKP+oUvP6NKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyHcvXFQqnRouBjEbU6rUhHDdSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYThmZGUyMGItNTliYy0z ZWU2LTk1MGMtYmMzNDIzYjk0MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD01kSWO8SQb957lJ1hNQKFlwGK5gJYz8XR26Ug+nq2lDgzVjAcC+znd XBeSL+lXpHB2L7VDETMWDqClYWYz/zOAa82ff/ygZz48Zo7tOCr1oC/6v9E3HqF5 /GdqIbMxM6EiX3GgKoHGTBNdoySafjjX5lge7HKkUAPM/qRNzfAOisgy3//M/Lxr FmC0gIVZ3UAXcAlxMYehqml6Fx1zru0tz90DfQN02q11toHpSAaw6Jk+4PMV3FDM nTG4NrSwsYH2jSFvVZBGRT6ocPJXEPfSjEed1aX75OfWPqSPJr9VBW5EwUmVDAI2 maQjliK2QlocZpFic3qx/qNQwLlm8Ng= -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:03 2026 by rpki-client