$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa File: 38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (raw, json) Hash identifier: pjNmb/UhHSq3w05SflUryCZkwPz7jiYtqPHhOtafRF4= Subject key identifier: 29:01:95:0A:63:F1:29:15:AE:BC:9C:55:6B:5B:BB:11:28:58:9D:B1 Certificate issuer: /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Certificate serial: 010D0C9F4328584DBBA05596975A3ED25A354500 Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 400426 IP address blocks: 128.254.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:55:96:97:5a:3e:d2:5a:35:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=bb3f4abd-8a4f-4b12-bdfb-ed54ad620066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:54:96:19:5d:8c:c0:9f:6c:5e:17:d2:66: 01:1a:87:cb:90:ca:97:fb:03:e1:99:c1:64:f8:a5: 55:62:60:2f:6e:e1:99:b8:79:4c:09:fb:58:58:f5: 3f:79:38:21:16:26:92:9d:17:28:bd:b9:64:fa:12: 3b:75:26:b1:12:11:3f:5f:2a:f1:d8:ed:bc:06:cd: d9:f8:b2:fe:f2:f5:0d:1f:a9:3e:18:57:68:fe:84: 04:7b:f3:82:3a:dc:57:5c:13:28:6a:c3:5f:6a:d6: 34:a8:a7:3b:21:f9:d1:54:97:05:76:c5:27:6b:68: d2:2e:80:92:a2:9f:9b:9a:d2:ac:ed:98:e4:65:85: 9a:e7:05:b1:a7:e2:be:68:b2:b8:9b:58:b9:cc:b0: 45:93:b2:30:2b:9d:fb:44:89:93:79:ea:33:d1:af: c5:28:dd:0d:50:4d:fe:ed:f4:52:9b:9c:68:79:ba: 1d:2f:3e:27:3b:6a:68:00:bf:68:91:1f:a7:0b:5d: c4:e8:1c:9b:69:bc:1d:74:4e:a4:59:43:01:cd:aa: 3c:26:66:28:e7:76:ed:41:7b:24:13:61:f8:6f:a3: ee:61:78:d6:49:18:96:c6:ce:56:c7:52:87:ab:90: 3c:5f:2b:0f:86:bc:78:e0:0c:2e:32:91:d5:53:a1: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:95:0A:63:F1:29:15:AE:BC:9C:55:6B:5B:BB:11:28:58:9D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl X509v3 Authority Key Identifier: keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer sbgp-ipAddrBlock: critical IPv4: 128.254.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7d:7b:85:68:b1:09:7e:10:dc:f4:c3:71:5c:b3:f8:cb:cc: bc:a9:00:66:ea:5c:40:fc:69:a2:a8:c6:dc:06:7a:a9:1d:8b: 7b:c4:43:a9:ea:93:d4:d3:ff:90:45:44:03:56:80:9c:0c:8d: 14:66:70:8a:0d:d2:72:bd:de:1d:32:c3:4d:c5:2a:c9:26:b7: 00:1a:cf:f8:7d:18:39:3c:c0:2c:70:57:d5:72:4e:7b:92:5d: c7:2d:b6:6a:19:7b:80:4d:e5:5e:08:58:8d:65:45:6f:2f:41: 0f:ab:86:33:11:3d:2b:ae:81:87:19:0b:0b:a6:e7:c7:2f:f2: 34:77:d1:d7:97:f1:59:c9:75:d5:06:d5:a9:df:e8:6a:4e:21: 6f:89:a3:44:28:6a:9d:bd:bb:99:aa:1f:46:7e:59:fd:3f:6f: 93:fd:05:ae:06:d3:d6:73:e9:a0:f8:e3:19:45:77:a7:ea:5f: 13:0a:62:80:6d:2b:db:88:f1:1d:5d:6f:59:c8:67:91:af:fc: b3:ee:c4:87:69:50:61:f4:6a:52:bc:41:13:30:f7:a7:37:00: 06:7b:63:b8:85:48:30:17:89:04:57:a2:24:58:18:d6:eb:a2: 11:32:60:56:e1:4f:67:ad:bc:e1:cf:2b:2a:fd:92:ce:c0:27: d7:2f:cb:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFWWl1o+0lo1RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzExYTA0ZGUtZGIyYS00ZTU0LTg2OTMtY2E2YTJjMTA3 YWI0MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YmIzZjRhYmQtOGE0Zi00YjEyLWJkZmItZWQ1NGFkNjIwMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8JUlhldjMCfbF4X0mYBGofLkMqX+wPhmcFk +KVVYmAvbuGZuHlMCftYWPU/eTghFiaSnRcovblk+hI7dSaxEhE/Xyrx2O28Bs3Z +LL+8vUNH6k+GFdo/oQEe/OCOtxXXBMoasNfatY0qKc7IfnRVJcFdsUna2jSLoCS op+bmtKs7ZjkZYWa5wWxp+K+aLK4m1i5zLBFk7IwK537RImTeeoz0a/FKN0NUE3+ 7fRSm5xoebodLz4nO2poAL9okR+nC13E6BybabwddE6kWUMBzao8JmYo53btQXsk E2H4b6PuYXjWSRiWxs5Wx1KHq5A8XysPhrx44AwuMpHVU6FVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkBlQpj8SkVrrycVWtbuxEoWJ2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTFh MDRkZS1kYjJhLTRlNTQtODY5My1jYTZhMmMxMDdhYjQvMzhjYzkwNjMtZmMzNy0z NDljLTk2NzUtM2U4ZjZkYWZjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzExYTA0ZGUtZGIyYS00ZTU0LTg2 OTMtY2E2YTJjMTA3YWI0LzcxMWEwNGRlLWRiMmEtNGU1NC04NjkzLWNhNmEyYzEw N2FiNC5jcmwwHwYDVR0jBBgwFoAUnky2obqwrVzSyH3az5zCeW4LNp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MTFhMDRkZS1kYjJhLTRlNTQtODY5My1jYTZh MmMxMDdhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ9e4VosQl+ENz0w3Fcs/jLzLypAGbqXED8aaKoxtwGeqkdi3vEQ6nq k9TT/5BFRANWgJwMjRRmcIoN0nK93h0yw03FKskmtwAaz/h9GDk8wCxwV9VyTnuS XccttmoZe4BN5V4IWI1lRW8vQQ+rhjMRPSuugYcZCwum58cv8jR30deX8VnJddUG 1anf6GpOIW+Jo0Qoap29u5mqH0Z+Wf0/b5P9Ba4G09Zz6aD44xlFd6fqXxMKYoBt K9uI8R1db1nIZ5Gv/LPuxIdpUGH0alK8QRMw96c3AAZ7Y7iFSDAXiQRXoiRYGNbr ohEyYFbhT2etvOHPKyr9ks7AJ9cvy5E= -----END CERTIFICATE-----Generated at Wed May 13 07:55:09 2026 by rpki-client