$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa File: c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa (raw, json) Hash identifier: CGhvVucvctJ3desmdIDas7W1Hho/ts+cFV6CX58RpBE= Subject key identifier: C6:D8:3B:2E:55:45:0C:61:E7:25:C5:9B:44:B1:30:77:9C:1C:62:01 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DF90B24998B07BE19B59E7A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa Signing time: Wed 27 May 2026 13:00:16 +0000 ROA not before: Wed 27 May 2026 13:00:16 +0000 ROA not after: Tue 25 Aug 2026 13:00:16 +0000 asID: 13335 IP address blocks: 38.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:0b:24:99:8b:07:be:19:b5:9e:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 27 13:00:16 2026 GMT Not After : Aug 25 13:00:16 2026 GMT Subject: CN=e87b9721-8331-4866-ad0a-731e9e9fe124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:5f:a7:8d:2e:16:07:f7:3c:b8:ba:35:d0: 7c:a8:07:12:85:71:c8:cd:3e:6e:ba:cd:08:bd:87: f9:10:9c:4d:10:74:cd:e1:c3:54:fa:91:6b:30:1e: b4:34:b7:f4:54:f3:27:e1:06:38:f1:31:db:e6:92: 20:41:23:bf:57:22:27:95:3a:6e:30:75:80:e8:02: d6:9d:be:bd:b9:4b:b5:97:e1:77:a0:b0:cf:0d:e2: 93:3b:d5:27:8f:59:dd:29:f2:d6:fa:eb:d1:52:97: 28:21:2b:16:3d:96:56:c8:dc:12:13:5d:9a:3c:dc: 7b:7e:01:de:a5:98:7a:35:69:53:df:04:ac:3f:2c: df:a0:33:84:ae:3f:d2:db:ba:ed:22:57:1b:5a:48: b5:13:43:03:8d:c5:51:69:65:d2:6f:28:3f:7f:9d: bf:b9:25:b2:e1:35:14:94:44:6d:2d:bc:81:10:15: 19:37:50:2a:f2:df:2a:34:09:c3:2f:73:46:d3:96: 09:e9:9b:40:ed:b1:94:ee:c4:48:e0:a5:b8:87:3b: 70:16:2a:75:ea:b4:81:24:1a:36:61:b2:11:a8:8e: 84:fe:e2:65:48:fe:86:b6:a9:db:5e:5c:da:cc:6b: 56:60:cf:e8:fa:ad:0d:83:e8:fc:13:a5:e1:35:c5: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:3B:2E:55:45:0C:61:E7:25:C5:9B:44:B1:30:77:9C:1C:62:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.96.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d3:74:6d:63:01:e3:64:bd:27:87:a3:e8:b5:fb:30:a6:f4: 1e:77:64:91:17:e4:11:34:d9:e1:16:19:80:a7:2c:43:c4:25: 7a:6c:1d:38:62:4b:17:29:43:da:06:59:54:66:61:12:f0:56: 4c:09:cd:6a:11:3d:35:5d:a0:d7:8d:fb:ac:c2:d2:27:9e:94: 1c:83:b5:c5:02:ef:91:27:12:c9:c8:a1:0c:31:96:f7:12:5f: cb:73:fe:19:0d:22:77:7f:99:39:f3:9f:fc:40:4c:36:62:59: 4c:20:6a:3f:7f:d2:09:c5:d5:43:c6:c4:ea:e9:03:dd:b0:e4: 17:bb:63:59:d6:dd:05:77:d6:6d:c3:59:98:93:78:45:b8:2b: 54:18:17:a9:96:c5:e1:0a:b3:de:88:e9:eb:82:4b:1b:ba:57: 4f:e8:2d:a7:6b:e6:43:67:d5:cc:86:d0:75:32:bd:58:3f:66: f2:c3:48:0f:66:d2:b3:37:43:69:26:fc:89:ce:b1:6f:35:8a: d1:f9:f9:87:bd:38:ce:5b:fd:2b:47:7c:f2:89:94:ca:49:5b: 6a:b7:f3:2a:15:fb:27:b3:ff:de:25:17:20:1a:b6:a7:5c:d8: c4:72:4f:2f:fc:e4:fa:b3:7b:cc:46:ce:f1:25:3b:71:22:b7: 71:e4:64:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE35CySZiwe+GbWeegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUyNzEzMDAxNloXDTI2MDgyNTEzMDAxNlowLzEtMCsGA1UEAxMk ZTg3Yjk3MjEtODMzMS00ODY2LWFkMGEtNzMxZTllOWZlMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma1fp40uFgf3PLi6NdB8qAcShXHIzT5uus0I vYf5EJxNEHTN4cNU+pFrMB60NLf0VPMn4QY48THb5pIgQSO/VyInlTpuMHWA6ALW nb69uUu1l+F3oLDPDeKTO9Unj1ndKfLW+uvRUpcoISsWPZZWyNwSE12aPNx7fgHe pZh6NWlT3wSsPyzfoDOErj/S27rtIlcbWki1E0MDjcVRaWXSbyg/f52/uSWy4TUU lERtLbyBEBUZN1Aq8t8qNAnDL3NG05YJ6ZtA7bGU7sRI4KW4hztwFip16rSBJBo2 YbIRqI6E/uJlSP6GtqnbXlzazGtWYM/o+q0Ng+j8E6XhNcXh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbYOy5VRQxh5yXFm0SxMHecHGIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzVjZGRhMWEtNzNhMC0z ZWI3LWI4N2ItZTg5NzgwZWFhNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPTdG1jAeNkvSeHo+i1+zCm9B53ZJEX5BE02eEWGYCnLEPEJXpsHThi SxcpQ9oGWVRmYRLwVkwJzWoRPTVdoNeN+6zC0ieelByDtcUC75EnEsnIoQwxlvcS X8tz/hkNInd/mTnzn/xATDZiWUwgaj9/0gnF1UPGxOrpA92w5Be7Y1nW3QV31m3D WZiTeEW4K1QYF6mWxeEKs96I6euCSxu6V0/oLadr5kNn1cyG0HUyvVg/ZvLDSA9m 0rM3Q2km/InOsW81itH5+Ye9OM5b/StHfPKJlMpJW2q38yoV+yez/94lFyAatqdc 2MRyTy/85Pqze8xGzvElO3Eit3HkZAQ= -----END CERTIFICATE-----Generated at Tue Jun 2 21:58:29 2026 by rpki-client