$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a7fdf23-57fe-3172-bb81-2b3caa91dd17.roa File: 2a7fdf23-57fe-3172-bb81-2b3caa91dd17.roa (raw, json) Hash identifier: Z9Ql5zbtoTz/lvEfRc22fCV7ZAVJZKnTyMATx/JlkCg= Subject key identifier: E5:B5:77:84:F3:26:1B:24:DA:1A:6E:49:11:A7:34:58:2C:E9:FC:88 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D952DAAB35E938FE697AC7DA0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a7fdf23-57fe-3172-bb81-2b3caa91dd17.roa Signing time: Tue 21 Apr 2026 18:29:02 +0000 ROA not before: Tue 21 Apr 2026 18:29:02 +0000 ROA not after: Mon 20 Jul 2026 18:29:02 +0000 asID: 272819 IP address blocks: 38.156.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:2d:aa:b3:5e:93:8f:e6:97:ac:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 18:29:02 2026 GMT Not After : Jul 20 18:29:02 2026 GMT Subject: CN=d23458cb-6830-4aeb-8ffa-a3cba6789a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:77:70:b1:7a:d6:33:4a:58:be:74:4c:f4: b8:d3:37:be:8c:60:6c:9a:20:a7:5b:bc:8d:fa:c1: 28:08:1d:bf:90:30:01:f2:84:e2:be:74:24:7a:59: 4f:19:1b:f5:57:1f:a7:04:a2:3b:b0:81:76:2e:12: 3a:c4:9a:a1:64:24:18:32:4d:c5:56:09:43:8d:73: dd:61:af:8d:8e:28:cf:62:99:3e:c9:0f:a7:0b:f2: fa:5c:c1:8d:c0:f6:5b:0e:7c:5c:58:dd:0b:c2:8f: 97:61:10:2d:7a:dc:9c:91:83:a8:2b:9a:92:61:e2: dc:47:a2:7b:be:a7:8e:19:6c:ed:a8:f0:12:75:ed: 57:1d:94:6f:cf:86:02:70:c1:d7:dd:80:91:57:35: ae:8a:ff:6c:6a:5d:47:d8:69:4d:2a:47:89:ca:4b: ba:1f:9d:89:75:34:da:10:02:8c:46:b7:38:40:cd: cb:e0:5c:06:d7:29:31:ba:79:f7:08:d5:11:41:ee: 5b:36:54:28:e1:ea:f2:d0:e0:f8:9c:5c:ea:39:65: 93:d4:6d:72:5c:8f:45:e6:27:7f:78:5e:51:cd:c8: 9a:e9:ae:e6:d5:7d:e1:d4:a4:70:26:b7:f1:34:4e: 7e:36:08:07:24:44:b7:63:b6:80:92:42:a5:e6:61: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B5:77:84:F3:26:1B:24:DA:1A:6E:49:11:A7:34:58:2C:E9:FC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a7fdf23-57fe-3172-bb81-2b3caa91dd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:96:15:46:cc:9b:64:54:91:9d:c4:a9:01:27:c9:e7:d3:b0: 90:ee:67:d2:7c:3d:a4:ab:a5:7d:40:62:cd:38:d9:ca:43:1a: 2d:e6:1a:e8:3d:c4:9a:f7:54:af:48:bb:45:49:e5:3b:d2:dd: 03:6c:e4:ab:a2:5a:b5:29:a1:98:34:91:13:f5:88:ab:a9:d3: 9c:af:4e:02:e0:db:80:46:4d:64:db:c9:78:f1:13:89:9f:e5: c9:bb:1b:21:5d:2c:15:6a:76:4f:09:44:06:6f:ca:ee:7e:14: 51:35:70:67:a8:b1:0d:18:45:ac:4b:1c:b1:c8:1b:7e:02:88: 8e:33:da:8d:a7:53:ff:73:bc:46:62:59:45:df:1d:6e:0a:58: 89:e9:3c:8c:ec:d1:76:b8:34:32:2d:2d:d3:0c:5c:2c:d5:4b: fc:71:03:5c:aa:a0:34:fb:30:c1:24:51:35:36:72:84:b6:81: 49:23:04:ce:8c:79:b1:8a:89:9e:ed:6e:42:62:81:04:40:dd: fe:f2:09:1c:0b:43:db:cd:82:40:b5:68:9b:7d:4c:e5:9b:27: 49:bd:25:bc:1d:1d:59:b4:a9:9d:39:b9:74:9e:0e:49:50:4d: 2f:b7:a2:cc:d5:e4:28:86:c9:ea:66:fe:82:45:72:c7:17:69: 11:0d:b4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VLaqzXpOP5pesfaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTE4MjkwMloXDTI2MDcyMDE4MjkwMlowLzEtMCsGA1UEAxMk ZDIzNDU4Y2ItNjgzMC00YWViLThmZmEtYTNjYmE2Nzg5YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIt3cLF61jNKWL50TPS40ze+jGBsmiCnW7yN +sEoCB2/kDAB8oTivnQkellPGRv1Vx+nBKI7sIF2LhI6xJqhZCQYMk3FVglDjXPd Ya+NjijPYpk+yQ+nC/L6XMGNwPZbDnxcWN0Lwo+XYRAtetyckYOoK5qSYeLcR6J7 vqeOGWztqPASde1XHZRvz4YCcMHX3YCRVzWuiv9sal1H2GlNKkeJyku6H52JdTTa EAKMRrc4QM3L4FwG1ykxunn3CNURQe5bNlQo4ery0OD4nFzqOWWT1G1yXI9F5id/ eF5Rzcia6a7m1X3h1KRwJrfxNE5+NggHJES3Y7aAkkKl5mEl8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW1d4TzJhsk2hpuSRGnNFgs6fyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmE3ZmRmMjMtNTdmZS0z MTcyLWJiODEtMmIzY2FhOTFkZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKWFUbMm2RUkZ3EqQEnyefTsJDuZ9J8PaSrpX1AYs042cpDGi3mGug9 xJr3VK9Iu0VJ5TvS3QNs5KuiWrUpoZg0kRP1iKup05yvTgLg24BGTWTbyXjxE4mf 5cm7GyFdLBVqdk8JRAZvyu5+FFE1cGeosQ0YRaxLHLHIG34CiI4z2o2nU/9zvEZi WUXfHW4KWInpPIzs0Xa4NDItLdMMXCzVS/xxA1yqoDT7MMEkUTU2coS2gUkjBM6M ebGKiZ7tbkJigQRA3f7yCRwLQ9vNgkC1aJt9TOWbJ0m9JbwdHVm0qZ05uXSeDklQ TS+3oszV5CiGyepm/oJFcscXaRENtHs= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:46 2026 by rpki-client