$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a840bd2-2570-3f66-a11e-598318aba845.roa File: 6a840bd2-2570-3f66-a11e-598318aba845.roa (raw, json) Hash identifier: pjjYqyHL1BIw1B5YMbQOIYo32/VgglhXDOmgMXZ37gw= Subject key identifier: F4:3D:2E:50:EB:FE:B0:2A:C0:CE:61:0F:55:3E:15:C4:89:8F:CA:08 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D977AED320819891870318780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a840bd2-2570-3f66-a11e-598318aba845.roa Signing time: Wed 22 Apr 2026 14:16:19 +0000 ROA not before: Wed 22 Apr 2026 14:16:19 +0000 ROA not after: Tue 21 Jul 2026 14:16:19 +0000 asID: 32277 IP address blocks: 38.18.96.0/19 maxlen: 19 38.39.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:7a:ed:32:08:19:89:18:70:31:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 22 14:16:19 2026 GMT Not After : Jul 21 14:16:19 2026 GMT Subject: CN=b1ea4598-ad71-417a-a663-1ec23ec39ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ce:af:12:dc:e3:d3:79:a8:9f:81:99:9c:1c: 8c:af:31:0d:b9:26:4d:41:70:0d:86:8b:f6:5f:18: 5d:44:8a:ad:a6:fa:bc:fb:16:8f:fe:ac:3b:5a:ff: 60:b5:ff:b2:f9:58:fd:43:29:8d:63:15:55:f5:5a: de:77:84:ec:86:9d:26:03:49:cc:c9:db:c1:a2:d5: cd:af:92:43:93:de:ca:60:81:d5:5a:0b:02:3b:29: ee:62:e4:0b:76:4c:fc:23:67:1a:40:fe:98:8d:30: ef:12:a1:c2:88:d0:71:8a:7b:35:10:6b:a4:e6:c5: de:05:0d:6b:9f:27:6b:cc:a5:23:0d:60:4e:9c:a9: 27:b5:0e:bf:a3:a0:cc:d6:6b:ec:65:ea:6e:9e:49: ca:93:ca:dd:31:c3:4e:52:93:32:83:f6:b4:66:f6: 38:fa:92:aa:65:3b:02:6e:e8:d8:4d:75:ab:d2:70: 8e:67:83:f2:fc:17:3b:d7:18:4e:8f:bc:d8:42:41: 36:b9:dd:22:f0:fb:9c:81:7c:a0:85:49:10:d8:e1: 35:33:f2:18:28:6c:25:b3:f1:b2:ad:ee:c1:15:ea: f4:b6:fe:f7:69:14:d8:62:2b:28:b9:43:6c:71:13: 0c:93:2e:f5:a1:d4:10:43:73:b3:58:a9:41:f1:99: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:2E:50:EB:FE:B0:2A:C0:CE:61:0F:55:3E:15:C4:89:8F:CA:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a840bd2-2570-3f66-a11e-598318aba845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.18.96.0/19 38.39.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a0:02:a1:6f:6e:e6:0b:57:27:1e:9e:5f:96:c1:ca:a7:36: ef:e0:ad:e2:88:b1:d8:a6:17:c3:c6:93:14:38:eb:40:66:7f: 6f:10:54:a8:0a:ed:92:b0:56:c6:6b:c2:39:c5:ff:54:31:86: 73:c9:51:33:a3:2d:bd:df:03:ea:1b:65:4a:1f:b6:61:b4:23: a3:be:79:28:b2:f2:98:04:31:e6:71:4b:0b:30:94:22:6d:73: 39:ef:bf:bc:85:dd:43:54:f4:93:bc:9c:b4:60:66:5f:51:35: 2b:f8:04:68:c4:17:3d:30:88:5f:ad:48:f9:e6:39:0c:ed:8b: 9b:ab:1a:ff:38:8a:40:a0:19:72:5f:35:5e:9b:91:da:44:9a: 41:ec:35:b6:e6:04:9b:ec:1d:8d:d7:4b:30:91:7b:4b:33:73: a1:42:75:de:cd:ab:6e:de:b4:46:04:57:a7:07:b0:3a:c6:9d: 1a:1c:2c:18:5f:00:1c:aa:e3:25:41:47:32:31:d4:d0:df:55: 03:f8:a1:0d:a6:0d:75:2e:3d:3e:a7:69:a1:c0:05:21:a6:aa: f2:9c:80:2f:75:77:38:7f:74:e1:12:cb:96:16:b5:30:1b:39: d9:cd:ae:28:ab:41:cc:71:06:9b:73:37:56:f1:26:7a:05:1f: ed:f8:a4:f6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2Xeu0yCBmJGHAxh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMjE0MTYxOVoXDTI2MDcyMTE0MTYxOVowLzEtMCsGA1UEAxMk YjFlYTQ1OTgtYWQ3MS00MTdhLWE2NjMtMWVjMjNlYzM5YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic6vEtzj03mon4GZnByMrzENuSZNQXANhov2 XxhdRIqtpvq8+xaP/qw7Wv9gtf+y+Vj9QymNYxVV9Vred4Tshp0mA0nMydvBotXN r5JDk97KYIHVWgsCOynuYuQLdkz8I2caQP6YjTDvEqHCiNBxins1EGuk5sXeBQ1r nydrzKUjDWBOnKkntQ6/o6DM1mvsZepunknKk8rdMcNOUpMyg/a0ZvY4+pKqZTsC bujYTXWr0nCOZ4Py/Bc71xhOj7zYQkE2ud0i8PucgXyghUkQ2OE1M/IYKGwls/Gy re7BFer0tv73aRTYYisouUNscRMMky71odQQQ3OzWKlB8ZnFnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPQ9LlDr/rAqwM5hD1U+FcSJj8oIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNmE4NDBiZDItMjU3MC0z ZjY2LWExMWUtNTk4MzE4YWJhODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJhJgAwQF JidAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAygAqFvbuYLVycenl+WwcqnNu/greKIsdimF8PGkxQ460Bm f28QVKgK7ZKwVsZrwjnF/1QxhnPJUTOjLb3fA+obZUoftmG0I6O+eSiy8pgEMeZx SwswlCJtcznvv7yF3UNU9JO8nLRgZl9RNSv4BGjEFz0wiF+tSPnmOQzti5urGv84 ikCgGXJfNV6bkdpEmkHsNbbmBJvsHY3XSzCRe0szc6FCdd7Nq27etEYEV6cHsDrG nRocLBhfAByq4yVBRzIx1NDfVQP4oQ2mDXUuPT6naaHABSGmqvKcgC91dzh/dOES y5YWtTAbOdnNriirQcxxBptzN1bxJnoFH+34pPY= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:00 2026 by rpki-client