$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa File: 1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa (raw, json) Hash identifier: RZkyjtYr90Hr6Se/sq5rDZH25jvIC6/j4vt+Cexc4Tc= Subject key identifier: 1B:BA:4F:E8:4C:80:0C:FD:74:61:75:CF:B1:ED:A4:13:8B:DF:28:64 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D948AA8D1680D3F8F2478A700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa Signing time: Tue 21 Apr 2026 13:00:31 +0000 ROA not before: Tue 21 Apr 2026 13:00:31 +0000 ROA not after: Mon 20 Jul 2026 13:00:31 +0000 asID: 1299 IP address blocks: 38.255.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8a:a8:d1:68:0d:3f:8f:24:78:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 13:00:31 2026 GMT Not After : Jul 20 13:00:31 2026 GMT Subject: CN=b7a2298a-42ef-4559-a112-f387b751bb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:2f:2e:d0:69:d2:8b:1b:a3:23:d0:e1:a6: 67:c2:fc:dc:d4:aa:ad:25:9c:2a:df:2e:ed:48:b0: 2c:99:8c:4a:d2:7c:e7:83:53:f6:0a:51:0f:e3:59: 41:fc:10:40:b7:a7:89:6c:11:80:ff:cd:de:23:1f: 84:2a:14:11:89:26:7a:f3:66:b6:f7:3b:0e:54:46: 5d:91:4d:d1:b1:4b:22:90:3f:e0:3b:b1:ee:10:b6: 79:5a:79:28:c1:e0:81:b8:87:e5:84:0f:b7:5f:97: e3:50:5d:c3:2a:dc:b8:61:1e:66:c9:30:94:2d:01: b5:75:f9:44:5d:ff:1e:5d:ea:c6:61:17:e1:32:59: fe:e6:05:22:e5:11:35:29:2c:21:40:a4:97:c6:6f: 65:a6:ca:ab:02:4f:4f:af:8e:4e:9e:c5:4c:a9:dc: 93:46:16:a6:a2:ff:56:c1:78:d2:5a:98:11:13:24: 76:61:84:2b:dc:f3:3d:59:3a:82:8d:71:56:42:c1: 33:14:9b:46:4d:00:af:4d:2a:24:37:dc:24:a5:05: 27:30:58:29:95:ad:1a:57:4d:2a:9b:74:f9:31:80: 92:05:c8:c4:77:4e:66:68:ff:ab:5f:af:de:92:08: fe:56:01:c3:6b:e0:3c:3a:fa:31:34:49:3b:71:c0: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BA:4F:E8:4C:80:0C:FD:74:61:75:CF:B1:ED:A4:13:8B:DF:28:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:47:c2:54:07:3f:1c:52:21:90:5d:1d:a7:26:7e:30:71:41: c1:dd:8f:17:58:73:02:49:8d:ab:d5:48:d7:b4:05:70:ac:f9: 06:8b:79:d0:23:55:5c:e2:90:3e:93:eb:ed:e7:c2:fb:88:82: fc:9e:48:04:51:16:37:2a:09:22:58:b0:a7:62:94:7f:97:bb: 88:8f:dc:85:b8:1d:3a:ca:a8:bb:af:75:67:29:91:3b:9e:ff: 70:f5:39:7c:62:31:51:70:63:e2:87:da:3b:1a:13:1b:03:65: cb:cf:0d:80:1d:81:6e:be:53:7d:23:ec:59:29:e0:74:5c:e0: b5:a8:58:03:fb:1a:c8:c8:05:20:aa:d4:6d:0e:13:83:57:fe: 37:43:6a:c9:18:e6:9b:f9:58:2a:2a:d8:b0:4a:ef:83:e1:a7: 6a:1a:6b:c7:1f:63:e0:a3:7f:50:37:c5:e3:b3:32:1f:c9:65: f7:68:42:2f:19:24:1e:ca:8e:15:40:c1:c0:82:27:69:98:7f: 0e:49:8b:c6:7c:a3:82:5e:de:b9:b9:18:e2:c4:fb:20:ad:69: 32:5b:4d:20:c5:26:5b:75:dc:b1:34:75:b3:3c:b8:3a:ce:dc: 98:f5:47:9e:00:06:91:59:97:59:be:4e:5d:b0:bc:93:46:7c: b4:9c:73:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UiqjRaA0/jyR4pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk YjdhMjI5OGEtNDJlZi00NTU5LWExMTItZjM4N2I3NTFiYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFAvLtBp0osboyPQ4aZnwvzc1KqtJZwq3y7t SLAsmYxK0nzng1P2ClEP41lB/BBAt6eJbBGA/83eIx+EKhQRiSZ682a29zsOVEZd kU3RsUsikD/gO7HuELZ5WnkoweCBuIflhA+3X5fjUF3DKty4YR5myTCULQG1dflE Xf8eXerGYRfhMln+5gUi5RE1KSwhQKSXxm9lpsqrAk9Pr45OnsVMqdyTRhamov9W wXjSWpgREyR2YYQr3PM9WTqCjXFWQsEzFJtGTQCvTSokN9wkpQUnMFgpla0aV00q m3T5MYCSBcjEd05maP+rX6/ekgj+VgHDa+A8OvoxNEk7ccA0bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu6T+hMgAz9dGF1z7HtpBOL3yhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTA4NWNlZTktZWZjNC0z YjlkLWE5NWYtNmFkNDZmOTgyYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5HwlQHPxxSIZBdHacmfjBxQcHdjxdYcwJJjavVSNe0BXCs+QaLedAj VVzikD6T6+3nwvuIgvyeSARRFjcqCSJYsKdilH+Xu4iP3IW4HTrKqLuvdWcpkTue /3D1OXxiMVFwY+KH2jsaExsDZcvPDYAdgW6+U30j7Fkp4HRc4LWoWAP7GsjIBSCq 1G0OE4NX/jdDaskY5pv5WCoq2LBK74Php2oaa8cfY+Cjf1A3xeOzMh/JZfdoQi8Z JB7KjhVAwcCCJ2mYfw5Ji8Z8o4Je3rm5GOLE+yCtaTJbTSDFJlt13LE0dbM8uDrO 3Jj1R54ABpFZl1m+Tl2wvJNGfLScc9E= -----END CERTIFICATE-----Generated at Wed Apr 22 13:22:06 2026 by rpki-client