$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/f594481f-b71f-3694-9566-972e2d639987.roa File: f594481f-b71f-3694-9566-972e2d639987.roa (raw, json) Hash identifier: Nb04Djq3TY9tLjgVKrKK81aVLqDOARA3T6gBQiRX+X4= Subject key identifier: EB:52:F8:38:78:D9:C6:CE:F9:AD:96:50:60:49:94:59:5A:4E:07:A7 Certificate issuer: /CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Certificate serial: 010D0C9F4328584D92BC9FE8B79F4AAEABCB0A00 Authority key identifier: DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/f594481f-b71f-3694-9566-972e2d639987.roa Signing time: Mon 20 Apr 2026 21:29:39 +0000 ROA not before: Mon 20 Apr 2026 21:29:39 +0000 ROA not after: Sun 19 Jul 2026 21:28:22 +0000 asID: 54821 IP address blocks: 198.58.28.0/22 maxlen: 24 2602:fe79::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:bc:9f:e8:b7:9f:4a:ae:ab:cb:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Validity Not Before: Apr 20 21:29:39 2026 GMT Not After : Jul 19 21:28:22 2026 GMT Subject: CN=7d87e268-ab0d-437c-a8cb-8c791f829fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:7c:5c:b3:53:0c:eb:d0:e1:61:ad:c3:7b: 0e:53:15:0e:1e:23:26:e8:58:a7:0b:5d:2d:27:1f: b7:a1:4b:93:70:ad:fc:a2:e6:52:e1:02:1f:6c:67: f1:c5:a7:64:d4:e4:4c:9e:d6:f1:0b:76:41:23:70: d8:7b:58:79:8f:25:69:b6:a3:bd:30:f7:47:2f:32: 9a:e1:b5:19:ea:39:31:1c:ae:fb:bc:56:ca:2f:ed: 59:11:52:e0:2b:c1:5e:de:72:2d:92:5b:46:11:31: 95:c9:90:75:f3:4b:3e:83:43:b0:40:2e:cb:ff:54: 43:dd:ce:62:76:bf:6a:c4:dc:20:b9:4a:fa:83:1e: 5d:37:cb:bb:5b:0f:04:97:9e:75:16:43:fb:2a:02: 14:a4:05:58:f1:5c:ff:87:fd:aa:a8:a8:96:cb:62: ab:3d:5a:d4:a5:a3:62:ae:9b:1c:1d:a9:21:53:88: b2:8c:05:33:86:bb:0a:7d:a4:98:5c:74:a1:90:bf: 16:2f:01:d3:e0:65:bc:67:84:2d:a2:95:3d:75:74: 88:0c:4a:12:f8:06:ad:a4:39:c6:44:8c:8e:7d:cb: 55:3f:89:ac:42:7f:ff:d1:d4:cf:60:c0:b4:74:91: 24:0c:70:73:0b:a6:10:ff:ab:65:f3:30:fa:db:3e: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:F8:38:78:D9:C6:CE:F9:AD:96:50:60:49:94:59:5A:4E:07:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/f594481f-b71f-3694-9566-972e2d639987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl X509v3 Authority Key Identifier: keyid:DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer sbgp-ipAddrBlock: critical IPv4: 198.58.28.0/22 IPv6: 2602:fe79::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:73:c3:43:81:ed:ac:3a:6d:c0:b0:09:c2:6e:cf:b1:0f:6e: 5c:32:e5:f8:76:04:82:29:3b:69:34:24:f8:ca:50:db:33:c2: 01:29:3a:e9:b3:53:2f:2d:f5:cc:b4:1e:4e:46:f7:00:32:65: df:0b:34:fa:85:30:c8:bb:8a:ce:f7:89:75:53:ac:96:64:83: 59:76:60:cd:3b:f5:dc:8d:6e:b5:2b:a8:61:f8:94:64:90:4e: b4:42:7d:25:ea:c9:dd:75:19:ab:d9:70:3c:a0:85:d2:89:c4: ea:56:49:e6:8b:0c:0e:bb:36:58:1a:89:dc:48:d0:ef:4b:4e: 0c:ca:75:20:75:38:f9:b6:c5:b4:26:12:ad:65:71:2b:49:aa: e5:39:76:35:46:33:33:ef:a2:77:c1:77:a8:a3:7b:7b:32:c3: 09:e0:a6:50:ec:a7:57:7e:81:6c:3d:5c:13:1d:41:67:69:6e: 7a:5a:bf:2f:98:74:a8:31:c6:87:9f:b2:33:8c:1f:59:b2:3c: 0d:46:83:9c:b6:fc:e3:43:a0:51:2d:6e:c9:e2:3f:53:be:89: ef:9c:7c:67:92:fc:bf:c8:c0:76:ff:61:29:a5:17:3d:65:52: 5a:d0:a6:10:18:28:08:be:25:e0:df:64:2d:3b:43:e9:eb:3c: 9f:04:c5:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2SvJ/ot59KrqvLCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4YzJiMWYtZjU4Zi00ZWRhLWI5NTMtMzVjNmU4ZTBh MWQzMB4XDTI2MDQyMDIxMjkzOVoXDTI2MDcxOTIxMjgyMlowLzEtMCsGA1UEAxMk N2Q4N2UyNjgtYWIwZC00MzdjLWE4Y2ItOGM3OTFmODI5ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiF8XLNTDOvQ4WGtw3sOUxUOHiMm6FinC10t Jx+3oUuTcK38ouZS4QIfbGfxxadk1ORMntbxC3ZBI3DYe1h5jyVptqO9MPdHLzKa 4bUZ6jkxHK77vFbKL+1ZEVLgK8Fe3nItkltGETGVyZB180s+g0OwQC7L/1RD3c5i dr9qxNwguUr6gx5dN8u7Ww8El551FkP7KgIUpAVY8Vz/h/2qqKiWy2KrPVrUpaNi rpscHakhU4iyjAUzhrsKfaSYXHShkL8WLwHT4GW8Z4QtopU9dXSIDEoS+AatpDnG RIyOfctVP4msQn//0dTPYMC0dJEkDHBzC6YQ/6tl8zD62z7A6QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOtS+Dh42cbO+a2WUGBJlFlaTgenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzhj MmIxZi1mNThmLTRlZGEtYjk1My0zNWM2ZThlMGExZDMvZjU5NDQ4MWYtYjcxZi0z Njk0LTk1NjYtOTcyZTJkNjM5OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4YzJiMWYtZjU4Zi00ZWRhLWI5 NTMtMzVjNmU4ZTBhMWQzLzgzOGMyYjFmLWY1OGYtNGVkYS1iOTUzLTM1YzZlOGUw YTFkMy5jcmwwHwYDVR0jBBgwFoAU3vgfdlol2WZKekh0kn4VKZJYaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzhjMmIxZi1mNThmLTRlZGEtYjk1My0zNWM2 ZThlMGExZDMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCxjocMA4E AgACMAgDBgQmAv55ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtc8NDge2sOm3AsAnCbs+xD25cMuX4dgSC KTtpNCT4ylDbM8IBKTrps1MvLfXMtB5ORvcAMmXfCzT6hTDIu4rO94l1U6yWZINZ dmDNO/XcjW61K6hh+JRkkE60Qn0l6snddRmr2XA8oIXSicTqVknmiwwOuzZYGonc SNDvS04MynUgdTj5tsW0JhKtZXErSarlOXY1RjMz76J3wXeoo3t7MsMJ4KZQ7KdX foFsPVwTHUFnaW56Wr8vmHSoMcaHn7IzjB9ZsjwNRoOctvzjQ6BRLW7J4j9Tvonv nHxnkvy/yMB2/2EppRc9ZVJa0KYQGCgIviXg32QtO0Pp6zyfBMVy -----END CERTIFICATE-----Generated at Wed Apr 22 07:04:11 2026 by rpki-client