$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa File: 38415cef-c01c-329c-8c56-19ea085fd8f1.roa (raw, json) Hash identifier: de8UEOie5qty1XGs3G9hEwxcxwgbRa/68sx8iXTYFSI= Subject key identifier: 5F:67:20:F4:E9:2F:03:40:32:CB:61:D2:78:92:63:BA:78:63:2A:51 Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d Certificate serial: 010D0C9F4328584DA6B0264E2CA441D599EA1180 Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 203618 IP address blocks: 23.226.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:26:4e:2c:a4:41:d5:99:ea:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=4e1a730c-c23c-4710-9db7-eaea9a926572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:d0:94:76:57:d4:3b:47:b6:21:72:f4:ce: 11:50:56:88:e6:26:c8:e7:69:c5:41:9a:ed:2d:38: 88:0d:c3:59:9d:19:2c:97:95:49:97:52:60:49:da: 96:3a:17:b0:c6:4f:bc:88:aa:a1:37:97:ba:a2:55: 4e:3c:82:13:cf:50:9a:2d:f9:ea:7f:5b:df:fe:a5: 33:45:13:bc:d5:83:d6:48:d9:0f:a9:31:89:63:43: bf:6d:06:b4:88:da:56:4b:5b:a1:0d:c5:ea:42:5b: df:41:b5:69:8e:0a:d4:d1:31:47:45:8e:cf:30:bc: 7f:60:7f:7f:24:f1:f1:7e:a9:7e:d1:df:48:2b:54: 82:d7:5b:ac:92:30:cb:04:cd:d7:ec:2f:9a:e8:45: d0:8e:5a:19:67:68:e1:bb:70:c8:10:51:ec:7a:94: c5:e1:28:be:8b:cc:3f:41:9b:71:99:75:84:be:e8: 2d:82:3e:7e:18:77:3e:4b:73:f8:e4:e2:e3:87:3f: 59:52:ca:f6:ea:00:d6:7f:82:02:d5:91:b9:d5:26: b6:af:d7:cc:f8:3f:01:6b:6f:b1:b0:fc:ca:ed:c5: eb:c5:74:04:13:52:82:fb:d5:7b:63:74:b7:65:39: 86:11:9a:74:58:f0:64:54:68:0b:fb:6f:c1:3c:ff: a4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:20:F4:E9:2F:03:40:32:CB:61:D2:78:92:63:BA:78:63:2A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl X509v3 Authority Key Identifier: keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d0:71:ca:37:e8:42:f9:00:56:74:42:16:57:02:4a:a9:72: 9e:bb:38:a4:02:f2:3b:ba:a1:1e:b2:4f:00:38:02:b1:5d:9e: 81:f5:f1:a9:1d:ba:e8:d5:b3:3d:2f:72:af:13:29:f5:29:1f: 1c:c1:2e:57:0b:67:81:7c:de:4e:55:90:67:84:9c:be:2a:0b: 77:e1:58:9f:fd:cb:26:bb:93:4b:f0:e9:c4:0b:ef:4b:c9:15: 76:a7:02:3a:9c:3b:b7:76:1c:dd:e9:27:cd:0d:0c:71:a5:bc: 98:64:e1:6d:b4:c0:fa:4b:e4:8d:ea:c4:54:67:90:7a:30:e2: 2a:81:dd:40:6e:ca:db:78:57:4e:b3:f2:f2:8f:f8:85:f8:73: 73:62:ae:47:3f:55:6c:4d:43:70:eb:9e:92:1b:d0:4b:2e:0a: 7c:ad:32:b8:ee:ab:48:c3:7e:56:3e:c4:9a:2c:69:05:cb:75: 53:92:5f:09:eb:c3:c1:bd:28:34:fb:30:0d:9d:39:00:7b:9f: 6b:49:e2:6c:63:ea:42:4b:ef:18:58:f4:df:d1:34:7e:29:22: ab:6f:4a:3c:4a:cf:4e:1a:60:68:26:41:d1:3f:f0:dc:0d:ab: e7:94:11:17:e4:7c:37:a8:f2:3d:ce:99:77:40:ba:e5:c9:c2: 71:bb:a5:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCZOLKRB1ZnqEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4YzRlZGEtMWMxNC00NTc1LWFmZmUtOWU0MzY4YmYy MDhkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NGUxYTczMGMtYzIzYy00NzEwLTlkYjctZWFlYTlhOTI2NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9LQlHZX1DtHtiFy9M4RUFaI5ibI52nFQZrt LTiIDcNZnRksl5VJl1JgSdqWOhewxk+8iKqhN5e6olVOPIITz1CaLfnqf1vf/qUz RRO81YPWSNkPqTGJY0O/bQa0iNpWS1uhDcXqQlvfQbVpjgrU0TFHRY7PMLx/YH9/ JPHxfql+0d9IK1SC11uskjDLBM3X7C+a6EXQjloZZ2jhu3DIEFHsepTF4Si+i8w/ QZtxmXWEvugtgj5+GHc+S3P45OLjhz9ZUsr26gDWf4IC1ZG51Sa2r9fM+D8Ba2+x sPzK7cXrxXQEE1KC+9V7Y3S3ZTmGEZp0WPBkVGgL+2/BPP+kWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9nIPTpLwNAMsth0niSY7p4YypRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThj NGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQzNjhiZjIwOGQvMzg0MTVjZWYtYzAxYy0z MjljLThjNTYtMTllYTA4NWZkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4YzRlZGEtMWMxNC00NTc1LWFm ZmUtOWU0MzY4YmYyMDhkLzg1OGM0ZWRhLTFjMTQtNDU3NS1hZmZlLTllNDM2OGJm MjA4ZC5jcmwwHwYDVR0jBBgwFoAUP3hrqMRxoltZYaBCa8SI7i27E4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThjNGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQz NjhiZjIwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+JyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATQcco36EL5AFZ0QhZXAkqpcp67OKQC8ju6oR6yTwA4ArFdnoH18akd uujVsz0vcq8TKfUpHxzBLlcLZ4F83k5VkGeEnL4qC3fhWJ/9yya7k0vw6cQL70vJ FXanAjqcO7d2HN3pJ80NDHGlvJhk4W20wPpL5I3qxFRnkHow4iqB3UBuytt4V06z 8vKP+IX4c3Nirkc/VWxNQ3DrnpIb0EsuCnytMrjuq0jDflY+xJosaQXLdVOSXwnr w8G9KDT7MA2dOQB7n2tJ4mxj6kJL7xhY9N/RNH4pIqtvSjxKz04aYGgmQdE/8NwN q+eUERfkfDeo8j3OmXdAuuXJwnG7pWk= -----END CERTIFICATE-----Generated at Wed May 13 13:50:01 2026 by rpki-client