$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffd737b6-fc09-3edd-81ed-92f7fa0afbd8.roa File: ffd737b6-fc09-3edd-81ed-92f7fa0afbd8.roa (raw, json) Hash identifier: eVLY1VOCV+NC53LuZvJ683wStnUT0NMgpc+16hiasPA= Subject key identifier: EE:C4:49:B5:0B:DB:C0:51:12:4E:BB:FF:94:AC:02:B0:9A:D6:6D:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5F8C4BFB1822C2F6EE886900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffd737b6-fc09-3edd-81ed-92f7fa0afbd8.roa Signing time: Thu 02 Apr 2026 13:26:03 +0000 ROA not before: Thu 02 Apr 2026 13:26:03 +0000 ROA not after: Wed 01 Jul 2026 13:26:03 +0000 asID: 28451 IP address blocks: 38.56.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:8c:4b:fb:18:22:c2:f6:ee:88:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 2 13:26:03 2026 GMT Not After : Jul 1 13:26:03 2026 GMT Subject: CN=2f339541-4e2f-4556-b26d-82143f7d4e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:28:d1:3d:97:7b:c0:e3:bb:0d:9c:9f:27: eb:76:15:c8:ec:48:73:ff:b8:7b:59:29:76:9a:54: 3f:a1:d6:e6:30:34:89:96:22:49:29:41:a5:ee:e3: 96:28:f4:42:d2:e7:f7:87:53:e2:c5:73:18:7d:3f: b5:ba:d5:d2:e9:38:d3:05:03:85:fa:19:b4:14:f0: e3:d9:3a:61:41:35:16:9c:e7:6e:cb:22:9d:39:b6: bf:61:02:22:15:20:50:87:e5:1c:e7:03:9d:5f:6f: c8:41:73:50:b1:52:1d:38:fb:b9:45:1b:47:f7:d8: a9:3e:9d:5d:5d:8f:a6:5e:20:8d:e1:cd:1a:05:1b: ee:e0:17:57:8e:2a:f7:77:fe:0b:0a:80:24:44:bb: 1e:eb:d6:1d:32:d7:d5:91:d0:79:5d:1e:b6:1f:58: cf:28:56:97:a2:25:5c:b6:ec:08:ce:55:00:1b:32: 04:88:8c:8a:c0:d0:83:c3:b1:c6:e1:48:81:dd:84: 77:4e:24:df:b9:c1:e2:94:12:d2:aa:26:40:95:85: c7:64:20:91:56:b4:7b:c0:86:db:55:cf:82:0c:c3: 8c:41:ae:e4:70:9d:58:ac:37:ed:0a:a7:21:d3:04: 54:68:77:73:e9:f4:2f:7e:04:d6:07:b3:e8:d0:1e: 7e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C4:49:B5:0B:DB:C0:51:12:4E:BB:FF:94:AC:02:B0:9A:D6:6D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffd737b6-fc09-3edd-81ed-92f7fa0afbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:96:6d:d7:16:c8:50:26:51:f8:f1:dc:7f:88:8f:a9:d1:4e: 01:8e:8f:5d:b4:0f:13:dc:51:d2:e9:26:50:01:04:8d:84:c8: 43:b1:48:ba:fa:6c:41:bb:eb:2c:20:68:95:6d:da:1b:39:f1: 66:16:93:e8:37:a9:05:0f:75:c2:6e:3b:0e:f0:24:32:2b:e9: f3:3e:7a:71:78:31:85:16:e3:36:90:67:7c:30:9a:97:87:cd: a3:d4:c3:17:c5:5e:d4:3d:fc:9d:3f:52:f5:72:f8:94:88:71: c5:2c:0e:cc:17:70:05:c6:4b:97:37:23:5d:bb:e8:4f:dd:6f: 0e:50:51:8f:09:7c:c6:1a:c9:f0:39:ce:1a:0b:d6:ec:1a:c0: af:69:52:7a:6f:82:65:40:39:93:b0:1d:01:26:15:62:6b:6c: 83:30:19:38:a3:e5:20:ce:2a:5c:9c:73:58:1d:ae:68:72:a1: c9:72:d2:1d:8d:1a:c1:76:4f:b7:f2:9c:d0:86:7c:02:9a:46: 17:b8:4a:1e:89:e3:b9:7e:89:a5:d3:32:ff:be:5d:7a:74:5b: b2:f6:4e:38:4a:de:96:bb:8d:48:ab:00:66:a0:e4:64:79:1e: 1e:e4:e9:9c:d5:a6:5a:48:3a:e9:d1:27:e4:45:d2:06:ca:27: bf:3c:75:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fjEv7GCLC9u6IaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwMjEzMjYwM1oXDTI2MDcwMTEzMjYwM1owLzEtMCsGA1UEAxMk MmYzMzk1NDEtNGUyZi00NTU2LWIyNmQtODIxNDNmN2Q0ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Loo0T2Xe8Djuw2cnyfrdhXI7Ehz/7h7WSl2 mlQ/odbmMDSJliJJKUGl7uOWKPRC0uf3h1PixXMYfT+1utXS6TjTBQOF+hm0FPDj 2TphQTUWnOduyyKdOba/YQIiFSBQh+Uc5wOdX2/IQXNQsVIdOPu5RRtH99ipPp1d XY+mXiCN4c0aBRvu4BdXjir3d/4LCoAkRLse69YdMtfVkdB5XR62H1jPKFaXoiVc tuwIzlUAGzIEiIyKwNCDw7HG4UiB3YR3TiTfucHilBLSqiZAlYXHZCCRVrR7wIbb Vc+CDMOMQa7kcJ1YrDftCqch0wRUaHdz6fQvfgTWB7Po0B5+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7ESbUL28BREk67/5SsArCa1m3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmZkNzM3YjYtZmMwOS0z ZWRkLTgxZWQtOTJmN2ZhMGFmYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2WbdcWyFAmUfjx3H+Ij6nRTgGOj120DxPcUdLpJlABBI2EyEOxSLr6 bEG76ywgaJVt2hs58WYWk+g3qQUPdcJuOw7wJDIr6fM+enF4MYUW4zaQZ3wwmpeH zaPUwxfFXtQ9/J0/UvVy+JSIccUsDswXcAXGS5c3I1276E/dbw5QUY8JfMYayfA5 zhoL1uwawK9pUnpvgmVAOZOwHQEmFWJrbIMwGTij5SDOKlycc1gdrmhyocly0h2N GsF2T7fynNCGfAKaRhe4Sh6J47l+iaXTMv++XXp0W7L2TjhK3pa7jUirAGag5GR5 Hh7k6ZzVplpIOunRJ+RF0gbKJ788dd0= -----END CERTIFICATE-----Generated at Wed Apr 8 09:15:48 2026 by rpki-client