$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa File: 8dc5e404-d457-327e-acc0-7d988251b645.roa (raw, json) Hash identifier: OYfuYqkRp7IhCnLSydGHZTZwjjEIucFgd4/47nBeEJY= Subject key identifier: BF:BF:5A:6B:C7:FC:8C:9D:EA:54:77:AF:B6:65:A2:D0:2E:EB:9A:53 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9DE68C9E099AF022C8460380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa Signing time: Fri 24 Apr 2026 21:28:01 +0000 ROA not before: Fri 24 Apr 2026 21:28:01 +0000 ROA not after: Thu 23 Jul 2026 21:28:01 +0000 asID: 272809 IP address blocks: 38.248.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9d:e6:8c:9e:09:9a:f0:22:c8:46:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 24 21:28:01 2026 GMT Not After : Jul 23 21:28:01 2026 GMT Subject: CN=b1cc8541-8508-4db9-afdb-c35ad7820799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:a9:29:d8:e8:e1:e0:03:ef:03:fb:e8:53: 68:6a:18:75:90:c3:d3:2d:b6:6e:d8:4b:7e:b8:66: 38:3f:3e:38:7a:f2:94:6f:cf:d3:94:0d:c7:44:5b: e9:17:f2:6c:a1:6d:3d:48:aa:0a:5a:97:0e:52:d6: f3:ff:2c:8a:34:74:99:36:67:3a:62:b0:ab:c6:42: 9d:ab:3b:a0:6a:c2:ea:ce:0b:6a:d9:d0:f6:7f:12: 1a:43:86:7f:6f:54:de:85:ce:28:49:4d:7b:f4:79: ec:7d:b5:69:8f:ca:ef:00:51:1c:b9:3c:ac:22:d1: 79:3c:d0:d7:6f:ec:31:0e:41:05:98:d4:a7:fa:fc: d2:0a:cb:a6:24:f5:23:42:ce:92:4d:8f:6d:0b:20: 0d:3e:29:da:cd:4c:ff:15:bd:bc:c2:da:99:be:25: 23:aa:64:df:d2:62:36:57:43:aa:1d:37:87:75:d3: 23:5a:97:a3:03:41:52:9a:44:a5:ed:71:3d:39:23: e0:9a:26:63:17:fa:f0:a5:dc:1b:ce:4b:02:81:90: f9:9c:a4:40:7d:db:5d:75:c4:00:9b:f7:3f:e1:a0: c8:47:9c:bf:38:52:b7:61:01:e3:ee:68:53:34:1f: b1:c4:7c:46:4d:e2:5f:f7:9e:b3:2a:3b:f1:71:4a: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:5A:6B:C7:FC:8C:9D:EA:54:77:AF:B6:65:A2:D0:2E:EB:9A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.248.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ac:e2:ce:56:4a:17:80:90:d3:a6:16:e5:17:86:bc:ba:be: 88:d3:fa:90:19:d3:d5:80:21:21:ba:2c:31:ee:00:a5:c5:17: 6c:92:f1:e8:5d:27:4e:13:f7:12:57:50:52:ce:52:f9:9e:cf: 6a:31:8c:06:c6:22:20:bb:df:f6:24:4e:ce:11:95:91:8a:2e: 75:d4:f3:3b:70:ae:2f:13:1b:95:cb:f8:9f:ef:b5:57:b2:86: 26:1e:cc:02:86:a1:56:e5:31:f4:20:d4:51:a0:ca:4d:83:a7: 2c:06:18:7b:be:2a:cc:6b:ef:0e:a2:b8:1d:89:4c:84:59:b4: d7:2d:5a:c8:e1:19:49:d9:56:62:cc:e6:d9:08:75:ae:77:45: 6d:d5:92:83:c7:bc:23:7a:f4:44:a4:90:66:0b:06:e8:e2:bb: a6:4b:9f:1c:eb:8e:11:55:85:68:1d:71:85:92:b6:e4:f2:79: c1:d7:cd:b2:c2:b5:6d:a4:5a:1d:6b:a1:9f:e3:f9:ac:db:a0: 3a:02:ed:0b:83:5f:a2:eb:3c:8d:8a:21:48:9a:32:16:54:fe: a5:ec:03:92:c8:e1:43:38:f3:91:34:a6:77:6b:ce:c9:62:02: 60:53:69:e7:ba:6c:89:04:33:c9:af:f9:9f:87:b2:a6:ea:be: 94:d9:e0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2d5oyeCZrwIshGA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNDIxMjgwMVoXDTI2MDcyMzIxMjgwMVowLzEtMCsGA1UEAxMk YjFjYzg1NDEtODUwOC00ZGI5LWFmZGItYzM1YWQ3ODIwNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQKpKdjo4eAD7wP76FNoahh1kMPTLbZu2Et+ uGY4Pz44evKUb8/TlA3HRFvpF/JsoW09SKoKWpcOUtbz/yyKNHSZNmc6YrCrxkKd qzugasLqzgtq2dD2fxIaQ4Z/b1Tehc4oSU179HnsfbVpj8rvAFEcuTysItF5PNDX b+wxDkEFmNSn+vzSCsumJPUjQs6STY9tCyANPinazUz/Fb28wtqZviUjqmTf0mI2 V0OqHTeHddMjWpejA0FSmkSl7XE9OSPgmiZjF/rwpdwbzksCgZD5nKRAfdtddcQA m/c/4aDIR5y/OFK3YQHj7mhTNB+xxHxGTeJf956zKjvxcUoZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+/WmvH/Iyd6lR3r7ZlotAu65pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGRjNWU0MDQtZDQ1Ny0z MjdlLWFjYzAtN2Q5ODgyNTFiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJviAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEus4s5WSheAkNOmFuUXhry6vojT+pAZ09WAISG6LDHuAKXFF2yS8ehd J04T9xJXUFLOUvmez2oxjAbGIiC73/YkTs4RlZGKLnXU8ztwri8TG5XL+J/vtVey hiYezAKGoVblMfQg1FGgyk2DpywGGHu+Ksxr7w6iuB2JTIRZtNctWsjhGUnZVmLM 5tkIda53RW3VkoPHvCN69ESkkGYLBujiu6ZLnxzrjhFVhWgdcYWStuTyecHXzbLC tW2kWh1roZ/j+azboDoC7QuDX6LrPI2KIUiaMhZU/qXsA5LI4UM485E0pndrzsli AmBTaee6bIkEM8mv+Z+HsqbqvpTZ4Eg= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:59 2026 by rpki-client