$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa File: 3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa (raw, json) Hash identifier: LTCCNL6R4PdtNVZc4JhbWYmYhoETlcXhurRZOHeAgZY= Subject key identifier: A6:C8:41:29:93:BF:98:67:83:4D:4B:BC:85:95:04:AB:BC:0F:EE:DE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9B8562E5C90CBFF729159C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 265618 IP address blocks: 38.58.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:62:e5:c9:0c:bf:f7:29:15:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=88c412cf-2fd8-4073-9d10-b6414876b33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:4b:87:2e:22:a2:80:1b:3a:85:ab:bd:28: 0e:33:f8:7b:21:a3:96:5d:9e:19:40:2a:a2:b1:dc: e5:71:74:f5:67:c5:4b:49:bb:21:48:b9:1c:37:4a: 73:26:00:56:4f:f1:40:48:8d:76:6e:2d:d5:31:ef: ce:15:a8:33:5f:99:62:4b:5a:d4:35:d8:91:9e:d7: df:5d:11:d8:c0:98:6c:ce:d0:27:43:d5:33:2e:1b: dc:e4:0a:0e:1f:c2:8e:dd:a9:37:8a:d7:ac:0d:18: ee:33:12:44:3f:76:77:ea:94:cd:7f:b7:58:0b:57: d1:05:29:a5:23:24:11:3a:9c:38:7c:3f:74:ef:b1: cc:bc:2e:dc:8f:ee:5e:22:7b:ad:f3:03:f6:f6:c8: 3c:92:74:7e:51:78:a1:ed:11:a0:5a:37:d4:01:21: f0:bb:77:f8:4a:27:2a:a4:af:e9:2e:3a:00:39:bc: 66:d6:74:09:bd:7e:b9:ad:df:d1:07:ea:9b:a7:f2: 83:e1:da:cb:28:ea:06:eb:b2:53:85:58:43:d3:89: 65:d4:a1:31:54:9a:a4:83:7a:d9:23:d6:5d:8b:97: 09:e4:0a:45:6d:30:5a:2b:2e:b6:2e:4e:c1:16:72: f1:18:7f:d4:72:51:71:e0:41:42:21:c3:77:c0:80: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C8:41:29:93:BF:98:67:83:4D:4B:BC:85:95:04:AB:BC:0F:EE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3f:b7:38:1c:b3:fa:00:84:02:9a:9d:12:70:d2:8f:80:1f: 84:60:4f:fb:86:e6:4c:1d:f8:c3:6d:0d:04:c7:ba:be:80:24: 5c:1e:5f:f2:e3:48:0f:cd:5a:a8:be:1b:01:4c:b1:ec:96:96: 39:6d:33:85:06:f9:d9:8d:53:01:2a:c6:13:d2:a5:c6:c0:e1: 38:93:a3:6d:09:db:ea:dc:4b:67:c5:be:3a:1c:0e:b1:0e:0e: 73:6c:8c:d4:a5:0e:6d:c3:c3:9a:44:9c:5f:25:2a:49:85:eb: cc:8e:44:99:ef:65:9f:ec:9b:bf:43:f1:c8:15:dd:f7:b3:14: 90:78:83:f1:e9:f6:1f:f5:25:fb:68:98:9b:db:0e:b4:d7:e4: ca:91:51:98:f7:18:08:07:f8:16:46:39:5a:2c:d7:43:31:b2: 46:c9:d0:4b:2c:fe:9b:38:ef:71:69:d0:e8:16:90:03:c3:2d: 92:fb:ea:ab:f8:82:c1:3f:26:cc:f9:1c:cd:56:87:9a:5c:a0: 07:51:eb:96:fd:05:27:a0:d4:39:d8:e5:d3:f5:7e:fb:cf:c0: 7d:f5:10:2a:7c:2f:c2:e5:ba:1d:10:87:b9:87:24:2d:ea:b6: 4c:cb:cb:96:a8:78:3e:37:37:8e:ab:f0:a5:fa:b2:6f:2e:df: 9c:48:43:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhWLlyQy/9ykVnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ODhjNDEyY2YtMmZkOC00MDczLTlkMTAtYjY0MTQ4NzZiMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGpLhy4iooAbOoWrvSgOM/h7IaOWXZ4ZQCqi sdzlcXT1Z8VLSbshSLkcN0pzJgBWT/FASI12bi3VMe/OFagzX5liS1rUNdiRntff XRHYwJhsztAnQ9UzLhvc5AoOH8KO3ak3itesDRjuMxJEP3Z36pTNf7dYC1fRBSml IyQROpw4fD9077HMvC7cj+5eInut8wP29sg8knR+UXih7RGgWjfUASHwu3f4Sicq pK/pLjoAObxm1nQJvX65rd/RB+qbp/KD4drLKOoG67JThVhD04ll1KExVJqkg3rZ I9Zdi5cJ5ApFbTBaKy62Lk7BFnLxGH/UclFx4EFCIcN3wIC3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbIQSmTv5hng01LvIWVBKu8D+7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2VhNDcyYzgtY2NmOC0z YTEzLWFkMzAtYmRlNzExYzUxN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc/tzgcs/oAhAKanRJw0o+AH4RgT/uG5kwd+MNtDQTHur6AJFweX/Lj SA/NWqi+GwFMseyWljltM4UG+dmNUwEqxhPSpcbA4TiTo20J2+rcS2fFvjocDrEO DnNsjNSlDm3Dw5pEnF8lKkmF68yORJnvZZ/sm79D8cgV3fezFJB4g/Hp9h/1Jfto mJvbDrTX5MqRUZj3GAgH+BZGOVos10MxskbJ0Ess/ps473Fp0OgWkAPDLZL76qv4 gsE/Jsz5HM1Wh5pcoAdR65b9BSeg1DnY5dP1fvvPwH31ECp8L8Lluh0Qh7mHJC3q tkzLy5aoeD43N46r8KX6sm8u35xIQ4Q= -----END CERTIFICATE-----Generated at Tue Apr 28 21:13:36 2026 by rpki-client