$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa File: ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa (raw, json) Hash identifier: gmHMz03OvitaBWo+jOvBxP3fhTuxCzPT3D3GaBf9zMU= Subject key identifier: C9:66:9A:54:4A:95:F7:A6:6E:4A:1F:21:DC:F4:2A:00:37:63:5D:8E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D7A05530B0116FDC653340D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 272118 IP address blocks: 38.150.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:53:0b:01:16:fd:c6:53:34:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=e4c9cb44-2019-45aa-b3dc-bc0ce16a6840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:e4:61:a9:63:d4:48:2c:00:c5:6c:16:6a: aa:80:c5:ca:dc:2e:28:6b:14:79:29:d4:54:f4:99: 42:26:9e:9e:b9:07:c2:29:8f:7a:89:20:d8:06:b1: 04:5c:38:e2:84:5b:77:0f:4c:e5:de:af:2b:94:aa: 12:4b:75:a5:f2:ba:fc:f1:d9:7f:48:95:49:aa:dd: ba:18:35:dc:cd:6a:76:19:12:ed:fc:6b:97:b7:b5: 7d:d7:2d:a4:59:9f:d5:b3:b9:7e:fe:f8:18:80:08: a2:52:2b:16:b9:30:d7:82:88:a4:4b:0e:cf:ff:3e: ec:74:08:4d:3f:b4:20:12:88:25:f9:0a:c9:71:cd: 64:4f:37:bb:41:26:6d:56:0f:1a:c5:ea:5b:eb:ac: 43:a6:16:7b:19:33:43:99:19:f5:7f:2f:93:8d:aa: e6:2c:ec:df:64:95:97:6e:a1:49:2e:58:d2:a6:a2: e8:83:b9:60:ac:6b:c8:22:bb:7a:56:f6:96:6b:21: 24:73:9a:fd:a7:7b:2c:8c:9d:48:27:eb:6a:65:6f: 90:3d:ef:d0:48:07:0f:b8:3a:56:67:e3:20:84:23: 0c:5f:f5:49:cf:55:96:34:2e:02:36:03:f4:d1:99: ba:28:c4:3e:3b:23:0c:27:c4:c1:28:b4:bc:53:a6: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:66:9A:54:4A:95:F7:A6:6E:4A:1F:21:DC:F4:2A:00:37:63:5D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.150.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9c:ae:07:a8:f2:2d:ba:32:fc:c0:84:0c:d4:fa:62:52:01: b3:7c:f5:c7:31:fd:a1:c1:a4:b0:07:d1:bb:2b:af:8b:b1:64: 74:e8:e5:a9:d1:32:d4:0d:57:f8:6c:d2:8f:23:fe:a3:77:37: 00:7b:23:e8:85:24:b7:a0:36:ec:5b:9b:ee:8c:be:98:59:b7: 06:46:8b:c4:3e:18:88:db:c6:35:f1:ca:70:5d:27:bd:68:f8: a0:95:61:f9:02:72:5e:e9:1d:e0:76:8d:97:96:81:c2:b4:5f: 72:92:a1:6f:be:eb:28:2c:ea:bb:fd:cd:72:f8:c7:38:19:53: cf:dc:69:48:98:9f:21:7c:7e:48:d4:18:f5:f2:b4:0c:d2:86: 82:19:88:35:26:a7:f6:df:5a:f9:63:af:b0:6a:84:61:aa:18: a2:b8:e9:ba:de:15:24:0b:29:25:31:f4:7d:6d:e9:bb:82:f8: 97:f6:a0:d3:26:06:b7:41:d7:13:97:f7:2e:96:38:ca:5b:9d: 1f:24:20:4e:0a:ff:b6:08:de:db:f2:40:93:c1:f5:37:29:e5: 6e:fe:9b:cd:37:51:a0:65:02:69:1c:64:91:67:d1:4c:3b:16: 9b:19:b9:05:5c:42:cf:0c:1f:a0:a4:81:eb:65:46:cd:e6:7f: 1e:f9:c5:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVMLARb9xlM0DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZTRjOWNiNDQtMjAxOS00NWFhLWIzZGMtYmMwY2UxNmE2ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnkYalj1EgsAMVsFmqqgMXK3C4oaxR5KdRU 9JlCJp6euQfCKY96iSDYBrEEXDjihFt3D0zl3q8rlKoSS3Wl8rr88dl/SJVJqt26 GDXczWp2GRLt/GuXt7V91y2kWZ/Vs7l+/vgYgAiiUisWuTDXgoikSw7P/z7sdAhN P7QgEogl+QrJcc1kTze7QSZtVg8axepb66xDphZ7GTNDmRn1fy+TjarmLOzfZJWX bqFJLljSpqLog7lgrGvIIrt6VvaWayEkc5r9p3ssjJ1IJ+tqZW+QPe/QSAcPuDpW Z+MghCMMX/VJz1WWNC4CNgP00Zm6KMQ+OyMMJ8TBKLS8U6b4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlmmlRKlfembkofIdz0KgA3Y12OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWEyNjBmOTEtYzg1ZC0z MWU1LWE4ZjktOWU0MmIxYWRmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJpZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFicrgeo8i26MvzAhAzU+mJSAbN89ccx/aHBpLAH0bsrr4uxZHTo5anR MtQNV/hs0o8j/qN3NwB7I+iFJLegNuxbm+6MvphZtwZGi8Q+GIjbxjXxynBdJ71o +KCVYfkCcl7pHeB2jZeWgcK0X3KSoW++6ygs6rv9zXL4xzgZU8/caUiYnyF8fkjU GPXytAzShoIZiDUmp/bfWvljr7BqhGGqGKK46breFSQLKSUx9H1t6buC+Jf2oNMm BrdB1xOX9y6WOMpbnR8kIE4K/7YI3tvyQJPB9Tcp5W7+m803UaBlAmkcZJFn0Uw7 FpsZuQVcQs8MH6CkgetlRs3mfx75xUA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:10:18 2026 by rpki-client