$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a309a4e-b525-36bf-923b-465b24284047.roa File: 8a309a4e-b525-36bf-923b-465b24284047.roa (raw, json) Hash identifier: Yc0H5mjUd+ohXsWzsaBJx2zfNjx6SdBV7yF+ZkVJUoY= Subject key identifier: 27:78:AC:37:E5:DB:6E:13:C0:36:3B:28:46:B5:B8:1B:4E:BF:95:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA59D89D011513649F0491E80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a309a4e-b525-36bf-923b-465b24284047.roa Signing time: Mon 27 Apr 2026 15:47:22 +0000 ROA not before: Mon 27 Apr 2026 15:47:22 +0000 ROA not after: Sun 26 Jul 2026 15:47:22 +0000 asID: 272962 IP address blocks: 38.224.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:9d:89:d0:11:51:36:49:f0:49:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 27 15:47:22 2026 GMT Not After : Jul 26 15:47:22 2026 GMT Subject: CN=c3f3f87d-a7ac-4330-bd56-b15c5404948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:42:19:ad:46:2e:eb:9a:4c:c6:2b:e7:29: 89:75:85:47:41:f2:d7:9f:6f:89:4b:eb:b9:3e:4e: 01:39:e5:3a:29:a2:d1:96:48:53:35:4a:08:f8:4b: 84:9e:49:12:8a:c1:e8:cb:84:00:ac:60:1b:5d:c5: ea:49:52:30:78:e9:73:0f:11:69:56:8b:2b:0a:b5: 35:35:d7:46:db:78:93:e2:4c:69:e8:a4:4a:fb:0b: a2:8b:6d:f9:9b:a3:f0:73:98:7e:32:08:b3:44:e0: b6:c1:1d:0f:6e:48:03:1f:e8:fe:7a:5b:13:c2:b9: 66:b7:4c:60:3f:ef:8a:3b:ce:a7:5f:cb:d1:d9:da: aa:40:e9:78:df:d5:d0:62:2c:3c:82:b8:c2:80:9b: ae:15:e1:02:3a:f7:68:49:a1:c8:94:51:9d:46:38: 56:2e:ee:30:87:41:bb:bc:ab:d0:28:80:70:03:07: 00:1e:f0:77:05:1f:8c:19:6b:1d:da:5f:bf:a8:56: de:27:17:fe:8d:c8:6d:f8:9b:4d:70:7f:99:8d:41: 36:9a:25:f8:1a:db:92:cb:e4:f5:cc:5d:9e:30:00: f3:dc:9d:b8:84:d4:01:11:d6:13:bf:67:7a:1e:ae: 9e:92:7e:27:03:18:ab:f1:e4:b3:78:87:84:c6:14: f2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:AC:37:E5:DB:6E:13:C0:36:3B:28:46:B5:B8:1B:4E:BF:95:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a309a4e-b525-36bf-923b-465b24284047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cf:aa:4f:3b:38:72:d7:b3:a6:c1:be:d4:00:e5:07:91:73: 5a:72:4d:aa:f0:78:54:33:9c:f0:a1:75:2a:02:85:26:78:f3: fc:79:1f:b9:91:b8:29:69:6a:9e:22:5c:a2:1b:cc:3f:fe:98: 5f:4a:fd:1e:4c:ed:20:74:4c:8f:cb:22:db:cf:e8:25:57:5d: 02:b1:99:48:ba:28:5e:39:92:60:45:ab:25:0e:ca:3d:65:65: 42:3a:1d:19:a9:a8:15:7f:1e:29:cc:96:70:1e:e5:d0:3c:39: 8b:81:85:98:1c:e6:b1:ed:87:74:14:7c:e9:5a:e2:5f:f0:3d: 15:eb:90:d7:b5:3a:79:2f:b5:c4:e0:36:05:4e:02:9b:e8:ff: ab:63:0c:e3:87:82:0a:72:74:15:2b:bc:26:05:57:f1:8e:fe: 7e:99:30:76:79:85:65:c0:ae:2d:7f:d7:26:9d:9f:5b:11:b3: 2c:61:18:09:a8:bf:82:c1:33:40:03:38:73:70:80:ff:cd:89: 77:79:29:3d:b7:c5:3e:0a:2b:0f:db:37:c9:c1:50:cd:37:87: da:70:d8:15:bd:3b:16:57:17:ce:6f:04:e4:b1:29:ab:11:7b: 46:a5:12:8f:ad:f2:f9:5d:54:a1:c3:66:38:fa:05:5f:2c:22: b0:61:86:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lnYnQEVE2SfBJHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNzE1NDcyMloXDTI2MDcyNjE1NDcyMlowLzEtMCsGA1UEAxMk YzNmM2Y4N2QtYTdhYy00MzMwLWJkNTYtYjE1YzU0MDQ5NDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+NCGa1GLuuaTMYr5ymJdYVHQfLXn2+JS+u5 Pk4BOeU6KaLRlkhTNUoI+EuEnkkSisHoy4QArGAbXcXqSVIweOlzDxFpVosrCrU1 NddG23iT4kxp6KRK+wuii235m6Pwc5h+MgizROC2wR0PbkgDH+j+elsTwrlmt0xg P++KO86nX8vR2dqqQOl439XQYiw8grjCgJuuFeECOvdoSaHIlFGdRjhWLu4wh0G7 vKvQKIBwAwcAHvB3BR+MGWsd2l+/qFbeJxf+jcht+JtNcH+ZjUE2miX4GtuSy+T1 zF2eMADz3J24hNQBEdYTv2d6Hq6ekn4nAxir8eSzeIeExhTyswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd4rDfl224TwDY7KEa1uBtOv5XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGEzMDlhNGUtYjUyNS0z NmJmLTkyM2ItNDY1YjI0Mjg0MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDPqk87OHLXs6bBvtQA5QeRc1pyTarweFQznPChdSoChSZ48/x5H7mR uClpap4iXKIbzD/+mF9K/R5M7SB0TI/LItvP6CVXXQKxmUi6KF45kmBFqyUOyj1l ZUI6HRmpqBV/HinMlnAe5dA8OYuBhZgc5rHth3QUfOla4l/wPRXrkNe1OnkvtcTg NgVOApvo/6tjDOOHggpydBUrvCYFV/GO/n6ZMHZ5hWXAri1/1yadn1sRsyxhGAmo v4LBM0ADOHNwgP/NiXd5KT23xT4KKw/bN8nBUM03h9pw2BW9OxZXF85vBOSxKasR e0alEo+t8vldVKHDZjj6BV8sIrBhhvw= -----END CERTIFICATE-----Generated at Tue Apr 28 18:37:36 2026 by rpki-client