$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/425e42cf-fc55-3e3d-ae72-20073461c622.roa File: 425e42cf-fc55-3e3d-ae72-20073461c622.roa (raw, json) Hash identifier: 19YXZYLgiRlrVf/+6YS0FXSz3WV9JmEbGX6N1AFai/M= Subject key identifier: A5:3D:AE:66:22:6F:22:E0:FE:D0:5C:DF:4C:DB:F5:94:B6:E7:BC:E4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA3E5689BFDAB5CBD3D104280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/425e42cf-fc55-3e3d-ae72-20073461c622.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 270405 IP address blocks: 38.210.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:68:9b:fd:ab:5c:bd:3d:10:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=0772b50c-b2c4-42fc-8b45-3bac1c849f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:88:49:89:76:58:19:1a:3d:63:36:c5:4e: 25:ca:54:22:ef:23:0b:14:21:a4:27:7c:c5:bb:14: 9d:20:26:ed:75:ba:34:d7:10:17:3c:3c:90:ad:3d: e5:bb:12:91:07:cd:fd:70:4f:b7:65:02:53:17:d4: 0b:df:7e:91:8e:e7:96:1b:17:47:53:66:7b:a3:52: f5:50:e8:89:8b:8d:6f:64:3a:ca:fc:2d:98:fe:14: fd:3e:40:8e:45:d8:27:b2:31:40:f9:15:85:fa:c6: d6:9e:32:68:72:01:70:a8:77:61:72:2f:a6:68:96: 21:c2:96:b2:7a:d3:52:aa:cb:de:d6:dc:50:fd:bb: 56:95:23:57:bd:86:a8:2f:a9:31:d3:26:cf:85:52: 12:77:38:3b:83:91:5c:b7:81:8c:44:55:b7:d2:87: 5a:a9:ee:b6:84:72:fd:bc:ab:07:e6:09:11:c5:35: 5f:68:9f:b3:38:55:ed:ef:5d:a7:03:cf:d2:bc:98: a9:3a:8b:e9:f6:85:c9:28:43:a1:8f:38:64:e7:9d: 9f:ca:49:fb:49:31:8c:f5:30:5a:c2:3f:48:48:e4: ba:ec:5c:e2:db:19:c9:a2:68:5b:4c:f5:6b:28:55: fa:d7:f2:b6:69:0c:b3:dd:86:85:e9:1f:9d:d1:71: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3D:AE:66:22:6F:22:E0:FE:D0:5C:DF:4C:DB:F5:94:B6:E7:BC:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/425e42cf-fc55-3e3d-ae72-20073461c622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f3:60:c5:9e:c9:1e:55:97:90:e0:2e:8b:10:f0:e1:33:ea: 32:21:b2:c3:a0:dc:3d:09:fb:f0:66:be:c1:ef:1a:c3:e4:db: c7:5e:a0:41:b3:a6:34:16:1e:4f:14:3b:08:63:d2:ea:cd:9b: b2:0c:77:79:5a:8d:86:fa:3a:d2:b4:e8:d4:20:b4:e6:f1:dd: b8:ea:a8:78:dd:02:cd:83:90:7e:80:d7:49:cd:25:eb:6a:33: 7b:ab:08:8b:62:f0:35:57:4a:a7:1a:3e:98:c4:bd:c7:40:b8: ef:56:d2:1c:a0:e1:d3:ab:c5:b5:d8:5f:00:2a:85:c5:74:63: e5:e7:7d:2d:fd:9a:ed:83:da:21:32:3b:68:ab:b3:54:90:e8: e2:b5:d0:7b:ba:63:77:52:b3:54:27:5d:50:3c:41:29:25:d7: 8b:74:8d:23:c3:e0:c6:e8:94:a0:65:9e:6c:70:72:9e:6e:28: 66:dd:ea:e4:da:d4:42:5a:62:59:0d:cd:a1:63:d4:c9:9d:bb: c4:84:eb:d3:f5:15:5a:2d:c8:ad:92:d5:66:fa:6a:19:ba:92: 19:b0:5d:4f:6a:14:1c:60:e9:68:e2:96:98:fb:83:94:51:4c: 51:0d:d9:20:bb:a7:63:d3:26:32:0e:68:cb:e5:53:71:e7:e8: 56:41:1f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5Wib/atcvT0QQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk MDc3MmI1MGMtYjJjNC00MmZjLThiNDUtM2JhYzFjODQ5ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY2ISYl2WBkaPWM2xU4lylQi7yMLFCGkJ3zF uxSdICbtdbo01xAXPDyQrT3luxKRB839cE+3ZQJTF9QL336RjueWGxdHU2Z7o1L1 UOiJi41vZDrK/C2Y/hT9PkCORdgnsjFA+RWF+sbWnjJocgFwqHdhci+maJYhwpay etNSqsve1txQ/btWlSNXvYaoL6kx0ybPhVISdzg7g5Fct4GMRFW30odaqe62hHL9 vKsH5gkRxTVfaJ+zOFXt712nA8/SvJipOovp9oXJKEOhjzhk552fykn7STGM9TBa wj9ISOS67Fzi2xnJomhbTPVrKFX61/K2aQyz3YaF6R+d0XEwAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU9rmYibyLg/tBc30zb9ZS257zkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDI1ZTQyY2YtZmM1NS0z ZTNkLWFlNzItMjAwNzM0NjFjNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJtIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHzYMWeyR5Vl5DgLosQ8OEz6jIhssOg3D0J+/BmvsHvGsPk28deoEGz pjQWHk8UOwhj0urNm7IMd3lajYb6OtK06NQgtObx3bjqqHjdAs2DkH6A10nNJetq M3urCIti8DVXSqcaPpjEvcdAuO9W0hyg4dOrxbXYXwAqhcV0Y+XnfS39mu2D2iEy O2irs1SQ6OK10Hu6Y3dSs1QnXVA8QSkl14t0jSPD4MbolKBlnmxwcp5uKGbd6uTa 1EJaYlkNzaFj1Mmdu8SE69P1FVotyK2S1Wb6ahm6khmwXU9qFBxg6Wjilpj7g5RR TFEN2SC7p2PTJjIOaMvlU3Hn6FZBHyc= -----END CERTIFICATE-----Generated at Tue Apr 28 21:14:53 2026 by rpki-client