$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa File: 5af6404e-b862-3f39-82aa-0122630f1a3a.roa (raw, json) Hash identifier: RvThMwhLFkaTY0vo/nxlRIcGqwLlK3A1cYhQYUxuslk= Subject key identifier: 77:6E:F1:96:09:43:0B:EB:23:57:1B:48:F5:A8:4D:28:E1:02:3A:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DAAE031D1A834665946EF9F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 204731 IP address blocks: 38.126.80.0/20 maxlen: 22 154.62.164.0/22 maxlen: 23 154.62.168.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:31:d1:a8:34:66:59:46:ef:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=4ab732bf-e070-440f-9510-ebbc37a6fc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:b3:dc:8a:0a:bb:34:76:24:29:52:9b:36: 01:8c:3f:bc:ee:75:6b:69:e9:31:b3:88:28:ab:86: 90:96:eb:35:23:fe:68:da:bc:46:b7:e2:3d:42:40: fa:96:c5:43:fc:1a:0c:80:c3:6a:97:09:33:99:f0: 3c:9f:cc:d2:8a:f5:53:9c:5e:ac:60:b7:c8:95:06: ee:84:4d:a0:d5:34:d6:93:4f:02:d6:cb:13:11:c9: 8a:0d:df:9d:1f:b0:bb:04:4c:d7:fc:a7:31:52:93: d9:ef:29:fc:f1:c2:bf:9c:3a:54:bd:4a:b0:7c:b8: 7e:a7:4e:39:10:30:b2:da:f9:e9:0d:de:d6:bc:7b: 8c:c1:9c:8d:f2:4b:36:33:23:8b:96:29:de:15:2f: 59:22:b9:73:70:99:33:8f:40:77:2a:f5:3c:fd:e5: 43:16:be:54:a1:f5:e1:5e:48:3d:1a:0e:17:85:e2: f7:d3:53:5a:4b:dd:28:c2:ce:44:fc:6a:cb:6a:78: 6e:f6:c7:e8:4e:f5:c0:cc:b0:62:7c:ad:f2:91:56: 4d:d5:45:28:e9:d7:1c:93:d1:e1:d9:13:ab:16:66: a0:31:ff:8b:1f:e5:79:a1:8a:e7:c7:83:97:dd:4c: b7:a3:7f:fe:a2:ff:7b:e2:0a:7d:18:7e:e4:af:d8: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:F1:96:09:43:0B:EB:23:57:1B:48:F5:A8:4D:28:E1:02:3A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.126.80.0/20 154.62.164.0-154.62.171.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b7:50:01:75:b6:b9:91:9a:9c:9e:21:40:d6:e4:3e:60:fe: 41:8d:a7:ef:af:a9:10:5a:3e:2c:b6:0a:19:93:ee:44:e7:8b: 9f:69:81:e7:45:87:9b:20:dd:ec:ae:12:ad:cc:0e:85:19:a8: 15:a0:e1:fa:64:4b:c8:95:48:00:97:13:8f:83:e2:17:92:61: 65:e1:bb:cf:e5:f6:fc:d5:71:f2:aa:7c:62:a9:75:20:20:3b: 8c:7c:aa:bd:56:aa:7f:6e:4f:39:7f:20:93:f4:6a:13:6f:f2: 3c:60:d0:61:87:15:08:9c:1d:1d:d1:3d:24:9c:c5:d8:f7:f9: 26:bd:22:3a:9f:5a:13:f0:ef:a4:b2:e5:92:04:21:9c:1f:29: cf:2a:fc:34:cf:82:49:79:f2:72:86:58:6e:db:49:1d:c9:b4: be:3d:2d:9f:1e:ec:29:72:a5:d8:34:64:1b:5e:49:e4:c9:69: b5:78:d0:f8:4b:d7:54:8f:6f:05:29:ef:8b:cc:0b:48:4e:b6: c6:fd:bf:ed:b6:83:49:d9:8b:e3:4b:91:d3:42:69:e5:e2:ec: 87:39:18:e9:64:a0:28:78:39:e9:88:f6:b4:b1:34:9f:ec:78: c7:0e:f6:20:10:d9:d4:25:58:f6:af:21:95:7f:ca:d1:e5:7d: 92:5e:58:fe -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE2q4DHRqDRmWUbvnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NGFiNzMyYmYtZTA3MC00NDBmLTk1MTAtZWJiYzM3YTZmYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO2z3IoKuzR2JClSmzYBjD+87nVraekxs4go q4aQlus1I/5o2rxGt+I9QkD6lsVD/BoMgMNqlwkzmfA8n8zSivVTnF6sYLfIlQbu hE2g1TTWk08C1ssTEcmKDd+dH7C7BEzX/KcxUpPZ7yn88cK/nDpUvUqwfLh+p045 EDCy2vnpDd7WvHuMwZyN8ks2MyOLlineFS9ZIrlzcJkzj0B3KvU8/eVDFr5UofXh Xkg9Gg4XheL301NaS90ows5E/GrLanhu9sfoTvXAzLBifK3ykVZN1UUo6dcck9Hh 2ROrFmagMf+LH+V5oYrnx4OX3Uy3o3/+ov974gp9GH7kr9jxRwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFHdu8ZYJQwvrI1cbSPWoTSjhAjrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFmNjQwNGUtYjg2Mi0z ZjM5LTgyYWEtMDEyMjYzMGYxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEJn5QMAwD BAKaPqQDBAKaPqgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAQbdQAXW2uZGanJ4hQNbkPmD+QY2n76+pEFo+ LLYKGZPuROeLn2mB50WHmyDd7K4SrcwOhRmoFaDh+mRLyJVIAJcTj4PiF5JhZeG7 z+X2/NVx8qp8Yql1ICA7jHyqvVaqf25POX8gk/RqE2/yPGDQYYcVCJwdHdE9JJzF 2Pf5Jr0iOp9aE/DvpLLlkgQhnB8pzyr8NM+CSXnycoZYbttJHcm0vj0tnx7sKXKl 2DRkG15J5MlptXjQ+EvXVI9vBSnvi8wLSE62xv2/7baDSdmL40uR00Jp5eLshzkY 6WSgKHg56Yj2tLE0n+x4xw72IBDZ1CVY9q8hlX/K0eV9kl5Y/g== -----END CERTIFICATE-----Generated at Wed May 13 08:27:19 2026 by rpki-client