$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa File: 6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa (raw, json) Hash identifier: /dUHku7VLpDi4qAJaKNJNofEKxvXgUw9X3oN6QxqDOQ= Subject key identifier: F0:37:46:28:F1:F5:C5:F7:26:8C:CC:E4:09:DE:F4:CD:2C:A2:F4:E4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D949868273023140A9CF1B180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa Signing time: Tue 21 Apr 2026 13:28:17 +0000 ROA not before: Tue 21 Apr 2026 13:28:17 +0000 ROA not after: Mon 20 Jul 2026 13:28:17 +0000 asID: 264297 IP address blocks: 38.199.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:98:68:27:30:23:14:0a:9c:f1:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 13:28:17 2026 GMT Not After : Jul 20 13:28:17 2026 GMT Subject: CN=7b4d72e1-5a8d-4415-9f91-4ae1ac6021af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:9c:4d:4c:14:f7:c0:68:25:dc:40:b0:78: ce:90:25:6b:fe:78:dc:fd:97:14:1a:9d:bd:f6:22: 9f:62:ea:54:ba:2b:28:09:64:ac:09:5f:e1:d2:1e: 98:be:f5:cc:81:72:b5:40:62:80:42:20:fd:b2:fe: d4:e2:b9:57:2d:ca:16:a9:3d:d8:46:0d:51:81:50: a9:29:8b:59:cd:d5:a8:9f:4d:e6:00:a3:80:b9:a5: 0e:d9:e2:6c:e3:6e:f0:e3:22:0f:7b:b8:50:3e:58: a5:fa:31:7f:71:1e:5f:e0:df:e2:44:f8:0b:d9:30: 3a:51:e6:ef:7f:1d:e1:27:7b:36:fa:96:c6:8b:88: 0e:71:4a:fc:0c:ba:05:8b:75:fb:4f:22:64:fe:3a: c9:75:85:8a:25:bf:b1:58:e3:5e:24:b6:7d:58:d9: 34:c8:42:d5:f1:94:5c:31:7d:d0:8f:a8:f2:31:56: e1:c0:c2:d3:8e:8a:d5:b4:cb:50:3d:cd:8e:6e:e9: ef:6f:b3:9e:bc:22:f2:f2:f5:ea:4b:34:ef:09:4b: d2:c1:56:28:9b:88:18:cc:34:e3:c0:49:a0:a8:8a: 67:23:a0:88:85:5e:3e:6c:bc:92:ed:ff:0e:95:82: c3:21:12:95:82:7e:a8:c8:b9:b7:35:39:f9:05:b6: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:37:46:28:F1:F5:C5:F7:26:8C:CC:E4:09:DE:F4:CD:2C:A2:F4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:47:02:75:d8:b8:db:e0:a8:89:35:ba:34:f0:d6:6b:e8:89: 11:7a:aa:dd:fd:4b:f7:7b:64:b4:6c:d4:53:7e:66:c1:06:05: 7f:86:1b:73:83:ba:8d:68:bb:d3:a3:1e:be:9c:73:8f:55:6d: 38:6c:bd:4e:95:7b:88:a4:82:9d:29:54:23:0d:2b:65:d7:0b: 2e:67:d0:0e:5a:d7:6f:43:ed:c7:af:a0:23:10:89:f3:e5:70: 14:6a:01:56:6b:8c:f4:9e:43:ac:ba:24:86:28:43:92:7d:ff: 5d:07:77:b5:b6:27:9a:5e:c3:ed:84:f6:1e:74:9d:ce:46:ea: e8:bd:2a:a2:c9:db:92:96:d3:54:6d:9a:39:9d:1e:f5:82:d9: 8a:f6:ae:12:7d:01:5f:43:4b:be:09:f8:98:0c:da:f9:0b:74: 38:62:2f:4d:b7:2f:f2:1e:cc:68:17:3e:5f:87:77:e6:f1:7a: 04:3e:3d:e8:35:69:9f:87:ed:a1:6a:8b:67:97:a0:9c:7a:56: fd:ea:4c:e5:7f:01:ee:db:be:8c:8d:6b:37:37:50:b6:3c:03: ed:87:d9:f4:03:e1:f7:ca:f0:34:f0:96:9b:97:14:30:c5:b7: 07:15:7f:fe:e5:a4:6f:8c:1c:fa:ee:83:9e:5d:8f:47:5d:43: 2f:58:1a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UmGgnMCMUCpzxsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTEzMjgxN1oXDTI2MDcyMDEzMjgxN1owLzEtMCsGA1UEAxMk N2I0ZDcyZTEtNWE4ZC00NDE1LTlmOTEtNGFlMWFjNjAyMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNKcTUwU98BoJdxAsHjOkCVr/njc/ZcUGp29 9iKfYupUuisoCWSsCV/h0h6YvvXMgXK1QGKAQiD9sv7U4rlXLcoWqT3YRg1RgVCp KYtZzdWon03mAKOAuaUO2eJs427w4yIPe7hQPlil+jF/cR5f4N/iRPgL2TA6Uebv fx3hJ3s2+pbGi4gOcUr8DLoFi3X7TyJk/jrJdYWKJb+xWONeJLZ9WNk0yELV8ZRc MX3Qj6jyMVbhwMLTjorVtMtQPc2Obunvb7OevCLy8vXqSzTvCUvSwVYom4gYzDTj wEmgqIpnI6CIhV4+bLyS7f8OlYLDIRKVgn6oyLm3NTn5BbaQtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA3Rijx9cX3JozM5Ane9M0sovTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjgyM2I4OTItODA3NC0z YzhiLWIxZGYtZGQ4MGFjYzBjZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVHAnXYuNvgqIk1ujTw1mvoiRF6qt39S/d7ZLRs1FN+ZsEGBX+GG3OD uo1ou9OjHr6cc49VbThsvU6Ve4ikgp0pVCMNK2XXCy5n0A5a129D7cevoCMQifPl cBRqAVZrjPSeQ6y6JIYoQ5J9/10Hd7W2J5pew+2E9h50nc5G6ui9KqLJ25KW01Rt mjmdHvWC2Yr2rhJ9AV9DS74J+JgM2vkLdDhiL023L/IezGgXPl+Hd+bxegQ+Peg1 aZ+H7aFqi2eXoJx6Vv3qTOV/Ae7bvoyNazc3ULY8A+2H2fQD4ffK8DTwlpuXFDDF twcVf/7lpG+MHPrug55dj0ddQy9YGqw= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:46 2026 by rpki-client