$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68fabc2c-2da0-373e-aacb-c12101bbc260.roa File: 68fabc2c-2da0-373e-aacb-c12101bbc260.roa (raw, json) Hash identifier: UgyvVas/R6a9g4wvtIvjHb3LjGaRmM750K3aVygM10g= Subject key identifier: 6E:99:97:B7:32:7B:4E:C0:6F:2E:D1:68:D6:27:8D:0B:FD:C1:1C:46 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB075839FBFB580E759184098 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68fabc2c-2da0-373e-aacb-c12101bbc260.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 274237 IP address blocks: 38.191.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:83:9f:bf:b5:80:e7:59:18:40:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=814e0670-d00e-4f04-9103-cb97152af011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:ed:50:36:02:d5:c0:40:f2:52:d0:9b:f2: e1:f5:35:e3:87:eb:b2:73:97:b6:aa:26:ad:b6:0d: c4:0d:93:c9:0f:54:84:2d:5f:78:d5:a0:3c:10:b6: 6b:16:49:ee:5d:08:fe:ba:cb:86:15:10:89:8b:b2: 44:60:78:86:58:72:a6:d4:68:dc:71:42:79:17:55: d9:96:0d:56:e8:db:62:0d:b5:32:c8:80:b1:1f:ad: 06:6a:a9:7d:e1:c3:dd:f7:08:3a:37:63:78:0c:db: 80:6a:5e:1a:5e:03:6c:43:22:cc:d4:d3:03:e4:52: 78:4c:2c:c2:2f:66:69:18:5c:56:16:2c:d1:60:3a: 6d:e0:7b:bd:d0:83:a8:e8:11:5d:51:15:68:5a:c2: 13:3a:38:55:f6:4c:35:12:b5:aa:73:7c:ce:dd:25: 13:c9:5b:33:2b:d2:38:e7:b6:4f:88:8b:cb:c5:84: d9:3f:4f:f0:cd:b5:23:72:27:61:78:cf:fb:10:de: fe:34:b9:5f:df:98:5d:d2:a1:bd:56:b9:d2:6a:db: fa:fb:5f:08:b0:03:e5:09:3c:b0:36:8b:76:9b:07: 94:45:4b:f7:60:da:4b:a5:4b:5b:2d:13:fd:0d:41: 67:47:b8:e9:c2:b6:ef:19:83:5b:37:69:f7:f8:3f: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:99:97:B7:32:7B:4E:C0:6F:2E:D1:68:D6:27:8D:0B:FD:C1:1C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68fabc2c-2da0-373e-aacb-c12101bbc260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.191.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:05:14:7e:e6:a2:ed:ed:b7:ba:38:50:73:f1:21:b3:9d:76: 30:a2:be:ae:ad:12:f1:11:90:0c:5f:03:65:65:c1:e2:38:86: d2:bc:de:54:db:69:45:f0:b8:39:65:ba:60:d8:3c:a1:e4:a6: 95:d6:bb:0d:31:cf:27:5a:dd:27:79:67:39:ee:c6:86:b0:2d: de:ae:d6:a6:af:c0:f8:45:ec:9d:42:08:09:4e:46:cb:ed:2f: 16:08:9a:9d:7c:8c:b4:85:29:da:0b:ed:33:18:0a:43:6c:81: f9:e5:1f:08:a3:05:66:88:14:c4:aa:4c:5f:c4:b3:0b:ac:6b: 98:f9:98:a1:d7:06:c3:7b:f4:20:66:db:0f:ef:31:b7:7d:62: f7:76:41:30:fb:86:a2:ad:95:49:0a:a5:98:50:4d:96:5b:d7: b2:b4:b0:7a:62:5f:28:4a:1a:a4:08:9a:c3:95:3f:9c:a8:db: 5e:82:9a:7d:16:c4:d4:7a:68:19:86:8b:de:35:6b:26:9b:ef: 16:18:df:d1:86:6b:2b:a2:09:f2:14:33:d4:39:cb:bf:8c:5b: c0:1e:b9:1b:d3:44:87:dd:6b:ca:a2:f6:9d:39:5d:ea:a9:e7: f8:58:e1:bd:50:47:5d:57:ef:5a:77:2f:48:5f:47:14:c7:ec: b0:97:7c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdYOfv7WA51kYQJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk ODE0ZTA2NzAtZDAwZS00ZjA0LTkxMDMtY2I5NzE1MmFmMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3LtUDYC1cBA8lLQm/Lh9TXjh+uyc5e2qiat tg3EDZPJD1SELV941aA8ELZrFknuXQj+usuGFRCJi7JEYHiGWHKm1GjccUJ5F1XZ lg1W6NtiDbUyyICxH60Gaql94cPd9wg6N2N4DNuAal4aXgNsQyLM1NMD5FJ4TCzC L2ZpGFxWFizRYDpt4Hu90IOo6BFdURVoWsITOjhV9kw1ErWqc3zO3SUTyVszK9I4 57ZPiIvLxYTZP0/wzbUjcidheM/7EN7+NLlf35hd0qG9VrnSatv6+18IsAPlCTyw Not2mweURUv3YNpLpUtbLRP9DUFnR7jpwrbvGYNbN2n3+D//CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Zl7cye07Aby7RaNYnjQv9wRxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjhmYWJjMmMtMmRhMC0z NzNlLWFhY2ItYzEyMTAxYmJjMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJr/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcFFH7mou3tt7o4UHPxIbOddjCivq6tEvERkAxfA2VlweI4htK83lTb aUXwuDllumDYPKHkppXWuw0xzyda3Sd5ZznuxoawLd6u1qavwPhF7J1CCAlORsvt LxYImp18jLSFKdoL7TMYCkNsgfnlHwijBWaIFMSqTF/Eswusa5j5mKHXBsN79CBm 2w/vMbd9Yvd2QTD7hqKtlUkKpZhQTZZb17K0sHpiXyhKGqQImsOVP5yo216Cmn0W xNR6aBmGi941ayab7xYY39GGayuiCfIUM9Q5y7+MW8AeuRvTRIfda8qi9p05Xeqp 5/hY4b1QR11X71p3L0hfRxTH7LCXfBs= -----END CERTIFICATE-----Generated at Wed May 13 07:20:59 2026 by rpki-client