$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: a2dDNvRvstyBw3vEgS8FqU/zEbMb/ZCrpbomEgrBw7k= Subject key identifier: E4:6E:7A:0B:41:DA:7B:0D:5C:C4:E4:CD:34:2B:CE:99:AA:FC:65:95 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584D7A051BBE90A34244EFB67100 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1b:be:90:a3:42:44:ef:b6:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=1c614260-355b-426b-abd8-580e1d13fe0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:d2:00:e3:56:22:36:85:a5:17:87:5b:a8: 37:1f:f5:de:2b:25:b8:5a:99:b0:c4:09:53:b0:e9: 7f:e1:d7:62:d8:f4:dd:3a:cf:5e:2e:ab:06:f7:dc: a9:ac:45:8f:f4:60:7f:ff:08:79:67:2e:ca:e9:51: 00:84:08:bd:67:f9:24:71:96:56:b4:1a:c1:98:dd: 66:ea:05:82:be:46:e3:45:60:cd:46:12:45:10:3e: 10:96:44:91:63:1b:66:71:16:19:3c:fa:7a:0d:49: 4e:7f:93:01:68:4c:67:76:2d:53:f3:dd:d1:49:ae: e0:33:59:8b:fb:57:83:04:66:a0:c5:43:91:b6:da: 65:69:7f:f1:69:e7:6e:83:eb:c6:37:76:af:9f:20: e4:c3:13:1d:05:cc:6c:e1:19:f7:79:fa:82:49:6f: c8:ca:92:25:d3:b6:1d:6a:37:23:0c:43:eb:0d:e6: 12:f8:b7:36:8c:7f:a4:8b:da:ad:c4:e5:71:bc:42: ec:b4:63:16:ef:8a:ca:0f:b0:0f:15:80:56:c5:46: 82:42:9a:56:36:9b:10:ca:95:e6:75:29:cf:78:85: aa:c6:92:44:e4:35:94:fb:ac:c6:ce:d9:48:54:7b: a9:99:2d:83:aa:7d:ba:24:16:fa:7b:33:f4:91:a2: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6E:7A:0B:41:DA:7B:0D:5C:C4:E4:CD:34:2B:CE:99:AA:FC:65:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:da:4a:4d:16:6c:b3:4e:b6:d8:6c:d1:5e:97:8d:22:ab:fa: d7:54:97:f4:c4:1e:04:b1:bf:72:80:7e:f1:3e:08:a6:aa:5b: 8a:96:75:4b:53:0c:6c:44:60:70:34:55:d3:ee:2e:ba:a3:87: 91:7a:0d:c8:4d:74:c3:b0:dd:45:f0:f6:4f:db:5e:66:84:39: 49:5d:a6:51:e3:17:a5:d8:2a:01:6f:3b:9c:08:77:d3:5f:f2: 37:e2:09:f5:2c:bc:73:37:91:ba:c8:35:37:4e:83:80:3f:99: 95:3b:0b:8a:75:3a:34:c7:6a:d7:9e:1a:ca:60:b8:ff:66:43: 99:c4:3e:14:2c:1b:23:20:99:ed:38:f2:10:16:96:1b:83:38: fb:6c:19:fd:c9:09:33:0e:34:52:c6:cb:b3:f1:ef:63:10:63: 10:92:3b:ac:d4:c5:1d:df:ed:b3:02:0f:08:58:65:63:e6:63: 23:5e:06:dd:de:5b:21:e1:00:f0:ee:cd:32:34:7f:8b:8f:f2: 40:b9:eb:b6:72:0a:41:7b:a6:d5:58:d5:21:37:ff:ae:c5:9b: 26:2c:69:9c:a4:2d:22:19:31:ca:2c:7e:53:04:03:44:7b:7f: f3:67:37:5b:9a:c5:af:24:39:0d:98:d5:ee:2e:94:2c:8e:23: a5:1c:aa:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRu+kKNCRO+2cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MWM2MTQyNjAtMzU1Yi00MjZiLWFiZDgtNTgwZTFkMTNmZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMjSAONWIjaFpReHW6g3H/XeKyW4WpmwxAlT sOl/4ddi2PTdOs9eLqsG99yprEWP9GB//wh5Zy7K6VEAhAi9Z/kkcZZWtBrBmN1m 6gWCvkbjRWDNRhJFED4QlkSRYxtmcRYZPPp6DUlOf5MBaExndi1T893RSa7gM1mL +1eDBGagxUORttplaX/xaedug+vGN3avnyDkwxMdBcxs4Rn3efqCSW/IypIl07Yd ajcjDEPrDeYS+Lc2jH+ki9qtxOVxvELstGMW74rKD7APFYBWxUaCQppWNpsQypXm dSnPeIWqxpJE5DWU+6zGztlIVHupmS2Dqn26JBb6ezP0kaINgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORuegtB2nsNXMTkzTQrzpmq/GWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPaSk0WbLNOtths0V6XjSKr+tdUl/TEHgSxv3KAfvE+CKaqW4qWdUtT DGxEYHA0VdPuLrqjh5F6DchNdMOw3UXw9k/bXmaEOUldplHjF6XYKgFvO5wId9Nf 8jfiCfUsvHM3kbrINTdOg4A/mZU7C4p1OjTHateeGspguP9mQ5nEPhQsGyMgme04 8hAWlhuDOPtsGf3JCTMONFLGy7Px72MQYxCSO6zUxR3f7bMCDwhYZWPmYyNeBt3e WyHhAPDuzTI0f4uP8kC567ZyCkF7ptVY1SE3/67FmyYsaZykLSIZMcosflMEA0R7 f/NnN1uaxa8kOQ2Y1e4ulCyOI6Ucqnc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:11 2026 by rpki-client