$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a4fad28-87a2-383c-88e2-836350bb5ae4.roa File: 9a4fad28-87a2-383c-88e2-836350bb5ae4.roa (raw, json) Hash identifier: Sh6h8s8MdUR+dyvStmRKFsWUGbPIWIR+iLyLjgYmtoE= Subject key identifier: 1F:24:2A:4B:41:46:F1:C4:4C:B3:56:61:1F:83:A2:64:71:05:98:51 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D91BFF5ECF71E408366436440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a4fad28-87a2-383c-88e2-836350bb5ae4.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 10099 IP address blocks: 38.69.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:f5:ec:f7:1e:40:83:66:43:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=975ccbfe-645f-499a-8954-6fcf8d16671f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:ff:b2:60:c7:2b:9f:24:2f:7b:22:06:38: 58:6e:02:de:c3:c5:79:e7:9c:1c:88:75:dc:33:61: 72:09:5f:1a:7e:6a:7b:3c:7a:d9:b5:e2:b3:8f:de: e0:cc:38:ab:23:ff:dc:6d:e0:3b:e3:cb:85:29:a2: 52:49:a3:3f:a5:d1:b2:64:4d:bf:08:15:70:0b:9f: 18:aa:53:d2:81:73:a5:ad:26:19:af:d3:f7:42:fb: 9e:1f:aa:ec:d9:08:94:4c:95:26:e9:3d:d9:ad:c3: 2f:84:96:01:51:77:dd:a8:1f:c4:0b:54:19:07:53: 50:67:e3:ab:49:53:34:55:bd:e7:32:08:54:a9:3e: ef:9a:14:e8:9c:5f:9a:87:33:95:28:0b:84:a1:cb: 42:27:ac:f2:a9:23:aa:f3:a3:e4:e7:e3:2e:5e:6d: 1f:ee:ca:f6:01:e5:53:88:a5:f8:45:62:4c:a2:ee: f7:30:46:60:6a:92:5a:c8:65:88:9a:c0:c9:d2:c6: c4:8f:6f:5c:bc:4e:28:f4:63:c5:3e:ea:c1:94:12: d6:ae:71:43:31:7a:ea:11:d4:cf:7a:81:35:e8:df: 92:c7:8b:ba:18:c4:0b:a4:4a:83:de:38:4d:75:94: 89:a1:d6:3e:93:95:d5:21:96:e9:b7:54:8e:eb:6a: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:24:2A:4B:41:46:F1:C4:4C:B3:56:61:1F:83:A2:64:71:05:98:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a4fad28-87a2-383c-88e2-836350bb5ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.69.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:36:de:f9:ac:10:49:2f:40:ae:1e:13:8c:7e:ae:0b:62:cd: 19:45:7f:ab:40:01:ea:00:68:a7:d0:50:8d:88:30:19:b4:51: c7:b7:bb:72:db:98:67:00:df:b1:b1:a5:6d:4b:2f:d2:81:0c: ca:16:5e:f9:4d:49:b8:4c:eb:93:6e:42:c7:e3:1c:ca:e5:2a: 47:2a:29:79:d7:f7:71:d2:a7:54:3c:1b:73:4f:f4:24:ff:a6: 17:44:61:62:1e:7e:fe:4a:c5:86:50:ee:4f:9e:56:79:c6:f7: 92:5f:32:5f:dd:2b:56:1a:ca:dd:7b:b9:d9:5e:00:13:a6:bf: d8:f0:eb:f0:16:50:06:12:0f:68:c7:ab:9e:67:2d:74:40:26: 7b:07:8d:36:e0:34:23:92:c1:98:e8:db:86:76:74:86:a6:f0: 2e:b1:54:43:9e:9c:53:63:ef:86:0a:50:bb:0b:c4:44:f9:9c: 8e:52:f6:ee:26:27:b6:67:ee:5d:ab:21:32:61:bd:24:50:08: ac:5e:67:31:c7:85:0b:3c:d3:55:51:c7:dd:a1:2f:ac:d2:4b: 68:4f:4a:25:23:b5:ba:bc:9f:70:67:8c:0a:d9:a5:03:1c:d1: 1f:d3:e8:4d:ea:eb:95:c2:a1:dd:f4:49:f1:45:12:5c:4b:23: 35:2a:4f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Rv/Xs9x5Ag2ZDZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OTc1Y2NiZmUtNjQ1Zi00OTlhLTg5NTQtNmZjZjhkMTY2NzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+T/smDHK58kL3siBjhYbgLew8V555wciHXc M2FyCV8afmp7PHrZteKzj97gzDirI//cbeA748uFKaJSSaM/pdGyZE2/CBVwC58Y qlPSgXOlrSYZr9P3QvueH6rs2QiUTJUm6T3ZrcMvhJYBUXfdqB/EC1QZB1NQZ+Or SVM0Vb3nMghUqT7vmhTonF+ahzOVKAuEoctCJ6zyqSOq86Pk5+MuXm0f7sr2AeVT iKX4RWJMou73MEZgapJayGWImsDJ0sbEj29cvE4o9GPFPurBlBLWrnFDMXrqEdTP eoE16N+Sx4u6GMQLpEqD3jhNdZSJodY+k5XVIZbpt1SO62rlhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8kKktBRvHETLNWYR+DomRxBZhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWE0ZmFkMjgtODdhMi0z ODNjLTg4ZTItODM2MzUwYmI1YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg23vmsEEkvQK4eE4x+rgtizRlFf6tAAeoAaKfQUI2IMBm0Uce3u3Lb mGcA37GxpW1LL9KBDMoWXvlNSbhM65NuQsfjHMrlKkcqKXnX93HSp1Q8G3NP9CT/ phdEYWIefv5KxYZQ7k+eVnnG95JfMl/dK1Yayt17udleABOmv9jw6/AWUAYSD2jH q55nLXRAJnsHjTbgNCOSwZjo24Z2dIam8C6xVEOenFNj74YKULsLxET5nI5S9u4m J7Zn7l2rITJhvSRQCKxeZzHHhQs801VRx92hL6zSS2hPSiUjtbq8n3BnjArZpQMc 0R/T6E3q65XCod30SfFFElxLIzUqTws= -----END CERTIFICATE-----Generated at Mon Apr 27 22:31:16 2026 by rpki-client