$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa File: b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa (raw, json) Hash identifier: ReD4m7+71KZwhLClphV7mD11kFCgg4U/O/1cbsGdimI= Subject key identifier: 8E:D1:C2:01:05:F2:85:C3:7F:09:B4:02:D3:B6:27:40:7D:5B:85:E1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5F7FB1933BE3406612DF7580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 269832 IP address blocks: 38.156.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b1:93:3b:e3:40:66:12:df:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=98e9acf6-d567-4604-bc09-c6e498e568e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:ca:91:ee:f9:75:58:de:10:aa:4b:d5:2c: 44:20:ef:a3:54:a0:4c:5a:a7:8f:5c:d8:a4:e4:e6: 1a:19:13:9f:69:e3:14:f5:64:44:da:78:68:22:a7: 9f:95:52:59:a0:69:5b:74:cf:02:bf:95:eb:75:49: 51:62:76:cf:70:3e:57:26:06:82:73:69:65:0a:8d: c0:80:95:70:a3:a8:4d:ef:90:53:4a:de:f8:88:ca: d0:51:12:02:2b:d9:74:ea:90:ab:90:a1:cc:5f:80: 5e:18:f3:92:1d:61:80:a3:94:8a:40:85:03:6c:62: 75:d6:8e:28:53:ff:fb:63:1a:f3:62:78:ef:c6:ce: 8d:17:16:77:72:11:1f:df:1d:91:f5:61:7f:79:94: 9a:a8:cf:fd:14:a8:ee:05:11:cb:76:25:fa:37:ea: f3:68:5c:f5:55:8a:c3:c7:8a:65:74:37:2e:c0:bf: 24:7c:55:d2:60:71:91:eb:a0:7c:f0:54:93:b1:6f: 05:d9:03:39:9d:2a:b6:2e:75:89:3b:43:96:4c:2b: 0b:66:56:d1:40:18:46:a2:a3:a5:e8:eb:45:ec:2e: fa:2e:29:33:a1:ed:44:a0:5d:5c:78:89:45:e5:ad: fd:b8:e0:63:74:61:62:02:ea:a5:d2:36:91:b9:48: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D1:C2:01:05:F2:85:C3:7F:09:B4:02:D3:B6:27:40:7D:5B:85:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ed:f4:9b:56:33:6c:2f:e1:78:6c:c4:36:6e:26:3d:6a:88: 2e:82:71:37:9c:3f:1e:6d:14:2c:0e:a2:92:7d:68:40:98:bb: 24:47:30:dc:aa:bc:c4:9b:f3:76:eb:5d:d1:64:2f:62:a7:36: c1:bd:e9:3f:2e:7b:d0:1d:28:77:66:fd:30:c1:b8:b5:11:99: f8:3d:3f:cd:a8:03:43:3a:18:bf:33:3a:89:e4:34:83:eb:f7: d0:6e:f7:4f:bd:e4:df:98:a6:67:f5:98:31:94:87:61:e9:6d: c4:ca:6c:a7:fa:3e:a9:2b:b3:8e:19:89:5b:a4:59:7c:8f:2a: 1c:da:ad:d2:8e:99:4f:ad:5f:e2:4e:f9:38:98:29:2b:6e:be: cd:f2:e5:5d:db:cf:0e:45:c9:f9:b8:d9:26:72:e6:2e:c6:66: d2:81:25:1b:20:66:93:a7:1c:75:bf:00:7c:de:c2:82:2e:5e: c1:63:9f:5d:60:8b:d9:07:74:24:5a:1e:72:e5:a7:a2:a1:a1: fe:cd:dc:b5:3b:03:1b:84:b2:fd:42:fe:f7:b3:b8:91:c8:0e: a2:1e:04:a3:c0:4a:7b:95:17:00:b3:eb:30:da:e7:c6:d3:06: 53:52:1e:d7:cb:96:28:6b:c7:96:39:32:50:b7:3d:82:aa:64: 7b:d3:49:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff7GTO+NAZhLfdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk OThlOWFjZjYtZDU2Ny00NjA0LWJjMDktYzZlNDk4ZTU2OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmobKke75dVjeEKpL1SxEIO+jVKBMWqePXNik 5OYaGROfaeMU9WRE2nhoIqeflVJZoGlbdM8Cv5XrdUlRYnbPcD5XJgaCc2llCo3A gJVwo6hN75BTSt74iMrQURICK9l06pCrkKHMX4BeGPOSHWGAo5SKQIUDbGJ11o4o U//7YxrzYnjvxs6NFxZ3chEf3x2R9WF/eZSaqM/9FKjuBRHLdiX6N+rzaFz1VYrD x4pldDcuwL8kfFXSYHGR66B88FSTsW8F2QM5nSq2LnWJO0OWTCsLZlbRQBhGoqOl 6OtF7C76Likzoe1EoF1ceIlF5a39uOBjdGFiAuql0jaRuUg4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7RwgEF8oXDfwm0AtO2J0B9W4XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjRmM2ZkZGQtODllYi0z YWEzLWEzOGEtMjY1ZGUyZGQ0MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpwTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLt9JtWM2wv4XhsxDZuJj1qiC6CcTecPx5tFCwOopJ9aECYuyRHMNyq vMSb83brXdFkL2KnNsG96T8ue9AdKHdm/TDBuLURmfg9P82oA0M6GL8zOonkNIPr 99Bu90+95N+Ypmf1mDGUh2HpbcTKbKf6Pqkrs44ZiVukWXyPKhzardKOmU+tX+JO +TiYKStuvs3y5V3bzw5Fyfm42SZy5i7GZtKBJRsgZpOnHHW/AHzewoIuXsFjn11g i9kHdCRaHnLlp6Khof7N3LU7AxuEsv1C/vezuJHIDqIeBKPASnuVFwCz6zDa58bT BlNSHtfLlihrx5Y5MlC3PYKqZHvTSeA= -----END CERTIFICATE-----Generated at Wed Apr 8 06:00:37 2026 by rpki-client