$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96d52d1d-4f63-3851-a873-be9716ea64ca.roa File: 96d52d1d-4f63-3851-a873-be9716ea64ca.roa (raw, json) Hash identifier: hpNDtrxtUX2BTp/nq31f8+Q+kxCRBIhJZwfg3ObstfA= Subject key identifier: 7C:CC:12:0F:4C:5D:E8:C6:67:E7:80:50:53:BB:65:ED:CF:EF:05:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D91C00E70DE8D8B0750DB5900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96d52d1d-4f63-3851-a873-be9716ea64ca.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 0 IP address blocks: 38.45.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0e:70:de:8d:8b:07:50:db:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=c1aeffe3-4251-44fa-9286-a2b9d5bbac16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:73:30:8d:bc:d5:e8:9c:6d:4d:5d:8f:33:12: 58:a1:c8:19:ef:05:16:dd:02:e8:6e:ad:98:8f:5c: ca:76:dc:96:0f:72:a8:86:43:71:a4:77:a6:5a:15: 64:b3:b1:72:03:ab:33:6c:8e:16:f1:dd:ae:f6:79: cb:7d:cf:6b:b8:29:e3:c5:02:03:11:e4:f1:ea:b8: 9e:dc:e8:93:78:5a:e0:5e:65:06:48:c7:64:7d:f4: 47:e4:0b:23:ce:42:c3:d1:bc:41:3b:43:ed:15:d5: 8b:78:9e:d0:88:34:bb:8a:5c:a1:c6:37:a3:7b:66: 75:a0:b6:84:81:f5:b9:b3:25:a8:3e:d9:38:3e:c6: 40:9f:df:1b:bd:41:5b:bb:f5:06:6d:fe:7f:41:eb: 95:f5:8b:13:98:83:6e:52:84:a0:35:fe:32:ea:e3: 2e:93:20:b8:1e:75:3c:b0:f2:f0:f4:b3:d8:ce:1e: 95:ca:fb:b7:7e:86:ba:05:38:bc:ec:b0:fa:47:a6: 5f:26:86:e5:b8:0e:ca:b4:20:a1:d3:23:d4:5e:b1: 27:3f:6e:d4:d6:14:3d:de:61:91:c8:ef:50:80:9c: 3d:2e:96:82:fe:41:af:0e:a9:68:5f:2f:d6:13:4d: 82:d7:3d:11:a7:93:1c:a4:85:ce:06:0f:e5:e9:ba: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:12:0F:4C:5D:E8:C6:67:E7:80:50:53:BB:65:ED:CF:EF:05:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96d52d1d-4f63-3851-a873-be9716ea64ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4f:3d:72:48:72:14:c5:f2:c7:99:b1:73:eb:55:da:27:31: 03:86:fa:94:4f:95:b8:ac:75:63:16:e5:e0:a8:72:7f:02:e7: 26:97:7a:da:aa:dc:2e:8d:f4:d2:98:a8:20:e6:cd:7b:08:bd: b6:ad:8d:e2:d9:80:36:12:14:98:72:f5:d5:ad:d2:03:d2:03: 1b:18:12:74:a9:31:ca:98:a5:9d:ff:a6:10:22:a0:19:e2:0e: e8:6f:4b:3d:2b:16:62:f4:87:0d:b4:f5:57:58:43:e9:8d:4b: 31:50:4a:0b:bc:17:e7:a7:7f:4d:6f:4f:70:7a:0d:5d:9f:48: 8d:48:be:a2:fc:93:5d:e5:d6:b2:56:3f:37:21:5e:02:88:fd: e2:f6:35:22:81:5d:0e:ce:86:33:1d:92:fc:5a:96:a9:a8:a1: a9:10:13:7e:f0:d3:85:ad:6d:0a:64:44:27:3d:a9:f5:4c:9b: 2d:d1:7b:55:95:59:e3:ec:72:41:00:02:d8:b9:98:47:4f:43: e9:84:2b:7d:05:01:81:ad:5f:68:31:47:ca:d9:32:64:1a:44: fe:99:dd:5b:7f:79:01:55:94:f3:68:21:fa:fb:35:c0:45:fe: d9:4b:df:cc:54:b1:d5:4e:70:e7:c7:6f:a0:e2:73:43:f3:a3: b0:23:aa:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwA5w3o2LB1DbWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YzFhZWZmZTMtNDI1MS00NGZhLTkyODYtYTJiOWQ1YmJhYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3MwjbzV6JxtTV2PMxJYocgZ7wUW3QLobq2Y j1zKdtyWD3KohkNxpHemWhVks7FyA6szbI4W8d2u9nnLfc9ruCnjxQIDEeTx6rie 3OiTeFrgXmUGSMdkffRH5AsjzkLD0bxBO0PtFdWLeJ7QiDS7ilyhxjeje2Z1oLaE gfW5syWoPtk4PsZAn98bvUFbu/UGbf5/QeuV9YsTmINuUoSgNf4y6uMukyC4HnU8 sPLw9LPYzh6Vyvu3foa6BTi87LD6R6ZfJobluA7KtCCh0yPUXrEnP27U1hQ93mGR yO9QgJw9LpaC/kGvDqloXy/WE02C1z0Rp5McpIXOBg/l6bqKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzMEg9MXejGZ+eAUFO7Ze3P7wWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTZkNTJkMWQtNGY2My0z ODUxLWE4NzMtYmU5NzE2ZWE2NGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJi1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJPPXJIchTF8seZsXPrVdonMQOG+pRPlbisdWMW5eCocn8C5yaXetqq 3C6N9NKYqCDmzXsIvbatjeLZgDYSFJhy9dWt0gPSAxsYEnSpMcqYpZ3/phAioBni DuhvSz0rFmL0hw209VdYQ+mNSzFQSgu8F+enf01vT3B6DV2fSI1IvqL8k13l1rJW PzchXgKI/eL2NSKBXQ7OhjMdkvxalqmooakQE37w04WtbQpkRCc9qfVMmy3Re1WV WePsckEAAti5mEdPQ+mEK30FAYGtX2gxR8rZMmQaRP6Z3Vt/eQFVlPNoIfr7NcBF /tlL38xUsdVOcOfHb6Dic0Pzo7Ajqiw= -----END CERTIFICATE-----Generated at Tue Apr 28 21:13:35 2026 by rpki-client