$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/677a57ac-202e-329f-8c00-54a9b1c52434.roa File: 677a57ac-202e-329f-8c00-54a9b1c52434.roa (raw, json) Hash identifier: QH9FDYh2VuoQCxCFezht+XhSrfveTzCLln2d6rYGkCs= Subject key identifier: 71:8A:DC:AF:67:78:31:CF:A1:94:8D:F4:D6:9A:61:B0:B4:1D:0F:A9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB7703E810DEE6C587E4A8D20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/677a57ac-202e-329f-8c00-54a9b1c52434.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 209360 IP address blocks: 38.27.37.0/24 maxlen: 24 154.61.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3e:81:0d:ee:6c:58:7e:4a:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=f3f1c4f5-aea3-4bb1-b3be-b1aa457a4a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:70:26:1d:5b:45:51:d6:36:03:7b:f5:b8: 0a:81:af:6a:e8:fc:90:e4:ce:c2:aa:53:ab:d3:7d: d2:90:11:9d:9c:5d:7e:27:35:b3:d1:33:63:29:b1: 7c:a8:0e:41:37:0f:a0:e0:70:c3:73:73:ac:fa:97: 29:eb:e4:47:2b:b9:44:19:f5:24:50:13:89:1a:df: 42:26:b8:a4:32:05:6a:a9:cb:f8:af:38:83:e5:b1: c6:b7:fd:0c:aa:52:c5:2c:58:fb:d5:9e:fe:d2:9d: f9:10:67:4b:58:63:0f:2b:23:be:e1:aa:1f:48:d1: 75:ce:38:46:83:ed:63:a4:02:cd:e6:79:4b:df:b0: bf:a3:c8:30:1f:cc:26:fc:d8:95:e5:a3:89:e0:d7: 05:93:8a:de:ad:64:e9:76:06:ae:e1:cf:0e:63:d9: 11:01:f3:27:e3:0b:32:8f:24:0d:1c:be:4c:4b:62: f2:da:f4:d3:e5:40:01:a9:bb:2e:c6:cc:89:90:e5: 03:77:77:a7:25:d9:26:ed:e5:1a:9e:f6:0c:f3:3d: 5b:b5:06:d4:ae:6e:fc:c9:8a:b0:f8:ee:1c:23:65: 06:a4:de:27:a1:0a:41:0b:c1:c6:ee:e3:d3:bb:22: aa:fb:9c:69:bb:5a:12:33:01:f1:c6:aa:08:3d:ea: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8A:DC:AF:67:78:31:CF:A1:94:8D:F4:D6:9A:61:B0:B4:1D:0F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/677a57ac-202e-329f-8c00-54a9b1c52434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.27.37.0/24 154.61.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ba:e2:86:e8:b6:9f:b6:b2:30:f7:5e:f8:3a:7e:1a:70:a7: 80:61:06:97:b3:5c:e6:a6:18:3d:f2:f6:50:ea:60:b7:5e:cd: 63:5a:a1:49:8c:8b:50:01:b0:a4:86:95:a0:6e:bf:a6:87:30: 83:d8:7e:d0:55:17:0a:1c:c2:bc:8e:10:1c:c6:bf:cd:ca:70: 8e:39:1d:3b:28:48:11:42:32:94:4e:df:ea:16:21:f0:f8:3f: 0f:2d:d0:ed:f7:30:b4:bd:b6:6d:0a:19:50:3d:ba:f9:bc:79: c9:3f:07:74:51:5a:e8:f3:ec:1a:d6:5d:02:24:9d:8d:83:43: 10:61:67:bf:96:47:03:98:0c:29:9b:a9:84:9b:18:4d:83:b9: 7d:69:47:c0:fc:74:68:9e:6e:55:e6:20:25:67:09:61:2c:ef: d0:50:e0:76:60:04:1c:36:97:ff:df:50:16:08:0a:f9:1b:07: 8d:6b:a8:f1:eb:04:5a:cd:38:df:ad:94:88:4e:2d:21:ec:c4: 79:51:42:82:18:8f:46:a0:e9:9d:2e:b6:9a:8e:dd:4b:2f:72: 38:e1:31:d4:80:9b:46:12:35:3e:b7:97:e1:95:64:31:2f:f7: 11:f7:60:f0:d7:56:82:12:42:df:d5:06:b2:63:8f:14:2c:82: c3:89:75:24 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE23cD6BDe5sWH5KjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZjNmMWM0ZjUtYWVhMy00YmIxLWIzYmUtYjFhYTQ1N2E0YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEZwJh1bRVHWNgN79bgKga9q6PyQ5M7CqlOr 033SkBGdnF1+JzWz0TNjKbF8qA5BNw+g4HDDc3Os+pcp6+RHK7lEGfUkUBOJGt9C JrikMgVqqcv4rziD5bHGt/0MqlLFLFj71Z7+0p35EGdLWGMPKyO+4aofSNF1zjhG g+1jpALN5nlL37C/o8gwH8wm/NiV5aOJ4NcFk4rerWTpdgau4c8OY9kRAfMn4wsy jyQNHL5MS2Ly2vTT5UABqbsuxsyJkOUDd3enJdkm7eUanvYM8z1btQbUrm78yYqw +O4cI2UGpN4noQpBC8HG7uPTuyKq+5xpu1oSMwHxxqoIPeqMTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHGK3K9neDHPoZSN9NaaYbC0HQ+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjc3YTU3YWMtMjAyZS0z MjlmLThjMDAtNTRhOWIxYzUyNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJhslAwQA mj1SMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACq64obotp+2sjD3Xvg6fhpwp4BhBpezXOamGD3y9lDqYLde zWNaoUmMi1ABsKSGlaBuv6aHMIPYftBVFwocwryOEBzGv83KcI45HTsoSBFCMpRO 3+oWIfD4Pw8t0O33MLS9tm0KGVA9uvm8eck/B3RRWujz7BrWXQIknY2DQxBhZ7+W RwOYDCmbqYSbGE2DuX1pR8D8dGieblXmICVnCWEs79BQ4HZgBBw2l//fUBYICvkb B41rqPHrBFrNON+tlIhOLSHsxHlRQoIYj0ag6Z0utpqO3UsvcjjhMdSAm0YSNT63 l+GVZDEv9xH3YPDXVoISQt/VBrJjjxQsgsOJdSQ= -----END CERTIFICATE-----Generated at Wed May 13 12:07:38 2026 by rpki-client