$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa File: 38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa (raw, json) Hash identifier: KrWRmuwIADsH9Kp9Rf6CrUjtkz1fcwaJ4AyMlKGNMy0= Subject key identifier: 22:32:06:8C:91:3E:25:4B:73:42:AF:BF:F4:B5:E8:E7:E4:88:E8:35 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F4328584DADAAD24A5E57C8CA6645D800 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 4181 IP address blocks: 40.161.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d2:4a:5e:57:c8:ca:66:45:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=bfb9ee7f-b4dc-4022-b943-241f7ddb4fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:29:8f:d4:9d:5a:4b:07:e4:f2:74:ca:52: 23:55:0e:92:65:f4:c5:24:11:e1:36:c8:69:e8:e1: 8f:0c:98:5a:bf:b2:ff:43:bb:4c:cc:c8:77:06:e9: d4:e5:51:36:32:7b:34:d7:ce:d5:e4:e3:6c:17:a5: cb:c8:f9:5e:3a:a2:0d:c3:86:cd:27:4a:e3:b2:ce: 24:f7:27:3c:23:a4:5f:05:b3:94:c2:6b:40:0c:bf: 6c:a0:59:16:35:d1:8d:5f:e2:52:62:8c:2d:aa:df: b7:d6:73:f6:8f:f0:fd:0a:27:f2:8b:78:55:48:44: 4e:64:ad:5d:35:d4:57:b5:24:3a:1c:34:b5:94:b2: 89:90:85:af:4b:a2:97:f1:9c:9a:32:48:43:fc:fa: fa:91:6a:a7:de:8c:bc:e5:32:75:ef:fc:84:1d:15: fd:ef:39:dc:93:69:f0:d6:c1:35:bb:7d:42:c3:9a: 75:22:75:36:62:f8:bf:a7:5a:33:0c:11:2e:34:0e: f2:0c:6f:6c:98:1d:16:68:ed:d9:43:a7:86:a4:37: e9:d7:de:19:e9:f5:25:43:6f:93:7c:6d:c4:11:c6: 83:2d:1c:63:8e:d7:25:46:34:a6:70:d9:3f:3c:92: 5e:bd:56:59:47:4e:13:5d:5b:53:a6:a4:a5:f1:7c: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:06:8C:91:3E:25:4B:73:42:AF:BF:F4:B5:E8:E7:E4:88:E8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 40.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:40:63:02:0b:aa:70:c1:08:88:23:45:9a:0b:f7:85:bc:a4: 9b:3c:9a:4a:7f:9a:b8:90:73:84:b8:44:d2:3b:66:f8:38:6c: 7d:8e:a7:46:f3:36:7b:e5:b1:ca:7b:60:45:0e:78:8b:7e:ba: ed:19:fc:1c:a5:19:fe:f1:7a:1d:14:fc:e6:7f:0b:12:0d:75: 68:3d:17:96:b0:d2:cf:9c:b1:07:36:fe:61:66:90:17:7d:09: 3c:3d:5a:c6:3e:82:41:2c:08:28:96:04:0c:3d:45:e4:a9:99: 5b:54:ca:c1:df:b2:2b:10:6a:da:96:62:7a:0a:48:f2:a4:a7: c1:04:7a:90:f7:31:27:ec:ab:ba:23:89:ce:98:66:64:97:6c: a3:0e:f1:c1:95:ac:05:48:08:93:b1:05:66:3b:9d:4d:c6:7d: 5c:00:b9:ba:41:36:bb:99:df:15:4f:58:36:79:73:8e:58:fa: 22:04:64:8c:e3:cd:e0:dd:be:d5:b4:88:14:4c:92:23:01:29: 78:52:6c:09:ea:c9:8d:c4:4c:2e:be:f4:0c:ec:a0:de:77:79: c0:3f:61:d2:3c:10:cb:f9:c4:37:bd:59:14:02:52:5f:e9:df: 2b:fe:98:62:e9:c3:77:c1:1c:60:7b:1a:11:eb:58:13:ea:be: 04:a6:99:d9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2tqtJKXlfIymZF2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YmZiOWVlN2YtYjRkYy00MDIyLWI5NDMtMjQxZjdkZGI0ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoQpj9SdWksH5PJ0ylIjVQ6SZfTFJBHhNshp 6OGPDJhav7L/Q7tMzMh3BunU5VE2Mns0187V5ONsF6XLyPleOqINw4bNJ0rjss4k 9yc8I6RfBbOUwmtADL9soFkWNdGNX+JSYowtqt+31nP2j/D9Cifyi3hVSEROZK1d NdRXtSQ6HDS1lLKJkIWvS6KX8ZyaMkhD/Pr6kWqn3oy85TJ17/yEHRX97znck2nw 1sE1u31Cw5p1InU2Yvi/p1ozDBEuNA7yDG9smB0WaO3ZQ6eGpDfp194Z6fUlQ2+T fG3EEcaDLRxjjtclRjSmcNk/PJJevVZZR04TXVtTpqSl8XyMVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCIyBoyRPiVLc0Kvv/S16OfkiOg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvMzhjN2IzYTktN2ZjOC0z Y2UwLWE1MjMtZDc2NDJhZjMwMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEUBjAguqcMEIiCNFmgv3hbykmzyaSn+auJBzhLhE0jtm+DhsfY6nRvM2 e+WxyntgRQ54i3667Rn8HKUZ/vF6HRT85n8LEg11aD0XlrDSz5yxBzb+YWaQF30J PD1axj6CQSwIKJYEDD1F5KmZW1TKwd+yKxBq2pZiegpI8qSnwQR6kPcxJ+yruiOJ zphmZJdsow7xwZWsBUgIk7EFZjudTcZ9XAC5ukE2u5nfFU9YNnlzjlj6IgRkjOPN 4N2+1bSIFEySIwEpeFJsCerJjcRMLr70DOyg3nd5wD9h0jwQy/nEN71ZFAJSX+nf K/6YYunDd8EcYHsaEetYE+q+BKaZ2Q== -----END CERTIFICATE-----Generated at Fri May 8 18:24:18 2026 by rpki-client