$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7843a51d-98f0-38fd-a7e0-0a6270364507.roa File: 7843a51d-98f0-38fd-a7e0-0a6270364507.roa (raw, json) Hash identifier: 0EAWCnX9V7Bvmj7/s2cmMG/5ohkVojf5BJGgWSbiV+I= Subject key identifier: 08:AD:6B:75:E4:FD:E9:0C:EB:E7:41:71:03:E7:CA:E2:75:6B:1F:9C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D976FDA8BF2723577AB722520 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7843a51d-98f0-38fd-a7e0-0a6270364507.roa Signing time: Wed 22 Apr 2026 13:54:00 +0000 ROA not before: Wed 22 Apr 2026 13:54:00 +0000 ROA not after: Tue 21 Jul 2026 13:54:00 +0000 asID: 274399 IP address blocks: 38.199.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:6f:da:8b:f2:72:35:77:ab:72:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 22 13:54:00 2026 GMT Not After : Jul 21 13:54:00 2026 GMT Subject: CN=80db3f88-9c0d-4019-84ca-d5cda0eb3c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:fd:31:33:a3:0e:2a:e6:aa:76:a7:db:eb: 72:ad:e0:a4:4b:31:03:ca:a4:09:26:d4:bb:f2:c3: 37:bf:36:4b:f7:28:8a:6f:fa:6a:dc:8f:26:52:1d: b6:33:fe:2e:9a:e5:39:ea:a3:96:62:26:44:7e:38: 4b:31:84:59:f3:98:82:92:5a:06:0d:b0:00:52:36: 12:bd:21:c8:de:74:bf:4e:4a:b7:ea:7e:1e:fa:fd: 21:3e:3f:db:bf:fd:19:4b:2e:2c:b8:e7:f8:17:0e: a4:8a:eb:6c:92:3e:90:31:23:e4:ae:93:95:7c:b3: 3b:b9:ed:bc:bb:1d:e4:f4:1e:e9:74:0f:e1:46:ca: 2e:74:43:17:d2:d1:81:85:21:75:f6:11:21:9f:27: 20:76:b5:99:95:46:e6:21:cd:73:00:18:a1:67:83: 39:fe:d6:60:80:04:bb:a3:3c:d8:12:53:e5:96:c8: 3c:c2:f2:95:75:2f:02:f6:0f:32:14:42:cc:69:46: 7e:8c:c4:f5:be:36:e9:33:19:1d:27:77:84:ce:b2: 51:4f:f1:12:4c:69:a4:e9:16:03:e9:28:b2:f3:bb: 07:95:1f:34:be:df:90:e2:cc:a4:93:c1:7e:64:69: 3c:86:fe:59:f9:84:ab:19:f0:0f:e6:5f:10:37:ae: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:6B:75:E4:FD:E9:0C:EB:E7:41:71:03:E7:CA:E2:75:6B:1F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7843a51d-98f0-38fd-a7e0-0a6270364507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:41:d6:0c:88:9b:39:14:db:62:62:eb:50:73:ff:e7:55:3c: b3:33:4a:2a:4f:b6:d9:d6:7a:9b:0f:cf:cd:65:22:e7:4c:d0: a0:13:32:9b:dd:c5:fa:03:de:99:3e:3c:1f:ac:e1:5b:2e:90: f8:78:0a:a9:c8:76:94:ac:56:35:ca:a9:8f:80:38:53:73:7c: 86:9d:e2:38:3f:62:b1:06:4e:2d:93:bc:0f:5e:e2:69:de:14: 7d:4e:c9:5e:01:cb:23:f4:45:02:00:17:32:60:a3:3b:ca:b6: 5e:2d:a7:5c:b4:a8:94:55:ac:33:a5:97:30:01:aa:d6:b9:6b: fd:ae:12:fe:37:86:a7:70:9f:40:62:53:61:99:de:6c:5e:db: 6e:77:bb:f8:d8:35:60:12:ba:8d:24:00:d7:a1:9c:f9:2c:0a: 33:a3:2c:36:c1:b3:44:66:94:6c:6f:17:ed:9f:b7:c5:74:84: fb:47:8b:87:8b:1a:63:b9:4d:a5:1a:83:21:25:d8:f3:dc:fa: a2:ef:83:d9:08:50:5d:8b:f3:f6:1f:ec:0e:ea:f8:02:35:66: c4:0e:12:31:6d:e8:78:86:eb:41:cc:f1:9b:44:5f:f3:1c:2c: af:bf:2b:e8:92:5f:49:46:4c:47:95:64:fa:54:01:fe:95:b2: 5b:a7:c4:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Xb9qL8nI1d6tyJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMjEzNTQwMFoXDTI2MDcyMTEzNTQwMFowLzEtMCsGA1UEAxMk ODBkYjNmODgtOWMwZC00MDE5LTg0Y2EtZDVjZGEwZWIzYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0b9MTOjDirmqnan2+tyreCkSzEDyqQJJtS7 8sM3vzZL9yiKb/pq3I8mUh22M/4umuU56qOWYiZEfjhLMYRZ85iCkloGDbAAUjYS vSHI3nS/Tkq36n4e+v0hPj/bv/0ZSy4suOf4Fw6kiutskj6QMSPkrpOVfLM7ue28 ux3k9B7pdA/hRsoudEMX0tGBhSF19hEhnycgdrWZlUbmIc1zABihZ4M5/tZggAS7 ozzYElPllsg8wvKVdS8C9g8yFELMaUZ+jMT1vjbpMxkdJ3eEzrJRT/ESTGmk6RYD 6Siy87sHlR80vt+Q4sykk8F+ZGk8hv5Z+YSrGfAP5l8QN679GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAita3Xk/ekM6+dBcQPnyuJ1ax+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzg0M2E1MWQtOThmMC0z OGZkLWE3ZTAtMGE2MjcwMzY0NTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJsfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlB1gyImzkU22Ji61Bz/+dVPLMzSipPttnWepsPz81lIudM0KATMpvd xfoD3pk+PB+s4VsukPh4CqnIdpSsVjXKqY+AOFNzfIad4jg/YrEGTi2TvA9e4mne FH1OyV4ByyP0RQIAFzJgozvKtl4tp1y0qJRVrDOllzABqta5a/2uEv43hqdwn0Bi U2GZ3mxe2253u/jYNWASuo0kANehnPksCjOjLDbBs0RmlGxvF+2ft8V0hPtHi4eL GmO5TaUagyEl2PPc+qLvg9kIUF2L8/Yf7A7q+AI1ZsQOEjFt6HiG60HM8ZtEX/Mc LK+/K+iSX0lGTEeVZPpUAf6VslunxNU= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:59 2026 by rpki-client