$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3949819-377e-3793-a4ba-ca5af4aba49e.roa File: b3949819-377e-3793-a4ba-ca5af4aba49e.roa (raw, json) Hash identifier: B1S3Sd46GekHvSu1UluPXYR52yp0Qr5f3mFSmMSjVZA= Subject key identifier: 2E:86:F7:7C:D6:10:F5:18:17:DD:BC:60:F0:21:45:90:60:21:28:F5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DC4008C7E544C9D5EFD316980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3949819-377e-3793-a4ba-ca5af4aba49e.roa Signing time: Fri 08 May 2026 13:01:07 +0000 ROA not before: Fri 08 May 2026 13:01:07 +0000 ROA not after: Thu 06 Aug 2026 13:01:07 +0000 asID: 11847 IP address blocks: 38.97.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:8c:7e:54:4c:9d:5e:fd:31:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 8 13:01:07 2026 GMT Not After : Aug 6 13:01:07 2026 GMT Subject: CN=b56f2e79-a85f-449f-a518-6e4293807fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:8f:99:87:2a:ca:67:6c:a5:51:7e:47:5b: dd:6a:41:70:5e:a3:88:9c:bb:aa:f4:40:bf:9b:20: c9:82:f3:17:82:46:fa:89:79:5f:f0:42:b0:51:a6: 4c:6f:c0:2c:52:72:54:42:d7:39:a5:ef:f4:20:2e: 92:f8:5d:25:35:50:5e:77:6c:6e:38:35:d9:ab:70: 79:f1:e6:91:e6:1a:45:77:9e:5f:66:70:ed:0d:a4: 7b:ee:08:26:64:f6:3e:c4:a4:46:55:68:46:5b:43: 37:f6:e0:d2:9e:07:5f:47:76:62:a2:8e:77:b8:70: bc:b2:61:e1:9d:08:c9:1d:fd:d3:e7:fe:31:db:59: 96:1e:f4:4d:48:b6:58:f3:d8:01:3e:9e:4a:25:6c: 72:d3:0d:e3:41:77:da:4d:c7:94:2a:d7:4f:30:83: fa:1e:2d:04:01:31:51:69:84:70:df:83:87:da:76: 19:c2:cb:19:4a:a8:59:6e:20:0f:f5:26:85:60:dc: da:19:48:b9:f0:14:51:da:9a:ce:37:11:2a:a6:36: 06:c4:af:15:da:a8:2b:18:53:ec:de:d7:da:f6:93: 4f:99:ae:91:d2:14:26:92:f0:31:cb:35:75:92:72: 08:d2:fd:a3:a1:e9:f3:01:55:2b:20:1f:c0:62:67: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:F7:7C:D6:10:F5:18:17:DD:BC:60:F0:21:45:90:60:21:28:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3949819-377e-3793-a4ba-ca5af4aba49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.97.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9f:d6:f5:e6:7a:c2:53:97:46:8d:c8:5e:7c:77:38:f7:f5: 4c:c6:b8:d7:14:77:90:a5:9c:65:52:c4:0d:7f:ea:56:b1:59: 62:a8:f8:a8:f0:2d:00:77:e2:f4:fe:7e:a8:5e:f9:5a:35:b8: 9f:45:8f:5c:f7:17:29:ab:98:76:4a:29:c1:60:3f:95:1b:b6: c0:d5:a3:bf:5e:48:ab:51:f6:78:82:b0:5d:98:c9:f8:e0:76: bf:73:84:9d:db:26:fa:3f:34:79:68:81:a7:eb:79:3d:31:89: 88:d8:26:6f:8b:9e:26:b2:86:fd:e8:b8:31:6d:92:8f:08:04: d2:93:d2:9e:79:c3:97:d8:5d:79:aa:84:2f:1a:59:a3:46:c6: 20:35:c6:8b:de:e1:1c:e5:ce:53:23:94:94:bb:40:eb:46:1d: 2d:c0:9c:7a:62:7a:83:2f:bd:ce:aa:c3:9e:de:c7:f7:de:cc: 24:98:42:d4:86:7e:00:f8:71:96:2f:bf:9a:f6:c6:d2:a9:d0: 15:5b:a2:da:c8:2f:b8:30:7c:ff:dc:10:4a:bc:59:a1:6d:2c: 21:22:2c:53:89:49:cc:31:f8:42:21:2d:77:03:52:37:72:b2: 0d:46:72:6d:1e:3e:cf:28:be:87:80:90:b1:9c:54:b2:55:eb: cf:ba:0b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAIx+VEydXv0xaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwODEzMDEwN1oXDTI2MDgwNjEzMDEwN1owLzEtMCsGA1UEAxMk YjU2ZjJlNzktYTg1Zi00NDlmLWE1MTgtNmU0MjkzODA3ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0uPmYcqymdspVF+R1vdakFwXqOInLuq9EC/ myDJgvMXgkb6iXlf8EKwUaZMb8AsUnJUQtc5pe/0IC6S+F0lNVBed2xuODXZq3B5 8eaR5hpFd55fZnDtDaR77ggmZPY+xKRGVWhGW0M39uDSngdfR3Zioo53uHC8smHh nQjJHf3T5/4x21mWHvRNSLZY89gBPp5KJWxy0w3jQXfaTceUKtdPMIP6Hi0EATFR aYRw34OH2nYZwssZSqhZbiAP9SaFYNzaGUi58BRR2prONxEqpjYGxK8V2qgrGFPs 3tfa9pNPma6R0hQmkvAxyzV1knII0v2joenzAVUrIB/AYme8SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6G93zWEPUYF928YPAhRZBgISj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjM5NDk4MTktMzc3ZS0z NzkzLWE0YmEtY2E1YWY0YWJhNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJmGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECf1vXmesJTl0aNyF58dzj39UzGuNcUd5ClnGVSxA1/6laxWWKo+Kjw LQB34vT+fqhe+Vo1uJ9Fj1z3FymrmHZKKcFgP5UbtsDVo79eSKtR9niCsF2Yyfjg dr9zhJ3bJvo/NHlogafreT0xiYjYJm+Lniayhv3ouDFtko8IBNKT0p55w5fYXXmq hC8aWaNGxiA1xove4RzlzlMjlJS7QOtGHS3AnHpieoMvvc6qw57ex/fezCSYQtSG fgD4cZYvv5r2xtKp0BVbotrIL7gwfP/cEEq8WaFtLCEiLFOJScwx+EIhLXcDUjdy sg1Gcm0ePs8ovoeAkLGcVLJV68+6CxI= -----END CERTIFICATE-----Generated at Sun May 10 22:25:00 2026 by rpki-client