$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa File: 0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa (raw, json) Hash identifier: dB7RcqW5nPbKSDdG3uvPm8gP98tB22TowzuwUF3iwz4= Subject key identifier: EA:E9:33:8F:DA:ED:F5:FC:AC:DC:7C:DE:B4:BE:4A:DF:F6:51:D7:E2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB988D7D8CA4FB4ADA8394134 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa Signing time: Mon 04 May 2026 19:01:50 +0000 ROA not before: Mon 04 May 2026 19:01:50 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 137182 IP address blocks: 38.45.112.0/22 maxlen: 24 38.45.116.0/22 maxlen: 24 38.57.132.0/22 maxlen: 24 38.92.72.0/21 maxlen: 24 38.99.252.0/22 maxlen: 24 38.107.164.0/22 maxlen: 24 38.135.136.0/21 maxlen: 24 154.46.140.0/22 maxlen: 24 154.57.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b9:88:d7:d8:ca:4f:b4:ad:a8:39:41:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 4 19:01:50 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=f4ae35eb-bf26-4acd-9649-5e23d128eca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:02:7e:76:33:ad:24:61:70:68:3d:a5:d9: bd:31:3e:23:b4:da:c8:fb:2e:3b:5e:c8:c9:58:ba: ef:93:bd:25:d9:11:e3:e7:a9:fd:1d:ca:c6:98:e4: c6:e9:d4:a0:40:15:17:06:7f:89:a7:ba:ea:09:55: 99:89:c2:03:34:56:c8:a8:f9:c2:5c:24:c4:99:b7: e9:17:28:15:2e:af:2e:0a:4f:46:bc:bf:13:86:9d: 52:a6:b4:d4:e2:cb:e7:9f:1c:b9:19:6f:3c:cb:1d: 25:15:ce:6f:5e:d0:af:58:8f:ab:16:79:9b:68:04: 7c:3d:e8:c4:4e:89:9f:f9:bd:1a:a2:c3:0a:f3:89: 1f:12:05:a8:47:52:30:5e:55:60:22:35:cc:da:c3: 35:cd:74:1a:33:85:f6:84:d4:18:33:5c:53:92:31: a3:72:a0:10:5e:c0:a2:53:5a:69:f8:e5:16:37:d3: e7:be:ff:68:ca:7b:8b:d6:c0:22:84:da:9c:f0:85: 19:a6:79:91:dd:6a:9f:02:45:20:15:1e:36:9c:6d: 39:f7:7e:bb:54:57:70:77:2d:e4:8d:10:31:f8:8d: 2d:82:9b:c6:5b:36:40:c2:51:d7:af:d8:10:c5:80: f8:83:b2:f4:0f:a9:b0:70:47:a7:9d:51:ee:3c:08: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:33:8F:DA:ED:F5:FC:AC:DC:7C:DE:B4:BE:4A:DF:F6:51:D7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.112.0/21 38.57.132.0/22 38.92.72.0/21 38.99.252.0/22 38.107.164.0/22 38.135.136.0/21 154.46.140.0/22 154.57.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4b:26:09:40:45:69:5b:d8:78:ac:9a:dc:d5:f1:0e:1d:89: 73:a8:71:9a:b3:6e:73:8b:46:b7:cc:eb:56:30:1a:30:e4:1a: fd:f5:e6:f4:a6:d7:14:da:a6:be:7f:72:70:bb:e7:56:5a:93: 8c:52:25:a4:db:af:04:93:d1:83:96:1f:d6:f7:11:05:45:85: 1a:22:7e:0b:21:fe:fc:47:8d:d2:e3:5f:e8:e8:f0:79:b3:63: 37:46:76:e5:01:b4:e6:17:05:b3:19:80:34:ac:5a:bb:c1:70: da:d7:94:75:b1:2a:c4:21:85:54:56:26:2f:1e:d7:cf:e6:b6: 29:09:ad:83:d4:15:90:fa:54:fe:6b:90:34:fb:93:d6:6f:74: 87:b0:27:8e:a9:f0:16:ef:cf:d1:db:61:95:f1:c9:fc:55:60: 86:3e:49:27:c2:ac:7f:78:11:16:25:22:e1:c6:00:bc:62:f4: 0c:a7:8f:68:af:7e:ad:95:70:0f:09:2b:0f:1c:5f:6a:bf:9a: c9:4c:d4:1d:c3:8c:e2:47:90:9d:87:f2:32:d8:94:10:9a:20: ce:f0:cd:d8:f0:d5:11:a7:bb:54:66:d7:4d:56:b2:53:90:9e: b0:85:00:75:bf:b3:10:51:5a:ea:ff:a4:1a:e8:e7:b2:4b:41: ef:32:cb:67 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE25iNfYyk+0rag5QTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNDE5MDE1MFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjRhZTM1ZWItYmYyNi00YWNkLTk2NDktNWUyM2QxMjhlY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TgCfnYzrSRhcGg9pdm9MT4jtNrI+y47XsjJ WLrvk70l2RHj56n9HcrGmOTG6dSgQBUXBn+Jp7rqCVWZicIDNFbIqPnCXCTEmbfp FygVLq8uCk9GvL8Thp1SprTU4svnnxy5GW88yx0lFc5vXtCvWI+rFnmbaAR8PejE Tomf+b0aosMK84kfEgWoR1IwXlVgIjXM2sM1zXQaM4X2hNQYM1xTkjGjcqAQXsCi U1pp+OUWN9Pnvv9oynuL1sAihNqc8IUZpnmR3WqfAkUgFR42nG059367VFdwdy3k jRAx+I0tgpvGWzZAwlHXr9gQxYD4g7L0D6mwcEennVHuPAhUyQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFOrpM4/a7fX8rNx83rS+St/2UdfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGVjYjliYWYtYmUyNC0z NzMyLWE2YzUtYjc4Y2UyODA5MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDJi1wAwQC JjmEAwQDJlxIAwQCJmP8AwQCJmukAwQDJoeIAwQCmi6MAwQCmjmsMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJVLJglARWlb2HismtzV8Q4diXOocZqzbnOLRrfM61YwGjDkGv315vSm1xTapr5/ cnC751Zak4xSJaTbrwST0YOWH9b3EQVFhRoifgsh/vxHjdLjX+jo8HmzYzdGduUB tOYXBbMZgDSsWrvBcNrXlHWxKsQhhVRWJi8e18/mtikJrYPUFZD6VP5rkDT7k9Zv dIewJ46p8Bbvz9HbYZXxyfxVYIY+SSfCrH94ERYlIuHGALxi9Aynj2ivfq2VcA8J Kw8cX2q/mslM1B3DjOJHkJ2H8jLYlBCaIM7wzdjw1RGnu1Rm101WslOQnrCFAHW/ sxBRWur/pBro57JLQe8yy2c= -----END CERTIFICATE-----Generated at Wed May 13 08:26:49 2026 by rpki-client