$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2e33da4-95fa-3bcf-a77c-edb016639eca.roa File: d2e33da4-95fa-3bcf-a77c-edb016639eca.roa (raw, json) Hash identifier: eacA1I9MD9yTm50XDAEVVuDPLopMlMG4Ott5OcQ24u4= Subject key identifier: B1:D7:30:A3:DC:64:40:9E:31:AC:B0:0C:8A:B4:41:80:94:78:B1:3B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D773A82F304A47D54CDF15800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2e33da4-95fa-3bcf-a77c-edb016639eca.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 266853 IP address blocks: 38.172.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:82:f3:04:a4:7d:54:cd:f1:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=b22af8d1-13f3-4357-9475-5cbc6a27341f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:e8:18:f0:06:74:df:de:4c:d0:05:d9:34: ef:0f:55:e4:8e:21:9b:e7:5c:59:31:b8:0a:e8:32: 78:be:96:20:63:c2:6a:93:15:73:51:de:60:4b:29: 04:10:b8:78:32:98:29:f1:65:91:b3:8e:69:83:7f: e5:2e:f7:b6:d2:ca:70:34:0b:0e:d8:17:8b:61:30: dd:fc:6c:da:cb:e4:2c:3d:26:72:26:4d:88:05:3e: f9:ad:0c:d1:e7:fe:f0:fe:e0:32:bf:ac:bf:0d:a7: 9e:c8:e8:ea:da:54:59:72:96:65:92:d6:e9:33:be: 96:43:25:4b:f9:dc:d0:1c:3c:77:26:27:a4:19:61: c5:a9:88:3a:33:53:4a:51:eb:df:18:ff:9d:ec:be: d3:dd:81:31:1c:f7:50:40:53:6f:19:04:4d:82:e6: 09:d1:68:d2:2f:de:8a:98:c3:64:f7:e4:dd:fe:70: 0b:04:eb:a6:14:96:eb:ef:e5:8d:a3:77:35:ea:74: 97:c3:80:b1:e6:01:f6:ec:64:db:04:3a:65:54:7c: 27:a3:68:82:5c:93:46:17:55:d5:16:69:dd:4d:d7: d6:38:61:4c:37:16:e7:8d:e6:6f:29:10:ca:4c:19: 19:1d:e1:d8:73:7d:8d:62:7e:54:d7:5f:ce:e3:21: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:30:A3:DC:64:40:9E:31:AC:B0:0C:8A:B4:41:80:94:78:B1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2e33da4-95fa-3bcf-a77c-edb016639eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:62:81:62:79:1b:4e:1d:75:32:e3:11:fa:e0:8a:10:79:56: e4:62:c2:1d:28:09:84:97:4b:57:14:40:cd:df:93:f6:3a:c0: 96:79:00:69:dd:3a:50:04:51:81:72:2f:bc:0b:64:58:4c:70: 71:9f:ca:d4:cf:f5:99:96:da:7f:9d:5a:d6:a9:12:ba:2f:f8: 1c:93:a2:4b:c4:96:2d:43:d1:ec:d2:eb:3d:ff:94:c1:cb:82: eb:1f:15:3d:f3:d7:3a:bb:b9:bf:d3:76:40:de:d7:71:ef:23: 52:0d:54:24:83:f7:b7:00:6d:d8:61:09:f1:be:32:2f:dd:a5: 8d:f1:b1:49:1e:7d:53:1a:3b:e6:44:14:8e:79:55:b2:16:01: 98:37:65:57:f9:33:50:b6:aa:18:94:93:76:c5:e2:b1:a2:76: 38:f1:e1:1f:46:02:d4:8c:10:16:d4:48:83:e1:a9:42:47:73: 60:ac:25:b5:e7:67:6d:f9:77:2f:5c:97:c3:d5:58:24:b9:15: 18:89:51:40:a3:30:a9:5c:ac:57:16:d0:7c:2f:dd:7f:35:75: ac:22:76:50:f7:61:37:9c:06:d4:24:3a:53:38:35:d5:c5:07: d8:8c:5a:13:43:64:d4:90:30:1f:4a:a6:22:79:59:67:65:14: 31:01:96:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoLzBKR9VM3xWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YjIyYWY4ZDEtMTNmMy00MzU3LTk0NzUtNWNiYzZhMjczNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiboGPAGdN/eTNAF2TTvD1XkjiGb51xZMbgK 6DJ4vpYgY8JqkxVzUd5gSykEELh4Mpgp8WWRs45pg3/lLve20spwNAsO2BeLYTDd /Gzay+QsPSZyJk2IBT75rQzR5/7w/uAyv6y/DaeeyOjq2lRZcpZlktbpM76WQyVL +dzQHDx3JiekGWHFqYg6M1NKUevfGP+d7L7T3YExHPdQQFNvGQRNguYJ0WjSL96K mMNk9+Td/nALBOumFJbr7+WNo3c16nSXw4Cx5gH27GTbBDplVHwno2iCXJNGF1XV FmndTdfWOGFMNxbnjeZvKRDKTBkZHeHYc32NYn5U11/O4yFD9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHXMKPcZECeMaywDIq0QYCUeLE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDJlMzNkYTQtOTVmYS0z YmNmLWE3N2MtZWRiMDE2NjM5ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERigWJ5G04ddTLjEfrgihB5VuRiwh0oCYSXS1cUQM3fk/Y6wJZ5AGnd OlAEUYFyL7wLZFhMcHGfytTP9ZmW2n+dWtapErov+ByTokvEli1D0ezS6z3/lMHL gusfFT3z1zq7ub/TdkDe13HvI1INVCSD97cAbdhhCfG+Mi/dpY3xsUkefVMaO+ZE FI55VbIWAZg3ZVf5M1C2qhiUk3bF4rGidjjx4R9GAtSMEBbUSIPhqUJHc2CsJbXn Z235dy9cl8PVWCS5FRiJUUCjMKlcrFcW0Hwv3X81dawidlD3YTecBtQkOlM4NdXF B9iMWhNDZNSQMB9KpiJ5WWdlFDEBlmQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:15:33 2026 by rpki-client