$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8314696-7a2d-3ada-a082-00b85e4276af.roa File: a8314696-7a2d-3ada-a082-00b85e4276af.roa (raw, json) Hash identifier: jgc5ainZkNFt9yHZNbKa2pEwwMZFzhlh2JxA8xHD/tI= Subject key identifier: 76:50:6F:4A:01:20:05:26:80:87:80:EB:A0:3F:C1:68:DF:B8:BC:10 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D92B99F9519371C3184F26F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8314696-7a2d-3ada-a082-00b85e4276af.roa Signing time: Mon 20 Apr 2026 21:23:36 +0000 ROA not before: Mon 20 Apr 2026 21:23:36 +0000 ROA not after: Sun 19 Jul 2026 21:23:36 +0000 asID: 0 IP address blocks: 38.246.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:b9:9f:95:19:37:1c:31:84:f2:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 20 21:23:36 2026 GMT Not After : Jul 19 21:23:36 2026 GMT Subject: CN=25bb42dd-3300-4ad8-a6ed-f9751f757169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:67:03:de:0b:a2:2f:e3:52:65:38:70:35: c2:2b:4a:59:da:45:72:59:f2:58:28:5c:ce:b9:3b: ef:41:97:94:de:62:ce:b1:f2:be:e5:fb:ce:2b:79: 15:77:0b:48:48:80:4c:0f:f9:c5:13:20:2c:bf:8e: 00:ce:e8:39:d9:fc:dd:7c:87:46:db:8c:f3:16:b6: c5:5e:31:b5:e9:92:72:3c:2a:32:54:c6:0b:44:16: 46:0d:32:d5:61:0c:83:8b:f7:88:35:e0:35:3d:7b: 48:d4:40:48:1e:f5:d2:40:48:5c:c1:30:a9:e9:26: e6:94:2e:e1:a5:5e:2f:a8:02:3b:14:77:47:64:1e: c0:df:f7:26:67:9c:c9:44:ae:37:bd:96:ce:e9:d0: f6:20:cf:42:c8:19:64:31:8e:1b:c9:5e:ee:de:38: 41:6e:e9:84:11:0d:5d:ef:21:b0:82:9e:07:57:dc: 99:18:6b:a7:fe:11:08:39:c3:8b:92:f3:f5:44:36: cd:3a:b6:f2:aa:ed:64:eb:d1:81:71:8f:42:ce:00: 93:35:a3:a1:cf:49:ac:ff:69:b8:45:64:e0:10:36: 32:7a:82:9d:2c:84:76:13:0f:d6:79:71:ca:05:5f: c9:d9:97:57:d0:af:00:69:ae:98:1c:40:df:27:74: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:50:6F:4A:01:20:05:26:80:87:80:EB:A0:3F:C1:68:DF:B8:BC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8314696-7a2d-3ada-a082-00b85e4276af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:de:b4:40:fe:1f:16:ee:c8:93:73:27:cf:98:5c:45:b6:e1: 01:1b:2b:86:93:f9:9b:82:01:d4:56:6b:4c:5b:be:1b:01:c9: 56:26:cf:c1:b1:f0:a0:e3:26:eb:fd:33:ef:07:1e:04:c0:2b: 04:63:b8:8f:e2:16:dd:07:df:e1:37:d4:48:e2:b2:36:dc:3f: da:5a:77:95:2e:aa:a7:be:a4:01:20:b0:5c:f4:1a:12:40:f3: ec:43:41:25:c1:5b:5a:8f:7a:8e:f9:87:ce:4e:f4:d0:e9:7c: f0:55:46:be:e9:5c:14:da:e3:47:a7:56:ba:c3:1e:d9:fe:aa: db:4d:dc:b1:e8:65:8e:16:91:4c:ba:4e:68:78:bf:2e:70:a9: ca:13:31:96:aa:26:c6:29:19:f3:b0:38:49:71:ad:1e:0e:6d: 39:ff:76:03:f1:33:f7:1f:08:05:ba:a7:d0:42:50:4a:dc:f0: 0e:a6:88:98:1d:1b:c2:eb:b2:fa:9c:f6:6e:83:3d:fa:db:36: 69:5f:32:37:88:6e:6b:5b:8c:35:76:01:d3:3f:23:c4:bc:d5: e9:6f:a2:47:10:2d:91:8a:4f:76:8a:63:f9:b0:fc:af:01:a6: 34:62:fd:94:73:a1:9f:b6:d7:ef:43:90:85:75:4c:1a:e9:6b: 5c:e9:a0:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2SuZ+VGTccMYTybwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMDIxMjMzNloXDTI2MDcxOTIxMjMzNlowLzEtMCsGA1UEAxMk MjViYjQyZGQtMzMwMC00YWQ4LWE2ZWQtZjk3NTFmNzU3MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ5nA94Loi/jUmU4cDXCK0pZ2kVyWfJYKFzO uTvvQZeU3mLOsfK+5fvOK3kVdwtISIBMD/nFEyAsv44Azug52fzdfIdG24zzFrbF XjG16ZJyPCoyVMYLRBZGDTLVYQyDi/eINeA1PXtI1EBIHvXSQEhcwTCp6SbmlC7h pV4vqAI7FHdHZB7A3/cmZ5zJRK43vZbO6dD2IM9CyBlkMY4byV7u3jhBbumEEQ1d 7yGwgp4HV9yZGGun/hEIOcOLkvP1RDbNOrbyqu1k69GBcY9CzgCTNaOhz0ms/2m4 RWTgEDYyeoKdLIR2Ew/WeXHKBV/J2ZdX0K8Aaa6YHEDfJ3RWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZQb0oBIAUmgIeA66A/wWjfuLwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTgzMTQ2OTYtN2EyZC0z YWRhLWEwODItMDBiODVlNDI3NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJvZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDetED+HxbuyJNzJ8+YXEW24QEbK4aT+ZuCAdRWa0xbvhsByVYmz8Gx 8KDjJuv9M+8HHgTAKwRjuI/iFt0H3+E31EjisjbcP9pad5Uuqqe+pAEgsFz0GhJA 8+xDQSXBW1qPeo75h85O9NDpfPBVRr7pXBTa40enVrrDHtn+qttN3LHoZY4WkUy6 Tmh4vy5wqcoTMZaqJsYpGfOwOElxrR4ObTn/dgPxM/cfCAW6p9BCUErc8A6miJgd G8Lrsvqc9m6DPfrbNmlfMjeIbmtbjDV2AdM/I8S81elvokcQLZGKT3aKY/mw/K8B pjRi/ZRzoZ+21+9DkIV1TBrpa1zpoK4= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:41 2026 by rpki-client