$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa File: d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa (raw, json) Hash identifier: 2iVXiHv/aVM4U72VCLremYzCr7WGRb3pDsh9O41C/GM= Subject key identifier: 5B:11:32:D1:4B:4A:AC:0B:F3:61:06:88:F6:92:70:FA:CF:F7:B6:DB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5234FC41BC1C843750E7EE00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa Signing time: Sat 28 Mar 2026 18:44:37 +0000 ROA not before: Sat 28 Mar 2026 18:44:37 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 395657 IP address blocks: 38.45.128.0/22 maxlen: 24 38.46.242.0/23 maxlen: 24 38.74.70.0/23 maxlen: 24 38.75.250.0/24 maxlen: 24 38.81.124.0/23 maxlen: 24 38.94.98.0/24 maxlen: 24 38.103.138.0/24 maxlen: 24 38.109.213.0/24 maxlen: 24 38.127.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:fc:41:bc:1c:84:37:50:e7:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 28 18:44:37 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=d1087c3c-588c-4fb8-b932-bb7c2d8b68a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:6b:1b:a8:fc:e9:7f:0f:2f:69:77:b6:8c: b3:a4:92:76:bb:e2:87:89:0d:b3:ac:bd:34:e2:3b: ef:36:98:31:96:44:39:74:1a:3d:28:b3:bf:1c:0c: 5d:fd:b1:44:40:bf:86:46:b6:61:ab:d5:aa:17:72: f1:88:20:b8:82:10:39:4f:1a:f3:af:59:ae:fc:9c: b1:0a:ed:98:c9:84:28:b5:1c:a9:2a:e3:b9:b1:51: e2:d2:25:23:f8:92:84:92:f3:25:7e:7d:c4:8f:54: 4d:9c:36:65:9e:9c:fd:d2:ed:72:52:4c:c1:91:01: 6e:74:7e:0b:7e:ac:81:38:fa:75:23:25:54:47:bf: e4:52:6f:66:89:3b:a1:b3:e4:4d:8b:d9:88:5d:4e: ad:f3:f8:29:07:60:ab:13:bb:59:ef:19:cb:52:b9: 64:7a:31:b6:b4:b4:44:1c:6a:34:09:d6:9d:d2:7e: cb:70:f4:2e:ab:03:61:fe:ee:4b:5e:31:a2:22:33: e4:55:99:e0:6d:16:a8:87:49:0a:52:b4:81:57:ae: d2:61:cf:7e:6c:f2:a1:b5:46:ca:16:63:75:1a:5d: da:d8:43:e6:22:84:8f:98:e8:83:e8:5c:63:6f:c9: 03:ea:b0:46:05:4e:28:86:12:42:8b:58:a1:61:65: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:11:32:D1:4B:4A:AC:0B:F3:61:06:88:F6:92:70:FA:CF:F7:B6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.128.0/22 38.46.242.0/23 38.74.70.0/23 38.75.250.0/24 38.81.124.0/23 38.94.98.0/24 38.103.138.0/24 38.109.213.0/24 38.127.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:45:7e:ed:47:3c:b6:16:75:4a:3c:2e:1c:d2:8e:5c:ce:c0: b2:52:71:71:74:21:a0:d3:87:31:11:39:7e:6d:9e:5b:d5:06: 0c:63:86:3a:04:e8:58:64:c3:83:3d:33:4b:4a:04:fc:36:eb: 3d:e8:44:f3:98:8f:01:7f:24:b6:14:6f:c1:4a:4c:8b:6c:57: 48:17:98:c7:d2:df:09:4b:19:e9:4e:8c:7b:eb:6c:bd:3b:1d: 0b:bd:83:a1:02:43:74:0c:6f:4e:9c:36:4a:8d:25:40:3f:ef: b1:ba:59:e0:f3:e2:5f:b6:fa:b0:1a:40:4e:f9:e7:68:01:7f: b1:39:4e:c9:e5:fd:16:ea:84:36:96:49:46:60:ac:61:27:a0: de:82:b1:68:0c:1e:5d:86:b6:d6:8f:38:a0:07:6c:bb:71:14: 23:8e:d7:bb:50:05:08:a5:43:8d:7b:8b:02:c9:b7:c4:f1:da: b1:f1:a6:93:42:34:ad:d6:c0:52:89:f7:12:c6:c6:4f:21:72: 05:6d:5d:83:71:5c:a6:d9:76:dc:cb:b0:ff:81:26:30:ca:1a: c8:e3:e5:12:79:de:68:fb:a4:29:cb:04:2d:d0:f2:24:d8:ac: fa:5a:ad:15:11:62:ac:cd:76:15:97:8e:b3:ff:73:47:2b:bd: 49:0f:d4:54 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE1SNPxBvByEN1Dn7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyODE4NDQzN1oXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDEwODdjM2MtNTg4Yy00ZmI4LWI5MzItYmI3YzJkOGI2OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVFrG6j86X8PL2l3toyzpJJ2u+KHiQ2zrL00 4jvvNpgxlkQ5dBo9KLO/HAxd/bFEQL+GRrZhq9WqF3LxiCC4ghA5Txrzr1mu/Jyx Cu2YyYQotRypKuO5sVHi0iUj+JKEkvMlfn3Ej1RNnDZlnpz90u1yUkzBkQFudH4L fqyBOPp1IyVUR7/kUm9miTuhs+RNi9mIXU6t8/gpB2CrE7tZ7xnLUrlkejG2tLRE HGo0Cdad0n7LcPQuqwNh/u5LXjGiIjPkVZngbRaoh0kKUrSBV67SYc9+bPKhtUbK FmN1Gl3a2EPmIoSPmOiD6Fxjb8kD6rBGBU4ohhJCi1ihYWXU+QIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFFsRMtFLSqwL82EGiPaScPrP97bbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDg1ZmMwZTctZGUxOC0z ZTMyLWIxZTItZjU3OTViZWNmMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCJi2AAwQB Ji7yAwQBJkpGAwQAJkv6AwQBJlF8AwQAJl5iAwQAJmeKAwQAJm3VAwQAJn9eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlFfu1HPLYWdUo8LhzSjlzOwLJScXF0IaDThzEROX5tnlvVBgxjhjoE 6Fhkw4M9M0tKBPw26z3oRPOYjwF/JLYUb8FKTItsV0gXmMfS3wlLGelOjHvrbL07 HQu9g6ECQ3QMb06cNkqNJUA/77G6WeDz4l+2+rAaQE7552gBf7E5Tsnl/RbqhDaW SUZgrGEnoN6CsWgMHl2GttaPOKAHbLtxFCOO17tQBQilQ417iwLJt8Tx2rHxppNC NK3WwFKJ9xLGxk8hcgVtXYNxXKbZdtzLsP+BJjDKGsjj5RJ53mj7pCnLBC3Q8iTY rPparRURYqzNdhWXjrP/c0crvUkP1FQ= -----END CERTIFICATE-----Generated at Mon Apr 13 14:37:37 2026 by rpki-client