$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b673bde-f474-39f9-a269-0204aa38f182.roa File: 9b673bde-f474-39f9-a269-0204aa38f182.roa (raw, json) Hash identifier: gv+wuu0eYA+leNs8b/jYsbFGPdueB1NGUsZQDXxZlh8= Subject key identifier: 0A:7E:1F:91:FD:D8:D6:0E:25:2D:E0:57:1A:48:D0:CE:FB:31:26:8E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA8AA0570879F0CD8C43CE480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b673bde-f474-39f9-a269-0204aa38f182.roa Signing time: Tue 28 Apr 2026 17:59:57 +0000 ROA not before: Tue 28 Apr 2026 17:59:57 +0000 ROA not after: Mon 27 Jul 2026 17:59:57 +0000 asID: 16276 IP address blocks: 38.199.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:aa:05:70:87:9f:0c:d8:c4:3c:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 28 17:59:57 2026 GMT Not After : Jul 27 17:59:57 2026 GMT Subject: CN=9ad3ea23-d3b2-4466-bc9c-2c7aabba2e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:b1:6d:87:f3:f2:92:6e:37:07:48:41:7b: 4e:d9:1f:16:60:99:fa:ea:95:a5:65:6f:5a:1d:42: 7f:4d:d0:81:41:f1:70:2a:96:99:a7:e3:fc:b0:48: a0:ba:97:21:49:21:bd:6c:24:81:28:d6:16:cc:27: 57:6c:d1:33:0a:ac:b3:bb:10:e1:08:bd:7e:96:8b: 5e:63:07:b5:cf:1e:ab:e6:12:c2:ae:02:68:01:3b: ef:0f:3f:41:b6:c5:4b:dc:2f:9a:7b:71:12:fb:59: ef:42:c6:4f:22:0d:0d:05:bf:a1:1d:75:96:2b:9a: 52:5a:af:c0:01:44:7c:ee:b7:8c:76:2b:f5:12:56: 6e:48:74:87:16:b2:cb:a1:8f:be:77:b7:b2:87:a6: f9:83:89:dc:5b:ce:9a:72:c7:a7:85:30:b3:08:b8: f9:90:2f:b4:9d:86:e6:56:00:86:6e:89:4d:77:68: f6:95:5f:c2:18:05:fa:af:c0:ec:da:43:e5:c0:70: 64:e9:5f:84:72:3a:45:38:c1:98:00:d5:92:2b:31: 64:8e:e0:b0:f6:72:d2:b4:ab:f2:d2:c2:92:5d:40: e3:e7:88:2f:c6:a2:90:f5:64:bf:69:ed:15:fa:d1: f7:96:6d:45:fa:8a:91:5b:c1:e7:50:84:9d:73:0d: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7E:1F:91:FD:D8:D6:0E:25:2D:E0:57:1A:48:D0:CE:FB:31:26:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b673bde-f474-39f9-a269-0204aa38f182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:66:27:ed:a6:1b:9c:9a:c4:85:bb:fd:12:80:59:94:3d:1b: 41:6b:c1:50:13:2b:11:00:a5:ad:3a:5f:1f:f0:b9:c5:08:51: f6:04:67:2e:6a:28:41:b7:ff:f4:3f:9f:35:4b:d2:5d:f2:68: f3:5a:ec:a1:5e:50:07:66:b3:f6:d2:ff:c5:a4:9d:9e:9f:c1: ec:eb:94:0c:e0:47:ec:11:28:dc:f9:6f:ae:27:0f:d5:b1:7f: 04:5f:27:f0:58:10:34:67:5f:b1:79:42:81:0f:c9:7f:75:02: 68:85:ce:be:e7:d6:d5:05:da:76:ef:c5:2e:95:c0:e0:c9:f9: da:89:15:06:09:14:c3:6d:c8:e4:8c:27:9d:f4:23:86:a0:19: 3d:2d:3c:5d:96:3d:cd:25:cd:64:07:66:a2:f9:86:06:9b:22: 1a:1d:32:ce:81:2e:de:64:71:d2:7e:94:0b:1e:43:fa:91:be: b4:45:80:d0:63:0f:21:a9:fb:cd:49:34:07:b4:ec:b2:51:09: d4:c5:25:ea:f8:86:67:aa:56:f3:5a:4f:2a:5a:8b:bb:1f:53: b5:e3:d1:f5:87:af:c5:49:75:f9:e0:2c:ef:fb:9f:5e:94:5a: d1:3e:8f:53:b5:8b:4e:8b:b7:95:4e:3a:8b:5a:29:dc:da:63: 38:75:57:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oqgVwh58M2MQ85IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyODE3NTk1N1oXDTI2MDcyNzE3NTk1N1owLzEtMCsGA1UEAxMk OWFkM2VhMjMtZDNiMi00NDY2LWJjOWMtMmM3YWFiYmEyZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpuxbYfz8pJuNwdIQXtO2R8WYJn66pWlZW9a HUJ/TdCBQfFwKpaZp+P8sEigupchSSG9bCSBKNYWzCdXbNEzCqyzuxDhCL1+lote Ywe1zx6r5hLCrgJoATvvDz9BtsVL3C+ae3ES+1nvQsZPIg0NBb+hHXWWK5pSWq/A AUR87reMdiv1ElZuSHSHFrLLoY++d7eyh6b5g4ncW86acsenhTCzCLj5kC+0nYbm VgCGbolNd2j2lV/CGAX6r8Ds2kPlwHBk6V+EcjpFOMGYANWSKzFkjuCw9nLStKvy 0sKSXUDj54gvxqKQ9WS/ae0V+tH3lm1F+oqRW8HnUISdcw0hjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp+H5H92NYOJS3gVxpI0M77MSaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWI2NzNiZGUtZjQ3NC0z OWY5LWEyNjktMDIwNGFhMzhmMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdmJ+2mG5yaxIW7/RKAWZQ9G0FrwVATKxEApa06Xx/wucUIUfYEZy5q KEG3//Q/nzVL0l3yaPNa7KFeUAdms/bS/8WknZ6fwezrlAzgR+wRKNz5b64nD9Wx fwRfJ/BYEDRnX7F5QoEPyX91AmiFzr7n1tUF2nbvxS6VwODJ+dqJFQYJFMNtyOSM J530I4agGT0tPF2WPc0lzWQHZqL5hgabIhodMs6BLt5kcdJ+lAseQ/qRvrRFgNBj DyGp+81JNAe07LJRCdTFJer4hmeqVvNaTypai7sfU7Xj0fWHr8VJdfngLO/7n16U WtE+j1O1i06Lt5VOOotaKdzaYzh1V2g= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:13 2026 by rpki-client