$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa File: 35f8cbc4-68be-3123-b822-aef3426ff483.roa (raw, json) Hash identifier: ywe2RCrAnlkC7ZSDjU3lIUDmKWDSTnz0lPeZqnZIxw8= Subject key identifier: 0A:91:55:68:2F:AD:DE:BA:0A:7A:57:D5:66:9C:24:57:52:A9:59:6A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA6B033E21E8E0E3FA07C9220 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 265693 IP address blocks: 38.253.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:33:e2:1e:8e:0e:3f:a0:7c:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=2c62cded-2771-40c6-b8f6-484554d8e7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:3b:98:ae:19:67:40:47:fe:54:03:b6:b6: de:43:9b:87:77:ae:a7:7e:9b:ef:f1:70:25:32:33: 6e:09:e2:3d:b8:59:5d:72:a2:54:09:e7:31:62:f2: 01:c4:ad:87:da:76:47:1b:43:f9:0b:68:2d:72:99: 5a:9e:90:d4:37:1c:58:f6:6c:96:f6:28:36:22:9e: 6f:ee:df:80:ed:67:ad:06:32:c4:09:21:cc:8e:77: 96:86:f1:40:51:cd:49:5a:b3:b7:2f:0e:6a:18:ba: 28:50:bd:a5:88:3f:26:61:a6:85:a8:7c:38:bd:58: 3a:7a:fe:94:b8:1b:05:b7:23:87:4c:c0:b0:06:6d: 35:70:cf:68:2d:ec:cc:96:cd:5a:fa:99:31:0a:b2: 77:eb:c1:71:f1:20:1b:5a:7d:44:53:e7:95:c2:10: 1f:2a:35:63:11:4c:2e:55:62:1b:ce:c5:24:d0:cb: ce:48:14:56:f8:0b:52:cd:31:9d:2e:8c:d9:8c:4c: 1d:d3:53:4a:8e:66:a6:b8:81:ca:b8:d3:8a:dc:93: a3:4f:fe:28:38:17:8c:ce:83:8d:38:a2:9f:bd:7f: 62:c3:ad:f3:62:1c:7f:1e:05:c4:22:8a:80:8d:36: 69:92:ff:f5:3d:03:12:ca:5f:5a:0e:eb:06:05:7e: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:55:68:2F:AD:DE:BA:0A:7A:57:D5:66:9C:24:57:52:A9:59:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:12:ff:f4:9e:9a:fd:40:93:1e:8d:66:df:6e:21:53:4d:f4: 7d:6b:e4:1a:84:6e:4a:07:50:41:ac:15:62:8e:b2:c7:f3:0e: 49:76:e9:1f:35:d5:dc:1e:7a:9c:c9:b6:45:d9:69:35:c2:f0: 53:b5:81:91:d2:1a:14:05:de:22:0a:f4:48:b1:5d:89:8b:d0: e4:13:71:21:76:c5:49:5c:0a:98:5f:8b:e8:7d:fa:92:aa:f6: 31:77:23:34:5a:e6:49:78:00:52:72:00:2a:30:e3:23:60:0b: 7f:12:ea:a0:fe:a3:2f:31:e0:79:e8:f0:b0:36:8d:92:70:b7: 2b:a9:88:32:3a:75:7f:0f:da:50:67:db:3a:59:dc:9b:62:a7: cc:6b:5d:8b:c1:89:20:ce:97:d6:ef:7b:e0:72:8a:40:41:f0: 1c:2f:4a:9b:6a:b5:07:1d:14:2e:57:38:7f:fa:a1:c4:f3:33: da:6f:fd:10:cc:8e:48:e8:e9:83:87:2d:44:a0:19:91:52:8f: d4:cb:07:f9:28:cf:2b:53:0e:2f:28:f5:92:d0:74:61:16:34: c4:ed:0b:41:74:0e:eb:aa:21:c7:43:4c:d9:77:0e:d6:0a:75: dd:3e:71:f3:15:dc:c7:a0:e7:cb:99:b5:b6:41:d4:8f:1e:90: 56:3c:76:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDPiHo4OP6B8kiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MmM2MmNkZWQtMjc3MS00MGM2LWI4ZjYtNDg0NTU0ZDhlN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2c7mK4ZZ0BH/lQDtrbeQ5uHd66nfpvv8XAl MjNuCeI9uFldcqJUCecxYvIBxK2H2nZHG0P5C2gtcplanpDUNxxY9myW9ig2Ip5v 7t+A7WetBjLECSHMjneWhvFAUc1JWrO3Lw5qGLooUL2liD8mYaaFqHw4vVg6ev6U uBsFtyOHTMCwBm01cM9oLezMls1a+pkxCrJ368Fx8SAbWn1EU+eVwhAfKjVjEUwu VWIbzsUk0MvOSBRW+AtSzTGdLozZjEwd01NKjmamuIHKuNOK3JOjT/4oOBeMzoON OKKfvX9iw63zYhx/HgXEIoqAjTZpkv/1PQMSyl9aDusGBX6KzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqRVWgvrd66CnpX1WacJFdSqVlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzVmOGNiYzQtNjhiZS0z MTIzLWI4MjItYWVmMzQyNmZmNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv1MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsS//Semv1Akx6NZt9uIVNN9H1r5BqEbkoHUEGsFWKOssfzDkl26R81 1dweepzJtkXZaTXC8FO1gZHSGhQF3iIK9EixXYmL0OQTcSF2xUlcCphfi+h9+pKq 9jF3IzRa5kl4AFJyACow4yNgC38S6qD+oy8x4Hno8LA2jZJwtyupiDI6dX8P2lBn 2zpZ3Jtip8xrXYvBiSDOl9bve+ByikBB8BwvSptqtQcdFC5XOH/6ocTzM9pv/RDM jkjo6YOHLUSgGZFSj9TLB/kozytTDi8o9ZLQdGEWNMTtC0F0DuuqIcdDTNl3DtYK dd0+cfMV3Meg58uZtbZB1I8ekFY8dvs= -----END CERTIFICATE-----Generated at Wed May 13 10:48:44 2026 by rpki-client