$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa File: 35828ae1-c906-38dd-815a-71a05121f2f6.roa (raw, json) Hash identifier: IUklM3AhLxytpz2ey6brL67pZvaASxB9ve2+h+q7Go8= Subject key identifier: DD:54:49:4F:B7:3C:0B:05:C8:18:68:CC:9E:54:65:E1:C1:81:05:E1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9E502F9D1C98076A89D2D600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 265634 IP address blocks: 38.159.160.0/22 maxlen: 24 38.236.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2f:9d:1c:98:07:6a:89:d2:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=1c2caa09-5050-4af4-93d1-5ff38af6726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:75:a3:a2:37:bf:0c:6e:1a:e4:44:1b:f5: dd:bc:a8:ce:40:e1:9e:38:1c:74:34:12:9a:04:66: 25:28:98:3d:91:b2:b6:91:0c:14:5f:c9:e6:e1:1e: 96:20:3f:77:56:61:2c:b9:f6:e3:92:e9:8d:e1:7d: 52:f3:b2:bf:39:08:b2:92:4d:da:05:e3:f5:ac:72: 59:e7:a1:55:7f:fb:45:99:fb:52:b5:c9:e0:e4:98: 70:79:9b:58:ab:2e:97:48:69:fc:5e:a2:36:fa:cb: 56:b9:9d:52:9c:9d:01:fd:fe:2b:cc:08:c6:6b:f0: b8:dd:4c:10:28:47:13:35:77:3b:b0:32:08:96:bf: 7d:f2:a5:42:ee:dc:55:7f:48:2b:ae:36:af:a1:bf: 34:3b:ab:16:8c:5f:06:6a:00:5a:59:bc:fc:92:6b: 4a:9c:10:4b:d2:38:ed:56:28:77:6e:42:c6:1a:43: e1:62:2b:ff:58:ea:5b:d4:5f:61:5b:b7:6f:ef:89: 9e:9b:24:6c:66:2a:81:d1:92:1c:92:73:1a:1c:58: 42:ca:18:03:f1:b2:82:f9:4b:29:2b:7b:a9:34:d1: ff:51:f9:06:7c:43:04:12:81:3b:07:c2:21:f0:d8: 78:32:57:7d:f9:1f:d3:7d:78:3b:48:54:4f:ae:1d: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:49:4F:B7:3C:0B:05:C8:18:68:CC:9E:54:65:E1:C1:81:05:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.160.0/22 38.236.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:69:be:09:be:54:be:79:8c:01:30:f3:77:14:ea:01:ea:fa: c7:dd:16:4c:d9:2e:e3:da:0a:4e:e2:25:47:e4:b0:86:6c:13: 18:69:78:32:f0:b9:2c:2f:c1:54:ee:fa:ab:46:19:eb:a3:d4: 92:8b:b6:8e:8a:2d:81:34:9a:38:99:0c:50:29:8e:56:e7:a1: 3d:98:c2:aa:c0:34:0a:cd:8a:fa:a2:3a:c5:f0:03:d1:d8:c5: b6:23:93:54:f6:09:31:dd:91:f9:65:0e:25:6e:a9:92:04:ca: 52:3a:1d:2b:c2:2a:6b:cd:da:cb:fb:b2:1f:e2:43:e4:0b:25: 35:61:55:1c:a5:ab:56:d1:13:03:62:ac:a6:6c:f6:3e:33:83: 34:33:07:30:bf:6f:3b:93:b9:b1:61:a8:12:29:88:d9:45:0a: 9a:4a:19:2f:fe:1f:81:ec:01:b6:44:1f:ef:20:3a:38:77:c0: 44:1f:5a:64:18:07:75:84:1f:33:5f:2c:0a:a3:6d:bb:aa:49: 53:a5:6c:9d:b8:e8:97:d9:c6:b6:dc:60:b3:4d:fb:5a:2e:7f: 99:be:04:e8:0d:fc:0f:45:4d:d5:32:81:e3:f4:58:56:9e:15: 84:52:67:20:f1:cc:77:f3:f2:22:67:cd:1a:c3:53:a1:09:e4: 56:d4:01:28 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2eUC+dHJgHaonS1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MWMyY2FhMDktNTA1MC00YWY0LTkzZDEtNWZmMzhhZjY3MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI51o6I3vwxuGuREG/XdvKjOQOGeOBx0NBKa BGYlKJg9kbK2kQwUX8nm4R6WID93VmEsufbjkumN4X1S87K/OQiykk3aBeP1rHJZ 56FVf/tFmftStcng5JhweZtYqy6XSGn8XqI2+stWuZ1SnJ0B/f4rzAjGa/C43UwQ KEcTNXc7sDIIlr998qVC7txVf0grrjavob80O6sWjF8GagBaWbz8kmtKnBBL0jjt Vih3bkLGGkPhYiv/WOpb1F9hW7dv74memyRsZiqB0ZIcknMaHFhCyhgD8bKC+Usp K3upNNH/UfkGfEMEEoE7B8Ih8Nh4Mld9+R/TfXg7SFRPrh1QOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN1USU+3PAsFyBhozJ5UZeHBgQXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzU4MjhhZTEtYzkwNi0z OGRkLTgxNWEtNzFhMDUxMjFmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJp+gAwQC JuxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADppvgm+VL55jAEw83cU6gHq+sfdFkzZLuPaCk7iJUfksIZs ExhpeDLwuSwvwVTu+qtGGeuj1JKLto6KLYE0mjiZDFApjlbnoT2YwqrANArNivqi OsXwA9HYxbYjk1T2CTHdkfllDiVuqZIEylI6HSvCKmvN2sv7sh/iQ+QLJTVhVRyl q1bREwNirKZs9j4zgzQzBzC/bzuTubFhqBIpiNlFCppKGS/+H4HsAbZEH+8gOjh3 wEQfWmQYB3WEHzNfLAqjbbuqSVOlbJ246JfZxrbcYLNN+1ouf5m+BOgN/A9FTdUy geP0WFaeFYRSZyDxzHfz8iJnzRrDU6EJ5FbUASg= -----END CERTIFICATE-----Generated at Tue Apr 28 21:14:52 2026 by rpki-client