$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14ceabed-4c9a-36ec-8d68-418cb6793340.roa File: 14ceabed-4c9a-36ec-8d68-418cb6793340.roa (raw, json) Hash identifier: +OYj4rh8oJ8T0i6jNBEkSswjc9wg9YMb2tV1/txQqFw= Subject key identifier: 4F:4B:6C:05:2F:B4:99:49:11:87:60:5E:5F:02:9A:F9:D9:75:9F:52 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D94F4B3FD22A957E6E62F5CC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14ceabed-4c9a-36ec-8d68-418cb6793340.roa Signing time: Tue 21 Apr 2026 16:34:15 +0000 ROA not before: Tue 21 Apr 2026 16:34:15 +0000 ROA not after: Mon 20 Jul 2026 16:34:15 +0000 asID: 0 IP address blocks: 38.255.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:f4:b3:fd:22:a9:57:e6:e6:2f:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 16:34:15 2026 GMT Not After : Jul 20 16:34:15 2026 GMT Subject: CN=de196103-6dcb-4962-a868-813e511223f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:1e:b5:5f:20:b3:ec:94:de:d2:b7:15:bc: ef:0b:13:3a:b1:cb:57:e5:d1:df:b1:33:bd:8d:f6: 8d:00:21:c5:23:a0:e8:e6:f2:74:b8:aa:92:34:e3: 89:b1:30:fb:fd:5f:7b:ff:4d:42:c4:cc:20:e0:e5: ae:75:69:99:a4:87:e7:28:5d:7c:59:63:3f:3d:71: 2a:b4:e4:25:9f:4f:14:29:47:44:c4:84:92:0e:9a: a4:2d:34:67:e8:63:08:59:ad:e6:6b:1f:db:6d:69: fc:8d:5e:c5:d9:ff:42:86:22:14:77:87:90:b1:0a: 8a:25:6e:f0:11:14:95:15:48:05:be:0a:80:01:7a: 25:4a:66:be:f6:80:2f:8c:4d:b3:9f:46:02:74:25: f5:cb:74:73:64:e5:a2:6b:a1:8e:9b:c6:e1:86:29: 5a:eb:3b:b9:bc:59:69:d2:0e:47:48:6e:17:64:af: c7:5c:89:df:7d:a4:37:37:a6:f5:ac:4f:f6:c0:1b: 2b:0d:57:2d:04:e1:e2:76:61:7c:c8:5f:ad:13:a4: d4:ba:95:ec:94:85:ed:6b:36:d9:09:c5:08:4d:ec: ec:57:88:2d:98:13:c5:a6:3d:d7:b7:1c:66:ab:5b: 06:2b:d1:99:3c:98:84:f5:dc:f1:46:cf:eb:45:75: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:6C:05:2F:B4:99:49:11:87:60:5E:5F:02:9A:F9:D9:75:9F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14ceabed-4c9a-36ec-8d68-418cb6793340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:fd:44:88:e2:1d:ae:b0:34:32:48:b7:bc:05:18:23:91:65: cd:74:0e:ae:0a:d0:ef:34:54:67:35:55:c5:eb:d3:09:5b:b9: ef:10:ec:00:e0:c4:7a:1e:64:f4:db:30:40:c0:f1:56:fe:98: 19:6b:db:1e:f9:bf:9a:82:66:58:d8:86:78:63:6e:be:f8:05: e0:0e:d4:fa:39:97:30:6d:b2:5f:5e:6f:97:7c:44:d3:28:2a: 20:5c:9e:c3:3a:0b:f8:32:39:6d:40:e4:3f:66:35:b6:9a:01: 83:7d:22:0b:ab:a4:8e:4d:1f:92:71:1a:88:58:ce:39:b6:06: ba:1c:2a:c9:4e:25:03:28:ba:9c:5a:05:7b:42:a2:16:0c:c5: 3a:bc:f4:09:6b:7e:e5:08:bb:91:8e:ef:84:ae:6e:15:15:99: 91:cf:2f:b9:21:33:08:ff:6a:d2:d7:08:85:1e:59:ff:2c:08: 5d:bb:c9:a4:b2:22:2c:28:10:0a:71:b8:e9:1a:98:80:40:be: 0f:8b:57:16:41:eb:46:b8:bc:45:0c:5c:b9:5e:84:c6:5f:e5: ac:43:65:e3:5e:86:b8:fd:7c:18:ba:6e:85:62:c5:3b:d1:60: 35:46:27:9b:05:23:6a:fe:07:3e:6e:0b:4f:85:ad:9b:aa:ce: 95:80:d5:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2U9LP9IqlX5uYvXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTE2MzQxNVoXDTI2MDcyMDE2MzQxNVowLzEtMCsGA1UEAxMk ZGUxOTYxMDMtNmRjYi00OTYyLWE4NjgtODEzZTUxMTIyM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstsetV8gs+yU3tK3FbzvCxM6sctX5dHfsTO9 jfaNACHFI6Do5vJ0uKqSNOOJsTD7/V97/01CxMwg4OWudWmZpIfnKF18WWM/PXEq tOQln08UKUdExISSDpqkLTRn6GMIWa3max/bbWn8jV7F2f9ChiIUd4eQsQqKJW7w ERSVFUgFvgqAAXolSma+9oAvjE2zn0YCdCX1y3RzZOWia6GOm8bhhila6zu5vFlp 0g5HSG4XZK/HXInffaQ3N6b1rE/2wBsrDVctBOHidmF8yF+tE6TUupXslIXtazbZ CcUITezsV4gtmBPFpj3Xtxxmq1sGK9GZPJiE9dzxRs/rRXVwGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9LbAUvtJlJEYdgXl8CmvnZdZ9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTRjZWFiZWQtNGM5YS0z NmVjLThkNjgtNDE4Y2I2NzkzMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv8dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH9RIjiHa6wNDJIt7wFGCORZc10Dq4K0O80VGc1VcXr0wlbue8Q7ADg xHoeZPTbMEDA8Vb+mBlr2x75v5qCZljYhnhjbr74BeAO1Po5lzBtsl9eb5d8RNMo KiBcnsM6C/gyOW1A5D9mNbaaAYN9IgurpI5NH5JxGohYzjm2BrocKslOJQMoupxa BXtCohYMxTq89AlrfuUIu5GO74SubhUVmZHPL7khMwj/atLXCIUeWf8sCF27yaSy IiwoEApxuOkamIBAvg+LVxZB60a4vEUMXLlehMZf5axDZeNehrj9fBi6boVixTvR YDVGJ5sFI2r+Bz5uC0+FrZuqzpWA1Wk= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:03 2026 by rpki-client