$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/61bfe352-84b0-384b-99d3-c4a22b17d056.roa File: 61bfe352-84b0-384b-99d3-c4a22b17d056.roa (raw, json) Hash identifier: MIX+jwOas0JbimJY3fMaXe/MqT9Yl0pDWW3zeGwHYtU= Subject key identifier: 3F:54:81:40:93:F4:32:91:D7:83:43:C5:9D:42:00:DC:62:DD:39:D5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA11AEA3CC2F19D9293D42680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/61bfe352-84b0-384b-99d3-c4a22b17d056.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 210008 IP address blocks: 38.135.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ea:3c:c2:f1:9d:92:93:d4:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=23c3f3d8-7c1c-490f-8087-f121e68708cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:cd:64:99:cd:60:ef:48:47:f6:cf:9d:0d: b7:5e:d5:14:17:61:8d:21:dd:3f:99:3d:10:62:54: 98:8e:f1:51:c9:45:2d:d1:c2:da:8a:a1:ed:4f:36: 75:f0:7d:2c:32:f4:40:93:be:6d:f4:c3:0d:6d:70: 8f:1e:cb:f0:17:8d:2d:94:e2:b8:c7:fa:12:ff:23: 24:48:18:a0:a1:0a:26:66:bf:b2:93:d9:bb:de:4b: f5:19:89:18:b9:c4:47:31:d1:c0:ef:1c:89:16:65: bb:af:37:8c:db:4a:17:4b:32:bb:22:83:58:82:7c: 86:a8:f1:56:9b:0b:76:85:1a:65:58:a5:4b:81:c3: 83:88:2a:20:be:25:a4:9c:be:f4:e2:f1:d2:31:bc: 78:60:97:c2:a6:15:9c:74:dc:ec:b6:6a:9b:17:57: b4:a4:df:e4:25:51:c3:8c:e4:f3:76:f6:01:c9:b0: f2:a6:38:09:95:8a:bb:2c:b8:a8:cf:ad:e6:86:ff: 0d:67:6e:61:40:47:87:4c:18:49:07:31:bb:37:76: cf:02:ce:56:dc:9b:a8:da:74:49:22:4f:dc:22:e2: 2e:2d:54:dd:17:e8:53:29:11:70:77:11:c6:6a:b3: 02:cf:70:9d:3c:cb:97:6c:bd:c8:60:63:f5:32:43: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:54:81:40:93:F4:32:91:D7:83:43:C5:9D:42:00:DC:62:DD:39:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/61bfe352-84b0-384b-99d3-c4a22b17d056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7e:69:21:ef:cb:99:56:17:22:0a:38:ae:12:8c:8c:20:c1: bd:84:7f:2d:f5:2d:ad:43:26:09:5a:98:46:19:c9:4a:e2:32: 02:7e:8e:be:f6:a8:21:cf:40:74:96:20:21:ef:3c:e8:09:66: 69:fc:eb:28:a0:47:09:d8:75:d5:2c:bd:8e:57:5f:a2:8c:f9: 8e:9c:11:2e:37:c0:08:c8:13:00:57:8d:b6:2a:b3:03:81:4e: 03:57:e8:d4:07:d1:13:f7:98:9d:0a:f8:ad:f4:b4:62:37:3e: 21:ee:06:44:5c:37:cf:3d:90:6a:8b:15:e6:60:9b:37:0d:87: c1:89:dd:4b:71:86:f4:36:76:a2:9f:c4:19:12:dc:76:fd:cc: ec:13:50:33:2b:1c:03:17:65:ae:ca:4e:02:22:9a:bf:4b:da: 76:90:92:74:2b:13:16:13:51:0a:b9:b4:70:e8:bc:84:31:af: e6:2b:41:fb:88:a5:02:b2:fb:9f:43:1f:6b:b1:e8:d1:f5:76: 9d:b9:ed:ed:83:5d:4a:90:41:85:fe:b7:e2:88:3e:93:fe:30: c9:ca:5f:90:4c:44:26:73:ee:a3:71:d9:49:3e:8d:0b:ca:92: 48:90:4f:2a:83:e3:2e:67:af:07:d3:22:8b:a5:5d:d4:ab:66: fd:1c:43:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGuo8wvGdkpPUJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MjNjM2YzZDgtN2MxYy00OTBmLTgwODctZjEyMWU2ODcwOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxnNZJnNYO9IR/bPnQ23XtUUF2GNId0/mT0Q YlSYjvFRyUUt0cLaiqHtTzZ18H0sMvRAk75t9MMNbXCPHsvwF40tlOK4x/oS/yMk SBigoQomZr+yk9m73kv1GYkYucRHMdHA7xyJFmW7rzeM20oXSzK7IoNYgnyGqPFW mwt2hRplWKVLgcODiCogviWknL704vHSMbx4YJfCphWcdNzstmqbF1e0pN/kJVHD jOTzdvYBybDypjgJlYq7LLioz63mhv8NZ25hQEeHTBhJBzG7N3bPAs5W3Juo2nRJ Ik/cIuIuLVTdF+hTKRFwdxHGarMCz3CdPMuXbL3IYGP1MkPb5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9UgUCT9DKR14NDxZ1CANxi3TnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjFiZmUzNTItODRiMC0z ODRiLTk5ZDMtYzRhMjJiMTdkMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJoeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt+aSHvy5lWFyIKOK4SjIwgwb2Efy31La1DJglamEYZyUriMgJ+jr72 qCHPQHSWICHvPOgJZmn86yigRwnYddUsvY5XX6KM+Y6cES43wAjIEwBXjbYqswOB TgNX6NQH0RP3mJ0K+K30tGI3PiHuBkRcN889kGqLFeZgmzcNh8GJ3UtxhvQ2dqKf xBkS3Hb9zOwTUDMrHAMXZa7KTgIimr9L2naQknQrExYTUQq5tHDovIQxr+YrQfuI pQKy+59DH2ux6NH1dp257e2DXUqQQYX+t+KIPpP+MMnKX5BMRCZz7qNx2Uk+jQvK kkiQTyqD4y5nrwfTIoulXdSrZv0cQxk= -----END CERTIFICATE-----Generated at Tue Apr 28 21:13:41 2026 by rpki-client