$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa File: e20b336c-beb8-3213-bee8-1f4676f34006.roa (raw, json) Hash identifier: H+tiMWqYUsf2va4gBdAdqcbj/lS1+hOJVUcV4ZDoJHM= Subject key identifier: 67:91:6F:A4:EE:39:A8:9B:E4:AE:3A:81:E1:AA:6A:49:CA:84:D4:66 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5243C769BACE478FEDEA4140 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 141753 IP address blocks: 38.98.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c7:69:ba:ce:47:8f:ed:ea:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=c55d80db-e892-46ed-ba47-7d4eee99ca79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:71:46:f0:b4:7d:83:20:47:63:2b:7a:e0: 18:5e:84:67:c7:12:e2:4e:ad:3d:00:58:12:75:99: e0:dc:d4:e4:b4:7b:a5:a3:df:79:1a:4c:6a:df:31: 29:d9:f4:77:89:21:ba:70:48:82:cf:9c:5e:a6:33: c1:cd:92:7a:1f:b9:29:ee:fd:86:1f:bb:d9:7e:a8: fa:3e:a9:0d:a9:fd:31:e1:f3:79:d5:95:e0:f4:4e: f7:b8:58:73:6c:16:d2:14:81:bc:9e:b2:b8:6b:f8: 8a:51:dc:67:24:f5:eb:90:a5:a3:3e:b6:ae:42:54: 80:44:e7:57:59:7c:ef:66:08:72:e6:e7:9b:5d:61: 78:28:eb:81:b7:eb:44:4a:9e:54:d6:b1:f9:a1:e2: f0:10:86:6e:f0:ad:ec:f6:2a:2e:30:c3:0f:bf:f9: e8:a6:98:f4:fc:ac:f6:67:c6:8f:26:b9:78:64:9a: b2:6f:07:c3:c1:97:a0:a5:d4:b2:56:72:a2:2f:79: aa:ce:5c:2a:9a:17:c4:c6:44:8d:5d:24:22:0d:3f: af:1d:b5:5d:91:35:da:a8:d2:85:a8:9d:62:8c:4f: c1:82:cb:33:ac:ab:25:ac:c8:9f:37:18:10:1c:d5: a1:43:cd:ce:64:9c:8a:24:24:85:67:13:ba:7d:3e: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:91:6F:A4:EE:39:A8:9B:E4:AE:3A:81:E1:AA:6A:49:CA:84:D4:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.98.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f7:41:e7:61:da:a6:db:d4:52:cd:ac:14:07:6f:35:1e:fe: 20:9d:88:78:b6:17:83:28:94:5f:59:de:7d:4a:bb:4a:d5:d4: 68:2c:eb:ab:4a:87:ba:04:86:95:79:03:34:76:95:6f:7f:62: 8f:9e:74:49:f7:14:b3:22:5f:dc:37:8d:70:a2:81:c3:f5:1b: ac:94:3f:5b:b8:08:52:b5:94:05:88:4a:fb:c9:4a:92:ce:ac: a4:c9:d4:57:36:a2:2b:a2:87:67:0d:e8:32:ee:a0:81:4c:30: 13:61:2e:a4:f3:6d:ef:b7:9c:68:22:ec:2f:9d:5f:ca:cb:0d: fb:98:90:05:7b:83:8b:a5:53:9e:a7:ee:76:7d:a5:28:c7:4e: bf:4d:4f:de:cc:33:5e:c5:3e:86:b5:5e:de:93:bd:a7:3a:ad: ba:c4:3b:c3:92:b4:03:3a:15:72:91:71:26:36:eb:0a:3a:7b: 76:de:71:0e:dd:cd:58:62:12:2b:b4:ea:25:fa:c1:9d:a4:67: d1:a6:d7:bd:6d:3d:ff:da:39:80:32:14:5e:fc:66:fb:f5:71: 34:8c:3b:06:d7:cb:66:06:8a:1e:a3:d8:bf:1b:5a:3f:0d:26: d0:aa:49:91:4f:2c:b7:82:34:48:3f:81:e3:63:66:31:09:e5: 14:74:cd:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8dpus5Hj+3qQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YzU1ZDgwZGItZTg5Mi00NmVkLWJhNDctN2Q0ZWVlOTljYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1VxRvC0fYMgR2MreuAYXoRnxxLiTq09AFgS dZng3NTktHulo995Gkxq3zEp2fR3iSG6cEiCz5xepjPBzZJ6H7kp7v2GH7vZfqj6 PqkNqf0x4fN51ZXg9E73uFhzbBbSFIG8nrK4a/iKUdxnJPXrkKWjPrauQlSAROdX WXzvZghy5uebXWF4KOuBt+tESp5U1rH5oeLwEIZu8K3s9iouMMMPv/noppj0/Kz2 Z8aPJrl4ZJqybwfDwZegpdSyVnKiL3mqzlwqmhfExkSNXSQiDT+vHbVdkTXaqNKF qJ1ijE/BgsszrKslrMifNxgQHNWhQ83OZJyKJCSFZxO6fT5AqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeRb6TuOaib5K46geGqaknKhNRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTIwYjMzNmMtYmViOC0z MjEzLWJlZTgtMWY0Njc2ZjM0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn3Qedh2qbb1FLNrBQHbzUe/iCdiHi2F4MolF9Z3n1Ku0rV1Ggs66tK h7oEhpV5AzR2lW9/Yo+edEn3FLMiX9w3jXCigcP1G6yUP1u4CFK1lAWISvvJSpLO rKTJ1Fc2oiuih2cN6DLuoIFMMBNhLqTzbe+3nGgi7C+dX8rLDfuYkAV7g4ulU56n 7nZ9pSjHTr9NT97MM17FPoa1Xt6Tvac6rbrEO8OStAM6FXKRcSY26wo6e3becQ7d zVhiEiu06iX6wZ2kZ9Gm171tPf/aOYAyFF78Zvv1cTSMOwbXy2YGih6j2L8bWj8N JtCqSZFPLLeCNEg/geNjZjEJ5RR0zSg= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:22 2026 by rpki-client