$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa File: df0b34e2-e449-34cd-8b4f-82098402cffa.roa (raw, json) Hash identifier: 9pQQWMffqS65+n1P0DnWcytxhclqX/zXQ7AhXqv9dOw= Subject key identifier: 35:62:E9:ED:BF:AA:4B:D1:2C:F1:88:C3:9B:81:07:ED:F5:06:6F:4C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D86954CAC0A91E278B5158B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 393436 IP address blocks: 38.20.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4c:ac:0a:91:e2:78:b5:15:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=11c4192f-dd9d-4b6e-a95f-ce8649c16b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:a2:23:b0:1a:45:8c:5f:65:60:ec:83:24: 62:c7:37:d6:5b:d4:3c:a8:c0:e6:19:d8:ac:93:fc: 9a:ba:2b:0c:2f:10:4a:1a:ec:63:9d:39:35:64:90: d4:ab:21:ce:df:cf:5c:8f:0f:e5:bc:79:aa:33:1f: 69:01:d2:ec:c4:43:ed:bc:e6:e5:71:5e:fb:de:4e: 95:b0:db:e9:74:19:f5:05:f2:87:ec:22:d4:28:d7: 96:70:77:56:53:23:99:df:39:87:12:c3:42:ef:48: c5:25:d5:f8:d5:39:72:9f:0d:7f:f1:81:d3:79:1d: 22:e1:c0:dc:75:10:36:7c:34:37:bc:36:34:cb:b2: f6:b9:66:f9:cf:5a:ca:1c:5e:f2:29:b5:45:86:c9: 6c:a3:20:2d:88:c8:08:01:7e:a1:6c:20:56:bf:93: 89:69:de:b7:f8:03:9a:34:17:fc:f3:74:0f:16:c9: 1e:54:1f:5e:fa:db:5a:64:59:82:af:e8:4f:f1:ed: e5:8d:95:90:51:04:e3:82:ba:a3:c4:83:f8:2a:68: f9:a2:3a:83:3a:5a:c4:5c:a4:93:8c:4b:f9:4a:be: 27:3f:b0:49:87:01:5a:5e:95:23:44:b4:af:d1:90: 02:11:b3:52:62:a8:06:f8:4f:10:7b:34:76:29:a0: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:E9:ED:BF:AA:4B:D1:2C:F1:88:C3:9B:81:07:ED:F5:06:6F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df0b34e2-e449-34cd-8b4f-82098402cffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:05:bf:4b:d3:93:b7:72:b6:6a:7c:40:b7:0b:e7:ff:6c:4a: 5a:48:b2:05:80:61:4f:4a:03:47:c0:a5:47:a3:f2:f8:cb:91: 54:88:13:31:15:c9:ec:fa:d5:02:2e:02:fc:e2:7a:4d:3f:80: cf:9f:b8:ed:79:68:f2:10:c0:9c:b0:1e:50:dd:88:42:67:f1: d6:aa:bc:d8:a5:30:4e:1d:f1:ad:03:24:a4:a4:31:15:a9:eb: 60:59:4c:38:81:62:57:5d:28:df:25:36:d6:b8:6f:13:e3:80: 15:49:73:dd:fa:b1:dc:e4:18:6c:46:eb:d8:60:7f:b9:93:16: 72:e0:73:9a:af:70:d7:56:3c:8d:ca:ed:fe:3b:47:e0:b2:11: 69:1d:90:aa:ee:f9:f8:2f:0e:63:8b:fa:4f:68:6f:59:54:06: 53:0c:c2:b6:f1:58:fb:1e:3a:43:f8:0a:be:20:c9:93:f7:7a: f3:69:7f:e7:2a:f7:34:b4:90:c3:65:34:0a:44:3d:27:43:3b: 41:54:ae:c0:40:a5:04:9a:9b:ab:f0:4f:84:c6:86:d3:8f:a8: 95:23:fb:95:90:08:84:99:0f:18:9f:30:e4:f9:4f:d0:fd:bc: 84:36:ad:41:1b:4c:6d:e8:2b:ed:5b:54:ea:ae:bb:48:cd:a2: 5e:2e:91:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUysCpHieLUVi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MTFjNDE5MmYtZGQ5ZC00YjZlLWE5NWYtY2U4NjQ5YzE2YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB6iI7AaRYxfZWDsgyRixzfWW9Q8qMDmGdis k/yauisMLxBKGuxjnTk1ZJDUqyHO389cjw/lvHmqMx9pAdLsxEPtvOblcV773k6V sNvpdBn1BfKH7CLUKNeWcHdWUyOZ3zmHEsNC70jFJdX41Tlynw1/8YHTeR0i4cDc dRA2fDQ3vDY0y7L2uWb5z1rKHF7yKbVFhslsoyAtiMgIAX6hbCBWv5OJad63+AOa NBf883QPFskeVB9e+ttaZFmCr+hP8e3ljZWQUQTjgrqjxIP4Kmj5ojqDOlrEXKST jEv5Sr4nP7BJhwFaXpUjRLSv0ZACEbNSYqgG+E8QezR2KaCJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVi6e2/qkvRLPGIw5uBB+31Bm9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGYwYjM0ZTItZTQ0OS0z NGNkLThiNGYtODIwOTg0MDJjZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4Fv0vTk7dytmp8QLcL5/9sSlpIsgWAYU9KA0fApUej8vjLkVSIEzEV yez61QIuAvziek0/gM+fuO15aPIQwJywHlDdiEJn8daqvNilME4d8a0DJKSkMRWp 62BZTDiBYlddKN8lNta4bxPjgBVJc936sdzkGGxG69hgf7mTFnLgc5qvcNdWPI3K 7f47R+CyEWkdkKru+fgvDmOL+k9ob1lUBlMMwrbxWPseOkP4Cr4gyZP3evNpf+cq 9zS0kMNlNApEPSdDO0FUrsBApQSam6vwT4TGhtOPqJUj+5WQCISZDxifMOT5T9D9 vIQ2rUEbTG3oK+1bVOquu0jNol4ukUo= -----END CERTIFICATE-----Generated at Fri Apr 17 04:26:20 2026 by rpki-client