$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1b750ab-a55d-3694-9265-af1b3c50cae5.roa File: a1b750ab-a55d-3694-9265-af1b3c50cae5.roa (raw, json) Hash identifier: Zm7s8RMqXXsqFoP7eGZzw61QV1erQB9zS4BhAxKymhM= Subject key identifier: 3E:13:FB:A2:4D:9F:97:56:BA:86:D8:CB:2C:2B:89:3C:D7:D0:1E:25 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA59C6D996E5547E97B481500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1b750ab-a55d-3694-9265-af1b3c50cae5.roa Signing time: Mon 27 Apr 2026 15:45:08 +0000 ROA not before: Mon 27 Apr 2026 15:45:08 +0000 ROA not after: Sun 26 Jul 2026 15:45:08 +0000 asID: 272962 IP address blocks: 38.7.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:9c:6d:99:6e:55:47:e9:7b:48:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 27 15:45:08 2026 GMT Not After : Jul 26 15:45:08 2026 GMT Subject: CN=a0f94ad8-1a40-4858-9977-c3ba5de8f985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:97:f5:f4:c8:ce:2e:d6:58:b2:eb:41:23: 0f:96:45:0b:56:8a:88:3f:80:ee:e5:8c:b5:e7:58: e3:3f:b1:08:8e:03:3b:4b:c7:10:ce:e9:25:a6:ba: 2d:3a:98:14:e5:7c:ff:26:0b:40:3c:e6:3b:4f:32: f5:8b:5e:fc:58:cd:52:60:d7:22:91:e6:09:88:9f: d9:a5:a4:3f:3d:6b:c2:7f:46:f8:f2:a6:04:f5:16: 52:3b:0c:3f:50:55:71:40:1a:24:6d:7d:24:80:2b: 7d:51:3a:91:cb:29:e1:48:b5:18:fe:4e:4a:b8:a1: c2:6d:70:1e:0f:62:7b:97:bd:4a:cc:27:dd:08:ee: 3b:ea:b8:a1:17:b6:f3:dd:66:d2:b4:b9:83:25:a3: 25:f1:d5:11:a8:3a:d5:07:60:78:bc:56:13:31:33: e3:84:7f:01:d8:96:52:60:37:07:3f:4c:29:67:14: 69:19:0d:6a:5a:0e:98:40:59:17:4b:a1:28:aa:2a: 66:6f:79:5c:5c:41:91:dc:7b:d9:07:44:7c:7c:60: cb:77:9e:e8:66:25:51:cc:e4:7b:ce:68:60:80:b7: cd:ff:11:e2:92:38:76:8d:e3:e8:a9:38:ca:50:1f: 70:69:b1:87:38:a9:b5:5e:ce:78:5c:84:9c:61:d9: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:FB:A2:4D:9F:97:56:BA:86:D8:CB:2C:2B:89:3C:D7:D0:1E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1b750ab-a55d-3694-9265-af1b3c50cae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.7.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e1:5a:ac:f9:03:a1:12:6e:68:1e:a8:8b:73:4d:19:bb:50: a1:43:f4:ae:f5:d9:ef:cb:e7:bd:12:48:e5:69:f8:56:d4:39: 08:18:06:fe:c4:89:65:df:df:a0:1e:7a:3b:1a:b7:db:8f:35: ba:b3:cd:51:fd:66:4d:4a:27:a5:26:7c:8a:b6:f6:10:23:56: 94:a3:79:68:74:e8:f4:9a:8c:41:c7:b5:ca:91:74:a4:8a:d7: 57:52:32:9d:bc:03:48:e3:cb:0b:44:21:ec:e7:6d:e4:fe:74: ff:a0:f6:c0:58:22:b2:bd:cd:d8:41:ea:b1:f0:38:bc:75:08: 09:11:a2:a1:96:ec:38:62:64:ba:6a:af:cc:5b:a6:6d:49:1e: b0:c4:03:b9:cc:32:45:9d:a2:ec:fe:e7:b6:ea:d1:9e:37:68: fd:1c:c5:1b:fe:9d:91:11:30:80:89:a6:43:f8:fd:53:1c:35: 96:be:0d:72:b2:d5:58:9a:0a:51:9c:72:88:76:2b:39:fe:0f: 03:76:e9:31:56:03:8f:89:e3:44:96:5e:5e:ea:2b:58:21:b4: 7c:cb:15:77:0c:bf:97:e6:f4:c7:3e:b5:ec:42:76:8d:38:75: e5:bb:58:c0:5d:86:bb:b4:45:d1:42:ca:ca:9e:50:ce:f5:18: 54:9e:2e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lnG2ZblVH6XtIFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNzE1NDUwOFoXDTI2MDcyNjE1NDUwOFowLzEtMCsGA1UEAxMk YTBmOTRhZDgtMWE0MC00ODU4LTk5NzctYzNiYTVkZThmOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilqX9fTIzi7WWLLrQSMPlkULVoqIP4Du5Yy1 51jjP7EIjgM7S8cQzuklprotOpgU5Xz/JgtAPOY7TzL1i178WM1SYNcikeYJiJ/Z paQ/PWvCf0b48qYE9RZSOww/UFVxQBokbX0kgCt9UTqRyynhSLUY/k5KuKHCbXAe D2J7l71KzCfdCO476rihF7bz3WbStLmDJaMl8dURqDrVB2B4vFYTMTPjhH8B2JZS YDcHP0wpZxRpGQ1qWg6YQFkXS6Eoqipmb3lcXEGR3HvZB0R8fGDLd57oZiVRzOR7 zmhggLfN/xHikjh2jePoqTjKUB9wabGHOKm1Xs54XIScYdmOPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4T+6JNn5dWuobYyywriTzX0B4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTFiNzUwYWItYTU1ZC0z Njk0LTkyNjUtYWYxYjNjNTBjYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgdqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3hWqz5A6ESbmgeqItzTRm7UKFD9K712e/L570SSOVp+FbUOQgYBv7E iWXf36Aeejsat9uPNbqzzVH9Zk1KJ6UmfIq29hAjVpSjeWh06PSajEHHtcqRdKSK 11dSMp28A0jjywtEIeznbeT+dP+g9sBYIrK9zdhB6rHwOLx1CAkRoqGW7DhiZLpq r8xbpm1JHrDEA7nMMkWdouz+57bq0Z43aP0cxRv+nZERMICJpkP4/VMcNZa+DXKy 1ViaClGccoh2Kzn+DwN26TFWA4+J40SWXl7qK1ghtHzLFXcMv5fm9Mc+texCdo04 deW7WMBdhru0RdFCysqeUM71GFSeLow= -----END CERTIFICATE-----Generated at Tue Apr 28 18:38:44 2026 by rpki-client