$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df947e01-434b-3b1c-b94c-ed3536b6d843.roa File: df947e01-434b-3b1c-b94c-ed3536b6d843.roa (raw, json) Hash identifier: BW1A1o/Lvopt0aBmBXH9w+M+TU66f504HeeBx3PYBAY= Subject key identifier: 72:D5:B8:96:EF:B8:60:84:6D:04:23:DA:C2:EA:E3:6A:B4:2B:AE:6D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D895FE771E9F012074CF38AC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df947e01-434b-3b1c-b94c-ed3536b6d843.roa Signing time: Fri 17 Apr 2026 13:00:31 +0000 ROA not before: Fri 17 Apr 2026 13:00:31 +0000 ROA not after: Thu 16 Jul 2026 13:00:31 +0000 asID: 273254 IP address blocks: 38.196.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:5f:e7:71:e9:f0:12:07:4c:f3:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 17 13:00:31 2026 GMT Not After : Jul 16 13:00:31 2026 GMT Subject: CN=c8134f74-e2e2-46dd-9a14-1bfd1539a9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:de:40:cb:91:47:c7:6d:a0:63:84:f8:a7:29: a9:1f:9e:1d:65:19:66:46:2b:5d:5f:ce:ef:f9:1d: c4:30:94:f9:cc:15:70:94:4c:0a:f0:ac:87:94:12: 39:08:e2:ed:0c:65:59:75:28:09:ae:24:52:74:c4: 35:f0:79:f1:fb:b5:bf:73:f7:fe:19:a6:a1:5a:f7: cd:c7:63:ab:52:a6:51:29:19:be:3b:4a:da:33:6f: e7:85:4b:fe:2b:17:ab:b7:26:34:7d:8d:e4:2d:ec: 0b:d0:3d:52:32:51:d8:ad:ef:4e:23:2e:09:3d:6d: d0:8a:52:a3:f1:f3:af:dc:5e:07:f6:2b:6c:fd:18: bc:c8:05:2e:17:27:ab:84:4e:72:d4:b7:6d:fc:11: 66:c7:f5:c1:e1:36:ff:8b:79:86:8e:09:a8:89:c8: a8:9e:08:fd:d1:d5:05:99:e3:d7:68:98:9f:cd:f3: 09:1e:df:82:07:b5:b4:88:dc:05:88:b8:f6:06:9a: 8e:81:7a:29:5b:5b:a9:42:b1:d5:f6:e5:e4:bd:fb: 5d:78:08:f1:e1:b7:de:32:34:a3:38:3f:01:e2:c0: 22:b3:69:ab:f7:0e:df:89:fd:75:65:e0:f0:60:ca: a2:8b:f1:73:01:53:c9:29:70:ca:7c:ce:eb:5c:25: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D5:B8:96:EF:B8:60:84:6D:04:23:DA:C2:EA:E3:6A:B4:2B:AE:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df947e01-434b-3b1c-b94c-ed3536b6d843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f1:5a:50:4e:3d:26:8d:70:6f:c2:41:8e:37:02:67:54:de: bd:36:85:26:e9:5f:28:f3:17:41:93:d6:e0:95:f0:4e:f1:bf: 97:be:39:3f:73:05:ff:52:74:67:27:4e:d4:4b:b9:1f:82:53: 5a:48:1e:b9:5e:6d:ca:55:2d:c4:0d:9b:54:e5:42:58:08:ce: d4:e4:be:54:76:c6:ba:b4:a7:54:31:f0:4f:86:df:75:37:cf: 9a:9c:cb:de:c0:a6:93:8e:e1:d5:f9:40:ec:57:89:07:1d:40: d5:8d:4e:d5:a5:90:8d:c3:ac:60:70:e8:eb:2d:bc:a4:64:f4: f1:66:14:6c:4a:bd:76:fd:c7:10:57:6d:c0:a8:61:ce:35:30: 5b:22:32:29:51:a8:bf:9c:fe:63:32:4e:1f:b9:f2:4a:9c:e3: 1c:95:52:07:40:81:74:19:df:9b:58:20:47:0c:f5:b3:86:5a: 51:2c:08:4d:ce:83:c8:41:cd:51:3a:68:c6:49:9a:86:23:dd: 95:af:2d:6a:c0:ad:29:87:a3:9f:5a:36:a4:e4:0b:d1:40:32: 52:67:a3:77:90:79:6c:a4:1a:96:c2:15:f8:4d:4f:7a:22:ce: ea:71:45:22:7c:75:17:52:af:a7:38:81:ea:62:fa:be:e5:a1: 1a:93:18:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2JX+dx6fASB0zzisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxNzEzMDAzMVoXDTI2MDcxNjEzMDAzMVowLzEtMCsGA1UEAxMk YzgxMzRmNzQtZTJlMi00NmRkLTlhMTQtMWJmZDE1MzlhOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN5Ay5FHx22gY4T4pympH54dZRlmRitdX87v +R3EMJT5zBVwlEwK8KyHlBI5COLtDGVZdSgJriRSdMQ18Hnx+7W/c/f+GaahWvfN x2OrUqZRKRm+O0raM2/nhUv+KxertyY0fY3kLewL0D1SMlHYre9OIy4JPW3QilKj 8fOv3F4H9its/Ri8yAUuFyerhE5y1Ldt/BFmx/XB4Tb/i3mGjgmoiciongj90dUF mePXaJifzfMJHt+CB7W0iNwFiLj2BpqOgXopW1upQrHV9uXkvftdeAjx4bfeMjSj OD8B4sAis2mr9w7fif11ZeDwYMqii/FzAVPJKXDKfM7rXCWhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLVuJbvuGCEbQQj2sLq42q0K65tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGY5NDdlMDEtNDM0Yi0z YjFjLWI5NGMtZWQzNTM2YjZkODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjxWlBOPSaNcG/CQY43AmdU3r02hSbpXyjzF0GT1uCV8E7xv5e+OT9z Bf9SdGcnTtRLuR+CU1pIHrlebcpVLcQNm1TlQlgIztTkvlR2xrq0p1Qx8E+G33U3 z5qcy97AppOO4dX5QOxXiQcdQNWNTtWlkI3DrGBw6OstvKRk9PFmFGxKvXb9xxBX bcCoYc41MFsiMilRqL+c/mMyTh+58kqc4xyVUgdAgXQZ35tYIEcM9bOGWlEsCE3O g8hBzVE6aMZJmoYj3ZWvLWrArSmHo59aNqTkC9FAMlJno3eQeWykGpbCFfhNT3oi zupxRSJ8dRdSr6c4gepi+r7loRqTGC0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:19:19 2026 by rpki-client