$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24be5598-fb16-328a-97b7-b2ca05a357f7.roa File: 24be5598-fb16-328a-97b7-b2ca05a357f7.roa (raw, json) Hash identifier: Ky1T8Oyl/xuQrWi/DLXqqA0jA3hXqFKae6+5V0elRPw= Subject key identifier: 0C:B0:BF:91:75:63:D3:88:64:D6:F3:36:63:EC:54:8C:0E:03:7A:6A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9325671810C4D11E89489700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24be5598-fb16-328a-97b7-b2ca05a357f7.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 274515 IP address blocks: 38.236.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:67:18:10:c4:d1:1e:89:48:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=427378b1-20a2-4710-a6c1-45f43cc54c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:c4:b6:90:ae:81:f6:25:65:a3:92:05:59: c3:42:29:81:8c:37:5c:e1:63:82:08:86:fb:6d:05: e6:8c:9c:a1:87:0b:e5:1a:5a:8b:42:97:48:d0:a8: 7a:41:fe:73:36:a1:48:13:6f:a8:a5:79:3a:f3:b0: 32:d6:ea:ec:c4:24:48:f5:85:c4:63:84:f0:de:75: f9:2c:ed:2e:e8:cf:84:c9:dc:18:c3:09:40:c7:a2: 85:0f:0f:27:a3:40:93:72:9f:10:61:50:e3:f8:67: fa:2e:f8:6a:08:9f:cd:41:da:4c:35:21:21:62:bc: 4c:72:82:b1:51:7c:cd:fd:45:b4:01:f5:93:ff:13: d4:5a:f4:f5:26:2f:2c:a1:8f:5d:53:93:23:6e:fc: 72:b8:d8:55:73:fa:8f:75:47:4a:56:f3:43:76:25: f0:61:78:bb:bb:e9:ce:09:86:bb:b9:bd:73:82:21: a1:b4:fa:13:58:b3:a5:c2:89:b2:35:a5:1f:ba:91: 83:a0:1a:2a:76:73:dc:02:1c:a8:6c:c2:ff:a1:09: c2:54:2e:09:26:0d:d7:06:5b:1e:4d:57:3a:37:af: c0:6a:45:cc:9c:9c:31:40:c8:c5:48:6e:f8:60:d2: 9f:fd:85:ec:d6:df:c3:45:64:0f:53:49:a2:46:a7: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:BF:91:75:63:D3:88:64:D6:F3:36:63:EC:54:8C:0E:03:7A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24be5598-fb16-328a-97b7-b2ca05a357f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:46:70:8c:2d:81:f9:8e:51:b7:77:60:f8:a7:69:1e:07:f7: 04:bb:e2:26:5c:3d:a1:4d:f3:53:88:3f:ed:c9:39:49:fa:60: 25:fb:2c:8d:a5:f5:1d:44:9f:32:86:a7:80:f1:69:75:b0:5f: 05:d3:c2:5b:e0:94:ec:a1:06:95:71:72:86:41:a3:10:06:f0: 0c:cf:ee:b3:af:51:31:12:bc:e7:a9:7c:1d:75:a2:50:48:4e: 42:02:98:00:a1:87:0c:1f:c7:7b:a9:ba:88:d5:c5:46:6b:85: 1e:e6:9f:3f:74:f2:7a:70:67:8e:f2:c0:24:41:f9:cf:ff:e1: d3:05:57:15:1b:61:84:ed:ca:c1:77:76:f9:ba:13:05:e9:42: 20:71:1b:39:13:8d:78:2f:ec:d7:07:a7:78:77:8d:93:32:76: da:dd:29:af:07:75:4f:69:9d:d8:c4:64:b2:62:78:d1:ce:54: c3:4a:7e:68:ee:23:5e:fc:a4:7c:14:17:27:1d:31:a9:e6:40: bd:90:97:21:30:0f:d9:3a:ac:bd:f1:12:35:de:3d:b5:f3:cc: ce:f2:20:70:f1:df:8a:3d:08:18:cd:8d:f7:aa:59:7a:61:99: 5e:d0:45:1f:18:aa:b7:2d:a8:e2:5d:da:14:be:f8:7a:47:90: d0:17:4b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWcYEMTRHolIlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NDI3Mzc4YjEtMjBhMi00NzEwLWE2YzEtNDVmNDNjYzU0YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNrEtpCugfYlZaOSBVnDQimBjDdc4WOCCIb7 bQXmjJyhhwvlGlqLQpdI0Kh6Qf5zNqFIE2+opXk687Ay1ursxCRI9YXEY4Tw3nX5 LO0u6M+EydwYwwlAx6KFDw8no0CTcp8QYVDj+Gf6LvhqCJ/NQdpMNSEhYrxMcoKx UXzN/UW0AfWT/xPUWvT1Ji8soY9dU5MjbvxyuNhVc/qPdUdKVvNDdiXwYXi7u+nO CYa7ub1zgiGhtPoTWLOlwomyNaUfupGDoBoqdnPcAhyobML/oQnCVC4JJg3XBlse TVc6N6/AakXMnJwxQMjFSG74YNKf/YXs1t/DRWQPU0miRqcMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAywv5F1Y9OIZNbzNmPsVIwOA3pqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjRiZTU1OTgtZmIxNi0z MjhhLTk3YjctYjJjYTA1YTM1N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZGcIwtgfmOUbd3YPinaR4H9wS74iZcPaFN81OIP+3JOUn6YCX7LI2l 9R1EnzKGp4DxaXWwXwXTwlvglOyhBpVxcoZBoxAG8AzP7rOvUTESvOepfB11olBI TkICmAChhwwfx3upuojVxUZrhR7mnz908npwZ47ywCRB+c//4dMFVxUbYYTtysF3 dvm6EwXpQiBxGzkTjXgv7NcHp3h3jZMydtrdKa8HdU9pndjEZLJieNHOVMNKfmju I178pHwUFycdManmQL2QlyEwD9k6rL3xEjXePbXzzM7yIHDx34o9CBjNjfeqWXph mV7QRR8YqrctqOJd2hS++HpHkNAXS/8= -----END CERTIFICATE-----Generated at Tue Apr 28 21:13:40 2026 by rpki-client