$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13abd614-aafe-3255-80e6-96617ce57b27.roa File: 13abd614-aafe-3255-80e6-96617ce57b27.roa (raw, json) Hash identifier: DINMcSOXZmWxLptVgnuKhTZZyWRC4JP84gwyEN+ZY8Y= Subject key identifier: 9A:BF:ED:11:A5:F9:6F:89:79:E7:E4:C1:94:D9:20:75:69:9F:2F:23 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9755644EB9CD45EAEFD4B980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13abd614-aafe-3255-80e6-96617ce57b27.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 265973 IP address blocks: 38.199.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:64:4e:b9:cd:45:ea:ef:d4:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=afbc85fd-b77a-4b64-80f9-66433ef6a7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:20:d4:3e:c5:f7:34:09:94:f2:d9:ca:02: 28:86:ea:74:bf:83:09:17:1b:89:00:67:4f:d2:fa: 81:e1:85:cd:46:1f:05:7f:46:c0:c1:4a:64:99:55: 01:53:35:11:32:93:0d:6c:68:dd:d5:2a:54:73:c9: 22:82:a8:e9:3d:bb:19:c7:fc:ec:2a:23:c9:53:87: e5:3e:d2:72:8d:e9:8d:bb:b6:c7:4f:db:b9:df:b8: 86:cb:44:d6:db:39:06:d6:a5:c8:ba:f0:01:08:23: f6:91:19:17:29:95:8a:c1:f2:a2:8d:56:98:92:59: 52:34:20:68:83:89:42:9b:cc:ea:61:14:a5:cd:f7: ec:fa:5b:42:eb:d0:00:8c:11:c7:de:e6:7f:50:e7: 18:78:74:c2:9a:46:08:95:a1:14:73:1d:dc:e1:45: 15:25:98:a3:87:5b:61:d0:81:f3:83:12:b4:32:48: 09:ac:48:e7:2e:9b:7f:1a:ea:84:7b:b9:60:00:a2: ca:dd:0f:6f:61:29:37:55:a7:8f:ec:64:07:5e:1c: de:2c:ce:10:19:8a:60:32:35:d9:78:c8:3b:83:81: a2:43:37:2c:85:bf:96:53:d4:3a:02:96:65:e4:6c: cc:32:7d:9a:3e:58:a6:81:dd:2c:07:81:0b:53:01: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BF:ED:11:A5:F9:6F:89:79:E7:E4:C1:94:D9:20:75:69:9F:2F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13abd614-aafe-3255-80e6-96617ce57b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:af:30:e8:59:47:d0:e6:45:f9:0f:64:39:43:18:33:da:05: 8e:53:fc:a3:4d:7b:41:c2:b5:e4:a3:09:eb:d0:85:ff:4e:6f: 5d:af:d5:7f:6e:97:bf:d1:b0:68:69:83:c3:12:25:d9:41:96: 9e:73:7b:04:df:c9:9f:0e:b1:c7:b9:63:4c:d6:8e:b0:67:56: bc:47:75:24:95:f2:0f:71:d8:65:e4:68:15:64:2c:71:bd:41: 9b:30:64:d2:22:de:b0:5d:b7:e2:37:cf:43:45:7f:8c:c0:2b: 8d:ba:83:8c:11:5c:d8:39:e4:12:bf:42:ed:cb:c3:ce:36:72: 29:09:4c:6e:53:b5:e2:ff:3d:d5:00:ab:c7:5d:07:3b:ed:a1: d5:98:dc:81:0f:5e:d3:70:f0:72:1b:4c:54:80:bb:52:a4:ac: 7d:f2:1f:04:1b:da:67:d3:4a:94:29:93:d1:15:71:03:9c:f0: de:fa:17:96:a1:08:54:aa:cf:06:af:b7:59:2a:31:70:1e:7b: c1:2e:f7:db:99:45:e1:9d:e6:c1:38:f0:e6:b4:4b:9c:64:6b: d7:70:d7:13:a3:bd:c4:04:d6:06:64:7d:d2:f9:9f:72:d7:b2: c1:2a:3e:d2:8b:67:c3:8e:7d:93:7e:ce:0b:1a:4c:57:49:8f: 35:a2:33:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWROuc1F6u/UuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk YWZiYzg1ZmQtYjc3YS00YjY0LTgwZjktNjY0MzNlZjZhN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSsg1D7F9zQJlPLZygIohup0v4MJFxuJAGdP 0vqB4YXNRh8Ff0bAwUpkmVUBUzURMpMNbGjd1SpUc8kigqjpPbsZx/zsKiPJU4fl PtJyjemNu7bHT9u537iGy0TW2zkG1qXIuvABCCP2kRkXKZWKwfKijVaYkllSNCBo g4lCm8zqYRSlzffs+ltC69AAjBHH3uZ/UOcYeHTCmkYIlaEUcx3c4UUVJZijh1th 0IHzgxK0MkgJrEjnLpt/GuqEe7lgAKLK3Q9vYSk3VaeP7GQHXhzeLM4QGYpgMjXZ eMg7g4GiQzcshb+WU9Q6ApZl5GzMMn2aPlimgd0sB4ELUwEx9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq/7RGl+W+JeefkwZTZIHVpny8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTNhYmQ2MTQtYWFmZS0z MjU1LTgwZTYtOTY2MTdjZTU3YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOvMOhZR9DmRfkPZDlDGDPaBY5T/KNNe0HCteSjCevQhf9Ob12v1X9u l7/RsGhpg8MSJdlBlp5zewTfyZ8Osce5Y0zWjrBnVrxHdSSV8g9x2GXkaBVkLHG9 QZswZNIi3rBdt+I3z0NFf4zAK426g4wRXNg55BK/Qu3Lw842cikJTG5TteL/PdUA q8ddBzvtodWY3IEPXtNw8HIbTFSAu1KkrH3yHwQb2mfTSpQpk9EVcQOc8N76F5ah CFSqzwavt1kqMXAee8Eu99uZReGd5sE48Oa0S5xka9dw1xOjvcQE1gZkfdL5n3LX ssEqPtKLZ8OOfZN+zgsaTFdJjzWiM/M= -----END CERTIFICATE-----Generated at Tue Apr 28 21:14:54 2026 by rpki-client