$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2f0b086-79ec-3566-ac5e-971e2fe11986.roa File: b2f0b086-79ec-3566-ac5e-971e2fe11986.roa (raw, json) Hash identifier: emNdzPewK4GU/QsibHNENvgI48UXdDrW+bRi7P0F4rk= Subject key identifier: FF:99:6F:3D:9F:A7:D2:09:1A:F3:78:FD:9F:52:92:A5:CA:DD:3B:94 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5234EB9CCBDEA8B90C3C57E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2f0b086-79ec-3566-ac5e-971e2fe11986.roa Signing time: Sat 28 Mar 2026 18:44:29 +0000 ROA not before: Sat 28 Mar 2026 18:44:29 +0000 ROA not after: Tue 02 Jun 2026 13:43:12 +0000 asID: 215596 IP address blocks: 38.45.52.0/22 maxlen: 22 154.62.100.0/24 maxlen: 24 154.62.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:eb:9c:cb:de:a8:b9:0c:3c:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 28 18:44:29 2026 GMT Not After : Jun 2 13:43:12 2026 GMT Subject: CN=0eb40283-710e-4f9b-9718-ce9ce41b384e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:1a:6c:43:6a:0a:7e:e6:61:c4:0a:16:9d: d2:30:8f:57:7a:a9:9e:eb:28:3c:a7:0f:b8:9e:6e: 23:17:17:4e:36:b4:7e:d1:6c:ec:69:07:31:da:b0: d9:ef:3c:26:b2:d7:a9:04:b2:29:c4:7e:d3:76:f1: 06:0e:f3:14:c0:b1:da:3a:c3:75:34:11:87:8f:6a: 3c:2f:9b:1c:9c:2e:ae:00:12:ba:34:2e:04:09:88: 20:a7:f6:80:76:b6:5b:a8:7f:bf:29:46:49:44:9e: 79:2e:34:ee:20:ef:aa:f8:c8:40:d2:94:e4:f4:0b: e1:0c:2d:24:90:d5:82:41:dc:a5:ee:be:a5:4b:7f: b0:a6:20:ef:83:58:3b:35:54:f3:dd:f6:cd:d6:23: 6a:b9:2a:30:bd:a3:c8:c4:e0:c8:db:48:c8:62:4d: bb:a7:db:42:dd:63:19:63:cb:a9:15:9a:26:6b:9d: 2d:f0:99:f2:ad:33:7d:99:b2:e2:ca:6b:fb:64:5e: b5:14:30:cb:f1:63:fc:fa:ee:3f:de:26:11:9f:76: 33:91:ef:b5:a2:e7:87:0f:d1:05:71:6f:99:8a:f8: 19:62:44:11:cc:4f:1e:d8:a9:0b:8d:2f:ef:cb:ca: 42:5b:11:00:c9:9a:f0:b9:de:44:a1:68:f3:98:cb: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:6F:3D:9F:A7:D2:09:1A:F3:78:FD:9F:52:92:A5:CA:DD:3B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2f0b086-79ec-3566-ac5e-971e2fe11986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.52.0/22 154.62.100.0/24 154.62.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:93:16:8a:f3:8e:f4:12:de:58:ba:3a:c9:ed:dd:f4:52:20: 0c:15:03:32:31:dd:9b:3b:f6:15:80:c6:d7:9a:e8:91:b9:33: 03:6c:66:75:d5:ab:d3:6c:ed:33:12:c0:ab:43:c1:9f:5c:0a: 4b:72:79:35:97:89:88:e4:bf:fe:c7:ad:9d:c7:44:fe:cc:75: 19:7a:c4:e4:8b:d2:c3:b0:61:c0:98:9f:15:a2:ed:1a:d8:11: 3b:a9:06:33:97:95:ca:4c:d1:50:83:e6:e2:b8:24:b8:36:3b: 59:b1:e9:0d:af:42:fd:fb:05:cf:03:a5:07:de:91:e0:01:de: 36:02:00:97:24:6e:e9:3d:d5:8f:5b:d1:8c:db:84:29:ab:d3: 07:0a:5b:f3:74:55:65:e1:a9:f6:39:0a:ea:93:a3:8e:72:df: 9f:e2:82:9e:f1:50:cb:39:5e:7f:11:81:95:1b:7f:04:6d:30: 53:80:13:04:00:00:81:6e:92:15:93:84:34:23:17:8c:f8:8d: 1b:98:77:66:15:d7:fb:9c:63:6e:e4:72:85:e8:0f:4c:11:0f: 11:3c:57:27:9a:d1:78:dd:59:0c:28:fe:9a:fe:9e:2a:01:e0: ac:88:7d:50:fd:6b:1c:fc:76:9f:23:c9:b4:70:45:31:eb:14: 95:89:cc:ea -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1SNOucy96ouQw8V+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyODE4NDQyOVoXDTI2MDYwMjEzNDMxMlowLzEtMCsGA1UEAxMk MGViNDAyODMtNzEwZS00ZjliLTk3MTgtY2U5Y2U0MWIzODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY4abENqCn7mYcQKFp3SMI9Xeqme6yg8pw+4 nm4jFxdONrR+0WzsaQcx2rDZ7zwmstepBLIpxH7TdvEGDvMUwLHaOsN1NBGHj2o8 L5scnC6uABK6NC4ECYggp/aAdrZbqH+/KUZJRJ55LjTuIO+q+MhA0pTk9AvhDC0k kNWCQdyl7r6lS3+wpiDvg1g7NVTz3fbN1iNquSowvaPIxODI20jIYk27p9tC3WMZ Y8upFZoma50t8JnyrTN9mbLiymv7ZF61FDDL8WP8+u4/3iYRn3Yzke+1oueHD9EF cW+ZivgZYkQRzE8e2KkLjS/vy8pCWxEAyZrwud5EoWjzmMulWwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFP+Zbz2fp9IJGvN4/Z9SkqXK3TuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjJmMGIwODYtNzllYy0z NTY2LWFjNWUtOTcxZTJmZTExOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJi00AwQA mj5kAwQCmj5wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFiTForzjvQS3li6Osnt3fRSIAwVAzIx3Zs79hWA xtea6JG5MwNsZnXVq9Ns7TMSwKtDwZ9cCktyeTWXiYjkv/7HrZ3HRP7MdRl6xOSL 0sOwYcCYnxWi7RrYETupBjOXlcpM0VCD5uK4JLg2O1mx6Q2vQv37Bc8DpQfekeAB 3jYCAJckbuk91Y9b0YzbhCmr0wcKW/N0VWXhqfY5CuqTo45y35/igp7xUMs5Xn8R gZUbfwRtMFOAEwQAAIFukhWThDQjF4z4jRuYd2YV1/ucY27kcoXoD0wRDxE8Vyea 0XjdWQwo/pr+nioB4KyIfVD9axz8dp8jybRwRTHrFJWJzOo= -----END CERTIFICATE-----Generated at Fri Apr 17 12:43:14 2026 by rpki-client