$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67d7479e-721a-3ae9-ad6b-75223e3e2b2e.roa File: 67d7479e-721a-3ae9-ad6b-75223e3e2b2e.roa (raw, json) Hash identifier: XpdBRBn91I+R529DjL6Pdw4f450bHHtsmINz706IOfU= Subject key identifier: F7:D9:AD:24:8A:01:BE:CF:81:06:9E:28:0F:65:81:E2:B5:31:A5:3C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA59D32144A85DFFB705F8800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67d7479e-721a-3ae9-ad6b-75223e3e2b2e.roa Signing time: Mon 27 Apr 2026 15:46:41 +0000 ROA not before: Mon 27 Apr 2026 15:46:41 +0000 ROA not after: Sun 26 Jul 2026 15:46:41 +0000 asID: 272962 IP address blocks: 38.224.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:9d:32:14:4a:85:df:fb:70:5f:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 27 15:46:41 2026 GMT Not After : Jul 26 15:46:41 2026 GMT Subject: CN=9b5ed681-bf89-4f30-a36b-a7115c075ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:51:18:5d:bb:5b:29:c7:35:0b:a9:98:54: 0e:54:47:f4:6f:22:0e:60:b0:59:01:31:e9:9a:9d: 52:69:c7:9e:98:85:f0:db:6f:c5:fa:43:c1:a5:45: 82:c8:74:1c:c7:ec:d5:dc:59:78:b0:57:72:39:d0: aa:ee:c6:7e:8f:74:47:68:78:ab:89:67:e1:14:b7: 41:bd:42:c0:94:80:ce:8d:76:23:82:69:ad:76:ef: 80:b6:92:00:1b:6b:9f:6d:98:e7:19:77:0f:84:24: 64:31:09:b2:f6:de:18:29:41:e3:0b:41:71:5b:83: 71:1a:5c:54:1a:6f:92:e5:53:80:4d:69:06:9b:d3: 25:0e:1c:a5:91:95:85:3c:e6:b6:2c:80:2e:90:c6: 88:2d:08:bd:f2:e8:9c:51:41:d4:70:e6:6a:e9:ca: 80:bb:a8:64:08:8b:2c:03:f1:50:e7:19:3d:b0:d6: b7:26:5a:4d:f6:ae:2b:21:45:8c:f7:01:e5:de:c9: 8c:86:d3:57:36:dc:eb:19:dc:6c:61:ed:c2:59:79: 81:16:e4:43:84:0d:03:95:13:a4:73:89:00:db:de: 4d:af:8c:08:2c:f7:d6:32:bc:58:f7:9c:a3:96:3d: 20:b7:b0:cd:34:2f:5e:78:40:b9:1e:53:2d:c3:0f: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D9:AD:24:8A:01:BE:CF:81:06:9E:28:0F:65:81:E2:B5:31:A5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67d7479e-721a-3ae9-ad6b-75223e3e2b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:fa:56:f2:2e:79:28:42:c3:74:e9:4e:56:b1:42:7b:53:e1: 78:ac:a8:ab:b0:ec:89:91:0a:6e:b8:66:47:32:77:19:06:d9: 9b:03:d7:aa:43:f0:6f:a4:1d:d5:75:9c:93:7e:3f:ca:35:17: 8b:85:fa:a2:dd:dd:b1:57:9e:2d:76:12:e9:c2:b1:01:e9:37: b5:fa:85:06:8e:f4:e5:91:ea:60:ed:27:36:00:99:e3:7e:f0: 72:22:c7:b7:4a:d0:b3:fc:08:53:25:0c:53:bb:25:3d:79:38: d3:32:43:ec:ad:8d:02:1f:96:34:b4:0b:ff:5a:cb:7d:6c:90: c7:35:6f:e9:f1:18:75:59:83:8d:b3:6c:47:29:40:3a:87:3c: 2b:67:dd:e0:b8:da:39:55:fd:84:64:e6:b3:37:99:53:4d:5a: ea:04:33:2b:f6:f7:43:f8:63:7f:15:a5:59:1d:47:fb:fa:74: 14:cc:f0:29:68:63:09:6a:06:ff:17:ff:ff:72:53:35:03:b6: 22:96:05:f9:94:4d:7a:38:9b:2a:1e:77:b4:aa:f8:5f:02:5b: 7b:6f:2c:b1:f9:cb:81:1c:5f:d4:0a:f9:6a:7f:bc:ed:59:3f: 94:ee:dc:22:c7:d6:5a:80:b4:a7:1f:a7:01:ee:c6:82:e1:1a: 7b:1e:f0:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lnTIUSoXf+3BfiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNzE1NDY0MVoXDTI2MDcyNjE1NDY0MVowLzEtMCsGA1UEAxMk OWI1ZWQ2ODEtYmY4OS00ZjMwLWEzNmItYTcxMTVjMDc1ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOZRGF27WynHNQupmFQOVEf0byIOYLBZATHp mp1SaceemIXw22/F+kPBpUWCyHQcx+zV3Fl4sFdyOdCq7sZ+j3RHaHiriWfhFLdB vULAlIDOjXYjgmmtdu+AtpIAG2ufbZjnGXcPhCRkMQmy9t4YKUHjC0FxW4NxGlxU Gm+S5VOATWkGm9MlDhylkZWFPOa2LIAukMaILQi98uicUUHUcOZq6cqAu6hkCIss A/FQ5xk9sNa3JlpN9q4rIUWM9wHl3smMhtNXNtzrGdxsYe3CWXmBFuRDhA0DlROk c4kA295Nr4wILPfWMrxY95yjlj0gt7DNNC9eeEC5HlMtww/0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfZrSSKAb7PgQaeKA9lgeK1MaU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjdkNzQ3OWUtNzIxYS0z YWU5LWFkNmItNzUyMjNlM2UyYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn6VvIueShCw3TpTlaxQntT4XisqKuw7ImRCm64ZkcydxkG2ZsD16pD 8G+kHdV1nJN+P8o1F4uF+qLd3bFXni12EunCsQHpN7X6hQaO9OWR6mDtJzYAmeN+ 8HIix7dK0LP8CFMlDFO7JT15ONMyQ+ytjQIfljS0C/9ay31skMc1b+nxGHVZg42z bEcpQDqHPCtn3eC42jlV/YRk5rM3mVNNWuoEMyv290P4Y38VpVkdR/v6dBTM8Clo YwlqBv8X//9yUzUDtiKWBfmUTXo4myoed7Sq+F8CW3tvLLH5y4EcX9QK+Wp/vO1Z P5Tu3CLH1lqAtKcfpwHuxoLhGnse8P8= -----END CERTIFICATE-----Generated at Tue Apr 28 18:38:32 2026 by rpki-client