$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b810b230-75e8-344c-b6cd-4e8123760868.roa File: b810b230-75e8-344c-b6cd-4e8123760868.roa (raw, json) Hash identifier: XsOoOpBN5Z6SuionUZl1K/b/ZyvDUZOOOJUSfL5+gnI= Subject key identifier: 51:E0:EF:53:8C:56:BD:D6:C3:83:40:1C:CD:34:24:EB:93:4C:26:2D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D91C00BE5CE353F6972A63B40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b810b230-75e8-344c-b6cd-4e8123760868.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 272907 IP address blocks: 38.255.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0b:e5:ce:35:3f:69:72:a6:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=7e9ff222-e881-4d26-8e1c-e3af614c3469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:41:9c:d9:12:0a:64:28:43:c0:82:4f:7f:86: c4:a6:46:df:34:cd:ff:c7:f0:a3:8c:d1:89:9e:4f: 1f:ac:5d:fc:44:86:a5:cc:6c:38:05:8c:e6:80:a1: 0e:7d:7b:da:96:51:d0:3f:d5:e5:74:62:f2:76:46: 61:51:72:80:57:19:b8:be:57:21:35:05:70:58:a4: 8e:ee:71:bb:f8:05:a5:24:68:3d:34:d6:74:e4:3f: 65:6b:bc:00:67:21:72:a9:25:14:8a:2f:11:82:d7: 4a:53:20:39:bd:68:49:8c:da:df:d1:31:bf:e5:c0: 09:7f:55:93:99:5a:e3:95:d8:82:e0:ad:e8:eb:0c: d6:58:8f:8b:08:ae:41:a4:f3:1a:3f:ce:33:22:8b: be:9f:5e:42:0b:5d:20:da:ee:2d:1b:7b:60:82:43: af:fd:5c:ad:22:67:1c:7e:92:f9:54:78:c3:24:b0: d3:dc:9c:ed:dd:86:33:f7:ee:53:79:e7:f5:d9:9a: 95:48:50:41:80:26:4a:d4:3c:2c:17:3c:7b:fb:36: f1:22:d0:3c:34:92:48:3f:c6:e1:ca:5f:5c:12:ad: 1e:15:b3:e6:f0:76:31:da:8c:42:59:0b:21:8f:4c: 05:13:7b:0a:a3:ed:d4:da:f0:1b:39:84:c1:68:ec: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E0:EF:53:8C:56:BD:D6:C3:83:40:1C:CD:34:24:EB:93:4C:26:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b810b230-75e8-344c-b6cd-4e8123760868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:59:df:13:c0:e1:c8:c9:b4:96:a6:c6:84:6f:99:a6:fb:f0: e2:e2:23:15:f8:be:18:c3:0c:4f:c0:60:bf:75:b0:ef:48:66: 04:45:6a:42:61:0f:80:d4:97:dd:a4:48:72:47:c9:07:1f:ca: 16:18:7a:27:35:63:11:a1:af:95:4d:43:b7:c3:59:85:f9:55: c1:4b:1f:89:15:a5:9e:db:34:2e:14:74:78:f3:e7:72:00:68: 05:49:d3:51:82:4e:01:a4:c9:73:fa:41:bd:9a:87:60:36:57: b2:7b:67:37:cb:83:69:30:41:d3:3a:93:14:20:22:df:c5:a0: 46:20:98:75:ca:f3:0b:a9:be:d2:80:5f:84:dc:d5:6b:36:b2: 41:ac:b4:e6:b3:f3:bd:37:5d:a4:82:d4:97:b7:a2:25:85:2d: a7:9c:c1:c8:f0:e2:65:05:9d:ca:26:83:5d:9d:08:b4:d2:9b: 4d:53:e2:b1:b6:b9:db:75:98:a2:5f:a0:10:e2:fb:24:f1:48: c5:3c:0b:c4:35:bf:60:33:64:00:6b:10:02:0f:a7:9e:c6:6e: e4:30:8c:bb:1d:dc:9e:30:e7:9d:a7:f9:f1:3e:a5:2b:9f:ef: 5f:6b:a5:b9:d9:85:3b:7d:2b:7e:90:2e:a6:73:af:34:b9:39: 7b:5a:3d:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAvlzjU/aXKmO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk N2U5ZmYyMjItZTg4MS00ZDI2LThlMWMtZTNhZjYxNGMzNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEGc2RIKZChDwIJPf4bEpkbfNM3/x/CjjNGJ nk8frF38RIalzGw4BYzmgKEOfXvallHQP9XldGLydkZhUXKAVxm4vlchNQVwWKSO 7nG7+AWlJGg9NNZ05D9la7wAZyFyqSUUii8RgtdKUyA5vWhJjNrf0TG/5cAJf1WT mVrjldiC4K3o6wzWWI+LCK5BpPMaP84zIou+n15CC10g2u4tG3tggkOv/VytImcc fpL5VHjDJLDT3Jzt3YYz9+5Teef12ZqVSFBBgCZK1DwsFzx7+zbxItA8NJJIP8bh yl9cEq0eFbPm8HYx2oxCWQshj0wFE3sKo+3U2vAbOYTBaOz5vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHg71OMVr3Ww4NAHM00JOuTTCYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjgxMGIyMzAtNzVlOC0z NDRjLWI2Y2QtNGU4MTIzNzYwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtZ3xPA4cjJtJamxoRvmab78OLiIxX4vhjDDE/AYL91sO9IZgRFakJh D4DUl92kSHJHyQcfyhYYeic1YxGhr5VNQ7fDWYX5VcFLH4kVpZ7bNC4UdHjz53IA aAVJ01GCTgGkyXP6Qb2ah2A2V7J7ZzfLg2kwQdM6kxQgIt/FoEYgmHXK8wupvtKA X4Tc1Ws2skGstOaz8703XaSC1Je3oiWFLaecwcjw4mUFncomg12dCLTSm01T4rG2 udt1mKJfoBDi+yTxSMU8C8Q1v2AzZABrEAIPp57GbuQwjLsd3J4w552n+fE+pSuf 719rpbnZhTt9K36QLqZzrzS5OXtaPeY= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:16 2026 by rpki-client