$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21fbaa0e-ac28-3a70-beee-ce0c54a683d8.roa File: 21fbaa0e-ac28-3a70-beee-ce0c54a683d8.roa (raw, json) Hash identifier: axaFkx1TLNW1y2mifY6BCByWvLAJE6pAKbmvnr/7eZg= Subject key identifier: 56:6B:7C:CA:CF:41:5F:8C:85:BA:0D:FE:8D:A6:CB:51:A8:65:EF:CF Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA81592C54AAEAF6C4919B180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21fbaa0e-ac28-3a70-beee-ce0c54a683d8.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 273775 IP address blocks: 38.196.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:92:c5:4a:ae:af:6c:49:19:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=293ebf00-259b-4e74-88b6-872a933a4ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:36:c0:36:70:33:6e:75:ad:c6:6f:72:06: ef:d9:21:23:50:5c:84:94:7a:35:60:75:8d:81:c6: cd:d7:09:35:a8:22:97:91:66:b1:06:ac:d7:2a:34: 42:af:ff:b2:33:4c:fb:aa:e3:30:b0:c4:f8:7f:d7: 7f:e7:df:43:1b:f6:e2:e4:ad:4c:85:6e:e8:b2:42: 58:77:19:f3:ac:80:78:c3:21:3e:ae:db:a1:de:b0: de:bd:7a:c1:ee:24:34:a5:2b:b5:d8:01:15:c4:9f: 3a:f6:cb:1b:e5:95:87:36:a5:44:c2:44:c4:c8:20: f7:e7:97:45:58:30:35:42:5e:c0:7c:2f:bf:b4:52: b1:f7:df:20:94:8f:15:71:0b:c5:11:d5:8f:1b:0c: 8d:16:e4:fb:92:2f:e9:a4:66:ed:7d:ae:d1:5a:58: f8:d8:8b:81:5c:55:89:af:f1:2f:39:40:3d:ee:e5: ed:5b:87:f3:bd:9a:ed:6d:71:21:bf:4c:c3:21:32: 1e:4e:5a:d7:b4:75:02:dc:3f:f7:e8:31:90:d0:fd: 93:33:69:16:78:9a:85:12:c3:dd:23:c6:cc:e7:2f: fd:54:5a:59:a3:7e:ef:17:aa:f4:5b:71:7d:c9:bb: 42:d1:53:b4:df:6d:23:40:de:28:4c:d2:5e:3a:9c: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6B:7C:CA:CF:41:5F:8C:85:BA:0D:FE:8D:A6:CB:51:A8:65:EF:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21fbaa0e-ac28-3a70-beee-ce0c54a683d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:a4:f8:00:90:49:a9:2b:c3:29:34:e4:af:7a:78:25:8f:8e: 8d:24:12:80:21:af:25:e0:52:0d:f2:6b:36:d6:88:2f:82:8e: c3:70:b5:0c:f8:f0:99:8b:2e:41:65:d9:4a:17:73:5d:8b:fe: 47:6c:95:97:a1:a8:45:b1:82:45:c6:2f:07:30:d2:2b:99:37: dc:22:6e:6a:5e:1f:fa:9d:60:65:4f:74:1d:3c:3b:02:de:c3: 89:1b:ff:ce:a3:97:a6:e8:38:a1:94:eb:7b:3a:cd:98:14:e8: 74:82:3a:b9:85:c8:7f:e9:d8:57:2c:ba:f6:ed:62:42:da:40: a8:81:27:f7:2e:94:3e:fa:60:6f:01:db:8d:85:21:ed:88:db: 17:03:53:64:43:9e:32:7e:9b:a1:8a:65:8c:cd:23:8c:8b:04: ac:0d:03:8c:56:3f:14:2d:47:e1:fd:77:7c:e5:11:a9:6d:82: 12:5e:1e:62:88:eb:98:94:d3:85:3c:46:6c:1e:41:90:ec:39: b9:31:3e:9c:37:01:5d:5d:c5:b7:b3:70:b2:77:31:64:22:3c: 59:b7:88:c9:dc:64:78:fc:f8:bb:ad:d4:2c:50:51:70:69:59: ea:90:12:85:ca:cb:54:18:e7:70:63:3b:73:13:d6:4d:92:3f: ad:88:4b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFZLFSq6vbEkZsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MjkzZWJmMDAtMjU5Yi00ZTc0LTg4YjYtODcyYTkzM2E0ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn02wDZwM251rcZvcgbv2SEjUFyElHo1YHWN gcbN1wk1qCKXkWaxBqzXKjRCr/+yM0z7quMwsMT4f9d/599DG/bi5K1MhW7oskJY dxnzrIB4wyE+rtuh3rDevXrB7iQ0pSu12AEVxJ869ssb5ZWHNqVEwkTEyCD355dF WDA1Ql7AfC+/tFKx998glI8VcQvFEdWPGwyNFuT7ki/ppGbtfa7RWlj42IuBXFWJ r/EvOUA97uXtW4fzvZrtbXEhv0zDITIeTlrXtHUC3D/36DGQ0P2TM2kWeJqFEsPd I8bM5y/9VFpZo37vF6r0W3F9ybtC0VO0320jQN4oTNJeOpy4dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZrfMrPQV+MhboN/o2my1GoZe/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjFmYmFhMGUtYWMyOC0z YTcwLWJlZWUtY2UwYzU0YTY4M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJsTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyk+ACQSakrwyk05K96eCWPjo0kEoAhryXgUg3yazbWiC+CjsNwtQz4 8JmLLkFl2UoXc12L/kdslZehqEWxgkXGLwcw0iuZN9wibmpeH/qdYGVPdB08OwLe w4kb/86jl6boOKGU63s6zZgU6HSCOrmFyH/p2FcsuvbtYkLaQKiBJ/culD76YG8B 242FIe2I2xcDU2RDnjJ+m6GKZYzNI4yLBKwNA4xWPxQtR+H9d3zlEaltghJeHmKI 65iU04U8RmweQZDsObkxPpw3AV1dxbezcLJ3MWQiPFm3iMncZHj8+Lut1CxQUXBp WeqQEoXKy1QY53BjO3MT1k2SP62ISxU= -----END CERTIFICATE-----Generated at Tue Apr 28 21:13:25 2026 by rpki-client