$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa File: 0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa (raw, json) Hash identifier: tZQqjOrk8aKAKnCh080VxlsvxA73DCPUSaZvLZTGrcE= Subject key identifier: AA:F4:C3:7C:0C:80:53:CD:C4:C0:22:75:7E:58:DF:2F:54:47:7D:3F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DFBD629548593C8944565C080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 46783 IP address blocks: 38.57.234.0/23 maxlen: 24 38.64.56.0/21 maxlen: 24 38.65.88.0/21 maxlen: 24 38.71.18.0/24 maxlen: 24 38.146.29.0/24 maxlen: 24 38.146.30.0/24 maxlen: 24 38.255.16.0/23 maxlen: 24 154.50.110.0/24 maxlen: 24 154.51.40.0/23 maxlen: 24 154.53.74.0/23 maxlen: 24 209.146.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:29:54:85:93:c8:94:45:65:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=4b0a697c-9639-4ad0-8cb1-e567c560b00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:7c:67:26:92:dc:03:10:a1:49:7a:8e:61: 3c:ca:ac:8b:ba:77:f5:25:73:1e:d1:09:17:21:d5: 41:63:62:6a:77:ad:c4:31:a1:fb:3c:f3:b5:3e:b5: 30:71:12:f9:e3:da:be:fd:13:93:62:09:12:68:de: 7d:71:14:9e:eb:02:37:d4:c5:0f:26:36:06:34:84: dd:0b:7d:3a:52:83:67:1b:35:a3:f9:0f:71:85:82: 11:97:c9:82:80:4a:dc:0b:60:b8:a8:ee:ff:97:e3: a1:3e:25:55:c8:5f:a5:29:05:b0:c4:89:48:39:b3: a9:18:9b:f3:05:f0:2d:e0:b9:0c:df:8a:13:76:82: 9a:44:1f:47:8d:3d:fd:f2:ae:ef:e2:1c:04:4c:dc: 49:6d:60:fe:0a:4c:43:07:15:88:6d:e4:5c:13:d5: 86:6b:60:f1:b1:10:80:ca:7a:10:db:98:08:cf:11: db:80:5b:80:55:05:c4:9e:f7:25:e3:fd:ae:ae:01: 6b:bc:58:53:5e:65:1c:01:e1:ab:47:f2:70:b6:ac: 3d:8f:bc:52:83:34:15:9e:94:5f:b4:8e:a7:63:20: 82:cf:ba:fd:81:17:d2:36:74:8a:b0:4a:c2:12:77: c6:fa:31:ec:fa:b6:18:6a:08:17:ec:b2:0c:87:01: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F4:C3:7C:0C:80:53:CD:C4:C0:22:75:7E:58:DF:2F:54:47:7D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.234.0/23 38.64.56.0/21 38.65.88.0/21 38.71.18.0/24 38.146.29.0-38.146.30.255 38.255.16.0/23 154.50.110.0/24 154.51.40.0/23 154.53.74.0/23 209.146.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6d:0b:8a:71:a3:60:7f:29:34:f5:3b:4a:57:8f:60:f5:23: 7c:b8:f9:60:a1:80:6c:df:0b:2a:ec:d6:48:ab:26:97:52:8e: 68:03:22:f0:f4:87:13:2f:35:e6:91:e6:d5:25:e3:77:e0:18: 93:fe:31:e8:d8:49:f3:bb:c4:d6:23:79:b4:13:20:86:b7:0a: f5:5a:9b:a2:a5:b4:3e:e3:ff:16:54:28:27:79:c8:00:78:97: 2c:7c:5d:1b:a5:9d:2b:73:b5:46:95:fd:b0:3a:14:b6:6f:81: 16:a2:42:fa:9a:d4:a7:e4:39:f2:1b:72:ac:14:29:de:24:fe: 4d:88:38:3f:51:4f:95:61:c9:9d:8f:6a:06:fd:a1:03:84:fd: 03:7f:cd:51:bd:9b:69:d0:8e:10:ed:b6:d8:bb:24:22:00:43: 01:e7:4e:d5:eb:7b:12:50:3c:a1:ed:f6:c0:7a:51:b7:8d:12: 1d:ae:a1:16:e4:ad:46:7c:2a:ff:11:54:f3:f0:c4:dd:53:0e: 34:78:6c:11:b0:50:3d:14:28:b5:dd:be:34:1e:4a:58:b7:b7: 46:97:e2:49:1f:76:0e:01:0b:3b:c9:78:8e:f8:65:7a:30:66: 93:1c:07:50:a0:0b:c9:f6:fc:a8:cb:f3:67:52:47:69:ad:96: 5f:06:03:40 -----BEGIN CERTIFICATE----- MIIGgTCCBWmgAwIBAgIUAQ0Mn0MoWE371ilUhZPIlEVlwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk NGIwYTY5N2MtOTYzOS00YWQwLThjYjEtZTU2N2M1NjBiMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2J8ZyaS3AMQoUl6jmE8yqyLunf1JXMe0QkX IdVBY2Jqd63EMaH7PPO1PrUwcRL549q+/ROTYgkSaN59cRSe6wI31MUPJjYGNITd C306UoNnGzWj+Q9xhYIRl8mCgErcC2C4qO7/l+OhPiVVyF+lKQWwxIlIObOpGJvz BfAt4LkM34oTdoKaRB9HjT398q7v4hwETNxJbWD+CkxDBxWIbeRcE9WGa2DxsRCA ynoQ25gIzxHbgFuAVQXEnvcl4/2urgFrvFhTXmUcAeGrR/Jwtqw9j7xSgzQVnpRf tI6nYyCCz7r9gRfSNnSKsErCEnfG+jHs+rYYaggX7LIMhwE/hQIDAQABo4IDkzCC A48wHQYDVR0OBBYEFKr0w3wMgFPNxMAidX5Y3y9UR30/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGZhOTM3YWMtZWE1OC0z YjM2LWI0NDQtYWJlM2ViMWUwYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBJjnqAwQD JkA4AwQDJkFYAwQAJkcSMAwDBAAmkh0DBAAmkh4DBAEm/xADBACaMm4DBAGaMygD BAGaNUoDBADRknQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAT20LinGjYH8pNPU7SlePYPUjfLj5YKGAbN8L KuzWSKsml1KOaAMi8PSHEy815pHm1SXjd+AYk/4x6NhJ87vE1iN5tBMghrcK9Vqb oqW0PuP/FlQoJ3nIAHiXLHxdG6WdK3O1RpX9sDoUtm+BFqJC+prUp+Q58htyrBQp 3iT+TYg4P1FPlWHJnY9qBv2hA4T9A3/NUb2badCOEO222LskIgBDAedO1et7ElA8 oe32wHpRt40SHa6hFuStRnwq/xFU8/DE3VMONHhsEbBQPRQotd2+NB5KWLe3Rpfi SR92DgELO8l4jvhlejBmkxwHUKALyfb8qMvzZ1JHaa2WXwYDQA== -----END CERTIFICATE-----Generated at Thu May 28 18:33:23 2026 by rpki-client