$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8580c1bc-91e5-3fd4-a3d2-e3e71c357268.roa File: 8580c1bc-91e5-3fd4-a3d2-e3e71c357268.roa (raw, json) Hash identifier: tnk0cOBmKfNZ5UiHPrOws2t4crf7m/HVQzROxEitNbs= Subject key identifier: 80:7A:36:E3:79:49:C8:FD:E9:31:63:B2:5F:42:CD:5A:26:53:CD:B7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D948AACFAA20931FDADD36D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8580c1bc-91e5-3fd4-a3d2-e3e71c357268.roa Signing time: Tue 21 Apr 2026 13:00:31 +0000 ROA not before: Tue 21 Apr 2026 13:00:31 +0000 ROA not after: Mon 20 Jul 2026 13:00:31 +0000 asID: 273894 IP address blocks: 38.172.205.0/24 maxlen: 24 38.224.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8a:ac:fa:a2:09:31:fd:ad:d3:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 13:00:31 2026 GMT Not After : Jul 20 13:00:31 2026 GMT Subject: CN=8610b859-8c9d-4586-bb14-a0bfd43be29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:ed:f9:f3:ef:5e:1c:34:97:01:2f:91:7f: 55:33:2d:bb:2e:2a:50:2b:6e:a3:ec:1d:a7:40:9b: 47:55:dd:27:d9:8f:70:68:9e:2a:4e:0a:2f:ea:d4: 8f:18:83:9c:0c:83:88:33:45:01:28:72:22:dc:25: 8f:7f:d4:b5:f4:b9:b0:1e:f8:2d:45:0f:f0:b3:7c: e5:f5:43:9b:5c:a7:a3:69:19:22:82:6d:a0:ff:e4: 91:f3:c8:08:6a:48:1e:73:89:d2:57:23:74:2b:1a: 7e:9a:94:26:50:44:76:f4:ac:1c:50:f7:59:a6:11: a2:b3:1c:d1:87:df:7a:2c:96:a0:91:92:1b:4a:0b: 76:c6:37:77:ea:81:bb:4a:f5:13:c5:76:89:e9:1a: 5d:34:6f:a3:92:94:18:5b:22:6e:55:24:61:18:ab: 04:8f:bf:83:ee:31:13:1c:c3:e9:19:2e:1f:d0:aa: cf:45:fd:60:b2:da:bd:bc:b0:21:d3:12:06:2f:1f: b4:28:eb:a9:36:bd:69:56:b3:a0:db:33:d3:cb:62: 32:bd:74:de:85:e0:04:24:7b:d7:90:73:e2:65:33: 2f:c1:ac:0a:6e:1f:cd:f1:fd:f9:16:13:ca:34:29: 8b:7e:2e:0a:b6:43:ce:28:16:2e:aa:19:27:76:eb: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7A:36:E3:79:49:C8:FD:E9:31:63:B2:5F:42:CD:5A:26:53:CD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8580c1bc-91e5-3fd4-a3d2-e3e71c357268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.205.0/24 38.224.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ad:cf:6c:94:7e:8a:3b:ab:54:4a:b7:5f:4d:22:08:a0:3e: db:79:d6:cc:05:df:13:e8:05:99:d4:de:5a:05:33:71:72:09: 4b:6a:e7:c5:65:e8:a2:e4:9a:19:02:bc:15:1e:f5:be:03:62: e3:f5:f1:fe:14:6a:74:fd:7c:27:55:4c:bb:1a:99:74:59:ef: 11:1b:2a:73:b3:f6:2e:43:83:01:7f:c1:1f:67:1e:41:03:7a: 12:f4:97:34:e9:9a:31:15:a9:5b:5b:1e:57:a7:55:be:20:77: e3:6f:9d:75:a1:0c:ba:b1:12:87:6a:c2:5a:5b:67:81:1c:04: e0:12:51:c1:78:20:27:fb:0c:15:c6:ab:ca:50:b0:70:7b:7b: 6a:78:28:7e:0e:04:4b:cc:08:61:4c:35:bb:2f:3c:9e:7e:75: d3:d8:c8:60:ea:4c:96:9b:63:e4:85:ba:98:77:11:91:c5:4e: dd:26:24:01:b8:0f:7d:1f:cc:84:61:bd:ae:31:a9:a6:d5:46: c2:c3:93:2e:f7:55:d0:d8:40:74:65:00:54:d4:1a:78:03:16: 96:86:b6:f9:38:7e:91:70:91:cd:bd:e8:11:18:f1:e8:ba:85: d9:95:a6:8b:f0:d4:6e:3e:ac:43:59:bb:0d:11:af:8d:20:7a: 3a:d1:be:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2Uiqz6ogkx/a3TbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk ODYxMGI4NTktOGM5ZC00NTg2LWJiMTQtYTBiZmQ0M2JlMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/t+fPvXhw0lwEvkX9VMy27LipQK26j7B2n QJtHVd0n2Y9waJ4qTgov6tSPGIOcDIOIM0UBKHIi3CWPf9S19LmwHvgtRQ/ws3zl 9UObXKejaRkigm2g/+SR88gIakgec4nSVyN0Kxp+mpQmUER29KwcUPdZphGisxzR h996LJagkZIbSgt2xjd36oG7SvUTxXaJ6RpdNG+jkpQYWyJuVSRhGKsEj7+D7jET HMPpGS4f0KrPRf1gstq9vLAh0xIGLx+0KOupNr1pVrOg2zPTy2IyvXTeheAEJHvX kHPiZTMvwawKbh/N8f35FhPKNCmLfi4KtkPOKBYuqhknduvfxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIB6NuN5Scj96TFjsl9CzVomU823MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODU4MGMxYmMtOTFlNS0z ZmQ0LWEzZDItZTNlNzFjMzU3MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJqzNAwQA JuAVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACytz2yUfoo7q1RKt19NIgigPtt51swF3xPoBZnU3loFM3Fy CUtq58Vl6KLkmhkCvBUe9b4DYuP18f4UanT9fCdVTLsamXRZ7xEbKnOz9i5DgwF/ wR9nHkEDehL0lzTpmjEVqVtbHlenVb4gd+NvnXWhDLqxEodqwlpbZ4EcBOASUcF4 ICf7DBXGq8pQsHB7e2p4KH4OBEvMCGFMNbsvPJ5+ddPYyGDqTJabY+SFuph3EZHF Tt0mJAG4D30fzIRhva4xqabVRsLDky73VdDYQHRlAFTUGngDFpaGtvk4fpFwkc29 6BEY8ei6hdmVpovw1G4+rENZuw0Rr40gejrRviw= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:19 2026 by rpki-client