$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d73d89fe-0e63-3c88-af7a-0cb49e88b058.roa File: d73d89fe-0e63-3c88-af7a-0cb49e88b058.roa (raw, json) Hash identifier: qTTAn7a4uN2igYZKXIaABX6BlMIDROyYm/+RK2jG8Mo= Subject key identifier: 0A:2E:07:E8:27:7C:CC:8F:B3:F0:1E:90:0E:FC:1A:71:A0:63:9D:36 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D94D2210366DE572AFDD91460 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d73d89fe-0e63-3c88-af7a-0cb49e88b058.roa Signing time: Tue 21 Apr 2026 15:24:36 +0000 ROA not before: Tue 21 Apr 2026 15:24:36 +0000 ROA not after: Mon 20 Jul 2026 15:24:36 +0000 asID: 0 IP address blocks: 38.13.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:d2:21:03:66:de:57:2a:fd:d9:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 15:24:36 2026 GMT Not After : Jul 20 15:24:36 2026 GMT Subject: CN=04d53f5e-a4d2-4511-86cd-131ebab9b0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:89:a9:3f:25:a6:cc:f8:db:43:ab:26:84: 6f:07:1d:01:0c:8d:7d:fa:9c:ef:12:ae:34:1e:ca: e9:f9:95:4a:e9:b6:a0:87:7c:8a:8e:0a:4d:a5:a6: 94:9d:33:a0:95:57:3c:71:a5:85:4a:0a:18:a0:d4: cb:08:75:85:96:0d:b9:38:9c:17:ec:eb:16:31:67: d2:c1:2c:2b:0f:36:3a:bf:4f:e2:a4:c6:ab:f6:31: 9d:f7:1c:ab:83:ca:e2:d3:7a:85:41:31:5b:f9:9d: cd:75:e6:02:09:e0:c9:8d:49:5c:80:19:03:d5:3b: 66:61:69:18:57:ff:c8:70:4a:0e:2b:11:17:59:19: 35:b6:64:b0:95:41:5e:69:be:e8:4a:e1:92:8f:83: c8:e0:45:42:93:7d:5f:d3:2c:d4:54:8b:09:ff:51: fa:58:be:ae:43:c0:c0:22:55:76:fa:1d:13:7a:9b: 65:cd:fc:bb:d2:69:cd:e1:9e:ad:3f:cd:7f:bb:96: 3f:58:e5:7c:06:bc:e4:8b:05:a2:71:eb:50:22:b2: 74:f6:37:a3:ec:8d:d2:c0:ca:fe:97:db:52:62:ac: 9e:70:e8:2b:eb:b4:62:17:2a:45:84:fd:56:ec:57: 84:30:90:27:de:eb:12:ab:c5:70:c9:1f:34:68:c3: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2E:07:E8:27:7C:CC:8F:B3:F0:1E:90:0E:FC:1A:71:A0:63:9D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d73d89fe-0e63-3c88-af7a-0cb49e88b058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.13.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5d:e9:ca:75:df:42:6a:84:27:bc:27:18:cf:bd:a8:6e:cb: eb:29:72:e2:08:63:45:9d:0d:51:a2:0e:35:06:2c:b7:39:dd: 6c:1d:b4:b2:42:69:9f:cf:64:4b:74:bb:f5:7f:bc:23:1c:4c: 85:23:98:b4:3b:ad:66:86:9f:1c:7b:65:6c:77:c0:dd:56:a6: 38:eb:96:99:5d:4c:67:b1:b5:8c:0c:e0:fd:e4:80:a6:68:ed: 28:24:44:a4:b2:79:cb:e3:ca:be:26:1f:7e:7e:34:a2:55:a5: 7e:19:aa:0e:66:5c:b9:6a:25:7d:fe:77:9f:ab:87:06:f8:54: fb:3b:84:92:47:53:9e:00:37:56:18:54:de:30:f5:23:c3:99: 17:01:8a:ad:b5:f3:eb:ad:13:88:03:fe:4b:a7:e0:7e:5f:bb: a3:cd:6b:2b:1b:c6:f4:a1:98:60:7c:09:bf:af:db:96:b8:a2: cb:25:79:5e:1d:39:ec:20:c5:d1:9b:a4:32:94:57:a6:02:74: af:50:f9:e9:3c:97:d8:0a:18:f2:40:87:b2:fa:db:1e:99:99: b4:84:a3:d1:45:f8:3b:48:f4:ae:78:58:40:8c:3f:94:15:c8: 35:c1:8b:ed:cc:88:03:12:c1:cf:a3:b1:9f:64:e3:82:d5:28: a8:86:3b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2U0iEDZt5XKv3ZFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTE1MjQzNloXDTI2MDcyMDE1MjQzNlowLzEtMCsGA1UEAxMk MDRkNTNmNWUtYTRkMi00NTExLTg2Y2QtMTMxZWJhYjliMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE2JqT8lpsz420OrJoRvBx0BDI19+pzvEq40 Hsrp+ZVK6bagh3yKjgpNpaaUnTOglVc8caWFSgoYoNTLCHWFlg25OJwX7OsWMWfS wSwrDzY6v0/ipMar9jGd9xyrg8ri03qFQTFb+Z3NdeYCCeDJjUlcgBkD1TtmYWkY V//IcEoOKxEXWRk1tmSwlUFeab7oSuGSj4PI4EVCk31f0yzUVIsJ/1H6WL6uQ8DA IlV2+h0Teptlzfy70mnN4Z6tP81/u5Y/WOV8BrzkiwWicetQIrJ09jej7I3SwMr+ l9tSYqyecOgr67RiFypFhP1W7FeEMJAn3usSq8VwyR80aMOTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAouB+gnfMyPs/AekA78GnGgY502MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDczZDg5ZmUtMGU2My0z Yzg4LWFmN2EtMGNiNDllODhiMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJg2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhd6cp130JqhCe8JxjPvahuy+spcuIIY0WdDVGiDjUGLLc53WwdtLJC aZ/PZEt0u/V/vCMcTIUjmLQ7rWaGnxx7ZWx3wN1WpjjrlpldTGextYwM4P3kgKZo 7SgkRKSyecvjyr4mH35+NKJVpX4Zqg5mXLlqJX3+d5+rhwb4VPs7hJJHU54AN1YY VN4w9SPDmRcBiq218+utE4gD/kun4H5fu6PNaysbxvShmGB8Cb+v25a4ossleV4d OewgxdGbpDKUV6YCdK9Q+ek8l9gKGPJAh7L62x6ZmbSEo9FF+DtI9K54WECMP5QV yDXBi+3MiAMSwc+jsZ9k44LVKKiGO3w= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:41 2026 by rpki-client