$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa File: cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa (raw, json) Hash identifier: SJlMMCdm8YU8VdUwsB7aRFtWNUqLI9JkLuruJbQM5iQ= Subject key identifier: C9:56:68:24:27:95:0E:06:68:4C:61:93:DF:15:2C:66:95:92:44:C7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D7E42FB5DD2B5F980F1F92070 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa Signing time: Mon 13 Apr 2026 13:28:23 +0000 ROA not before: Mon 13 Apr 2026 13:28:23 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 271996 IP address blocks: 38.100.158.0/23 maxlen: 24 38.158.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:42:fb:5d:d2:b5:f9:80:f1:f9:20:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 13 13:28:23 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=3fbc39b3-779e-4a98-9d46-2cebf828941a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:81:42:3b:90:2c:f9:f8:47:91:d8:0e:ed: 84:f6:44:6c:fb:6d:f4:86:87:a2:4e:26:97:bd:0f: 66:8d:4f:62:49:0e:5f:e2:f4:bd:72:e8:7e:16:00: 5a:9e:9c:2f:34:a1:05:7a:5e:11:60:8d:da:a4:00: a8:7c:ff:e9:69:2d:70:bb:c7:7f:36:f4:58:a5:e1: f2:b1:58:d5:dd:ad:a7:85:cb:c4:70:81:f6:8a:9a: d5:60:3a:e2:a1:a2:5d:93:e8:79:1e:01:2e:af:3c: 59:83:75:18:3d:ce:ff:29:9a:6f:89:d9:80:74:8f: 07:56:a0:56:3b:1f:80:1e:83:8f:2f:5c:b5:18:17: 9b:e2:2f:94:d6:b1:18:e7:10:29:87:85:4d:04:ad: 5f:40:dd:89:46:e1:ad:39:89:8d:af:63:33:05:c9: 11:4b:b9:db:02:90:42:35:5f:27:ed:59:91:81:17: 1d:17:ce:6e:15:0d:4a:70:50:e3:12:d9:15:42:23: 4d:c1:46:e2:59:dc:56:46:65:92:19:34:2b:3d:91: cc:e2:93:53:1a:ad:b6:0a:31:e5:50:d9:d6:76:dd: 29:b2:2b:ca:0d:d3:b8:37:91:d6:5f:b0:e4:a2:af: c8:4d:fb:a1:de:b0:ce:4b:11:99:d7:e2:2d:77:a8: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:56:68:24:27:95:0E:06:68:4C:61:93:DF:15:2C:66:95:92:44:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.100.158.0/23 38.158.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e7:56:58:a4:c0:a5:4e:d9:15:6c:b1:73:df:81:4d:b9:05: 45:50:a5:f5:4a:25:22:22:0c:d2:a4:e3:92:72:b9:e4:d9:24: 64:2a:a6:0e:8d:3f:66:ce:c0:92:31:71:f0:3e:34:b0:dd:8c: 01:7d:f0:83:ef:b6:50:a0:a1:81:8d:a7:96:0f:66:8d:f2:30: 7e:83:40:9e:85:fa:57:e1:85:b2:97:50:53:e1:cb:f2:95:5e: 2a:81:2e:38:70:aa:0d:85:57:b7:6a:27:2e:a7:91:29:89:6c: 36:d5:f7:22:97:ce:bf:30:6f:06:c6:e7:32:fe:45:b7:6f:aa: ff:ce:07:5b:db:2e:eb:a1:78:2b:0a:50:22:bd:4b:02:41:9d: 8f:55:1b:20:80:f1:f6:60:52:4f:93:fc:3f:b2:b6:ea:b0:f1: 2c:84:b4:09:5d:9e:92:da:bb:67:50:b1:0d:14:00:e3:c2:9f: c5:bf:bc:a2:58:a6:87:95:b3:a4:25:c2:87:24:09:59:38:55: 5a:3a:26:06:9e:ea:18:61:3a:16:92:56:5e:b7:60:40:a9:43: 08:83:a3:46:1d:d0:53:49:dd:22:67:70:d5:f8:d7:1a:68:7e: e9:48:bf:6c:63:41:71:2b:fb:9d:9c:2c:0b:bc:00:f3:34:5f: 5d:e2:66:5d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1+Qvtd0rX5gPH5IHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMzEzMjgyM1oXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk M2ZiYzM5YjMtNzc5ZS00YTk4LTlkNDYtMmNlYmY4Mjg5NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0SBQjuQLPn4R5HYDu2E9kRs+230hoeiTiaX vQ9mjU9iSQ5f4vS9cuh+FgBanpwvNKEFel4RYI3apACofP/paS1wu8d/NvRYpeHy sVjV3a2nhcvEcIH2iprVYDrioaJdk+h5HgEurzxZg3UYPc7/KZpvidmAdI8HVqBW Ox+AHoOPL1y1GBeb4i+U1rEY5xAph4VNBK1fQN2JRuGtOYmNr2MzBckRS7nbApBC NV8n7VmRgRcdF85uFQ1KcFDjEtkVQiNNwUbiWdxWRmWSGTQrPZHM4pNTGq22CjHl UNnWdt0psivKDdO4N5HWX7Dkoq/ITfuh3rDOSxGZ1+Itd6jcmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMlWaCQnlQ4GaExhk98VLGaVkkTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2RmNDA1ZTgtNjQyNS0z YTVhLTliMWEtMmE2M2MzZjk1ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJmSeAwQB Jp7IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEvnVlikwKVO2RVssXPfgU25BUVQpfVKJSIiDNKk45JyueTZ JGQqpg6NP2bOwJIxcfA+NLDdjAF98IPvtlCgoYGNp5YPZo3yMH6DQJ6F+lfhhbKX UFPhy/KVXiqBLjhwqg2FV7dqJy6nkSmJbDbV9yKXzr8wbwbG5zL+Rbdvqv/OB1vb LuuheCsKUCK9SwJBnY9VGyCA8fZgUk+T/D+ytuqw8SyEtAldnpLau2dQsQ0UAOPC n8W/vKJYpoeVs6QlwockCVk4VVo6Jgae6hhhOhaSVl63YECpQwiDo0Yd0FNJ3SJn cNX41xpofulIv2xjQXEr+52cLAu8APM0X13iZl0= -----END CERTIFICATE-----Generated at Fri Apr 17 01:35:51 2026 by rpki-client