$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5d1c3116-bec1-3812-9206-1a588da62fb6.roa File: 5d1c3116-bec1-3812-9206-1a588da62fb6.roa (raw, json) Hash identifier: IW0Yq+fs/7iSPj9irq7qK0ShmADJBm4qDLhoLNQ4x2E= Subject key identifier: 9B:D8:52:02:0B:87:D6:59:C8:C3:4F:15:EC:D8:FB:74:C2:8E:64:31 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB8D58BF1DB327FC07704A780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5d1c3116-bec1-3812-9206-1a588da62fb6.roa Signing time: Mon 04 May 2026 13:00:30 +0000 ROA not before: Mon 04 May 2026 13:00:30 +0000 ROA not after: Sun 02 Aug 2026 13:00:30 +0000 asID: 25840 IP address blocks: 38.74.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:d5:8b:f1:db:32:7f:c0:77:04:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 4 13:00:30 2026 GMT Not After : Aug 2 13:00:30 2026 GMT Subject: CN=a38f8490-cdfb-4b22-bd8e-4f11ed8934c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:1d:f3:5d:6b:cf:67:d9:29:2b:d7:9f:eb: 37:9c:b9:1a:53:fc:e5:ef:c9:36:e9:a0:b6:37:4e: 63:98:57:bc:40:34:20:51:d4:e1:f2:f4:61:bc:18: b7:b3:0c:4c:9e:06:04:ce:97:9d:d4:3e:9b:0a:e1: 05:9c:8d:7a:a6:4e:06:a9:3b:f8:80:ab:90:57:d9: 97:19:b8:44:f9:07:23:1e:78:c7:e8:71:69:0f:17: b8:4e:17:ee:53:98:21:dd:1c:a9:11:fc:42:37:99: a3:82:26:f7:92:42:36:8f:cd:3d:c4:ef:af:8b:f4: 99:4b:ae:5c:e0:06:63:09:5a:ce:6e:c8:26:66:47: 00:35:0b:59:b0:78:7a:f4:14:09:a2:7e:1d:34:14: ed:18:13:05:37:9f:61:9e:32:05:02:9b:ed:16:ba: 79:54:c2:89:e2:37:9a:d1:21:70:97:cd:3f:09:67: ea:27:f5:55:51:13:79:29:c8:e3:b9:c4:99:eb:67: d3:09:ea:b7:80:d7:5d:a0:8b:4c:95:3c:46:e7:7d: de:eb:c7:79:27:48:09:8b:3d:be:cb:aa:9b:23:14: 92:42:d3:95:81:88:15:eb:c6:ff:73:cb:34:9e:11: 4f:3b:9f:22:94:b1:7a:73:d3:8c:44:eb:8e:21:60: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:52:02:0B:87:D6:59:C8:C3:4F:15:EC:D8:FB:74:C2:8E:64:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5d1c3116-bec1-3812-9206-1a588da62fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.74.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b9:26:e8:24:c9:c5:90:f5:08:a8:d8:b5:bc:e8:d7:dd:b5: 77:e2:91:f0:dd:86:ca:f1:0e:b9:15:d6:75:69:77:f8:7e:e5: 7d:fc:d0:1c:1b:58:9f:6d:0a:6e:f1:0a:dd:7b:d9:05:3f:7d: 5a:12:28:5a:4e:01:6f:36:6b:a8:24:8d:ae:40:c7:70:54:aa: b4:3b:73:49:9d:90:9c:a1:53:c4:e8:2e:8e:ce:cd:f4:c4:55: c8:84:8e:5c:95:14:8e:a1:19:89:4a:3c:f3:57:30:12:9e:50: 6b:34:3c:4d:03:0a:b3:0f:90:3d:a5:34:e7:c4:c8:16:fe:aa: 73:b4:46:07:7c:5d:64:38:64:4f:4b:bb:26:c5:66:2b:d1:4f: 15:ec:b4:d3:cf:1c:f3:e1:56:55:2c:a0:83:35:01:1c:95:c6: 45:23:8e:53:4a:90:fd:5e:47:2e:7a:65:2a:7c:f0:d9:c5:0a: e3:18:69:96:4e:98:06:cf:9d:2a:44:9b:74:66:4e:ad:03:00: 56:57:87:e2:5c:3f:56:ec:1f:ee:dd:ca:ad:00:66:2d:0c:b7: 18:53:b2:af:16:35:7f:61:2e:47:96:32:c4:0d:34:3a:1f:eb: 3f:94:3d:5c:04:e6:e0:3e:da:d2:4c:74:04:b3:53:0c:45:d4: 96:c7:59:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE241Yvx2zJ/wHcEp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNDEzMDAzMFoXDTI2MDgwMjEzMDAzMFowLzEtMCsGA1UEAxMk YTM4Zjg0OTAtY2RmYi00YjIyLWJkOGUtNGYxMWVkODkzNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Ud811rz2fZKSvXn+s3nLkaU/zl78k26aC2 N05jmFe8QDQgUdTh8vRhvBi3swxMngYEzped1D6bCuEFnI16pk4GqTv4gKuQV9mX GbhE+QcjHnjH6HFpDxe4ThfuU5gh3RypEfxCN5mjgib3kkI2j809xO+vi/SZS65c 4AZjCVrObsgmZkcANQtZsHh69BQJon4dNBTtGBMFN59hnjIFApvtFrp5VMKJ4jea 0SFwl80/CWfqJ/VVURN5KcjjucSZ62fTCeq3gNddoItMlTxG533e68d5J0gJiz2+ y6qbIxSSQtOVgYgV68b/c8s0nhFPO58ilLF6c9OMROuOIWA6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvYUgILh9ZZyMNPFezY+3TCjmQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWQxYzMxMTYtYmVjMS0z ODEyLTkyMDYtMWE1ODhkYTYyZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC25JugkycWQ9Qio2LW86NfdtXfikfDdhsrxDrkV1nVpd/h+5X380Bwb WJ9tCm7xCt172QU/fVoSKFpOAW82a6gkja5Ax3BUqrQ7c0mdkJyhU8ToLo7OzfTE VciEjlyVFI6hGYlKPPNXMBKeUGs0PE0DCrMPkD2lNOfEyBb+qnO0Rgd8XWQ4ZE9L uybFZivRTxXstNPPHPPhVlUsoIM1ARyVxkUjjlNKkP1eRy56ZSp88NnFCuMYaZZO mAbPnSpEm3RmTq0DAFZXh+JcP1bsH+7dyq0AZi0MtxhTsq8WNX9hLkeWMsQNNDof 6z+UPVwE5uA+2tJMdASzUwxF1JbHWaY= -----END CERTIFICATE-----Generated at Wed May 13 12:16:22 2026 by rpki-client