$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708913e2-0f67-39af-92d6-310746ddadfb.roa File: 708913e2-0f67-39af-92d6-310746ddadfb.roa (raw, json) Hash identifier: 8RVCNPWvXuSzx+Ip8ySZ7JQj4azA0Eerd9B415sD6aQ= Subject key identifier: 60:A9:21:1F:51:F1:F1:CD:D3:4A:D0:EE:81:36:D0:24:86:A9:C4:1C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DBA3B1C9B0B2D4FF20C8550A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708913e2-0f67-39af-92d6-310746ddadfb.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 273197 IP address blocks: 38.94.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:1c:9b:0b:2d:4f:f2:0c:85:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=8b470642-3ff4-4384-9f57-342be486dc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:17:14:3f:23:d8:ce:dc:73:ba:e6:39:d0: 5b:69:40:b9:6d:19:8c:62:0a:89:ba:0e:72:26:53: 52:84:1a:07:26:8c:f5:29:57:24:16:a0:29:42:d5: e0:50:cd:15:3b:da:55:dc:8e:86:00:b3:bc:0c:e9: b8:cc:d1:37:79:e7:07:11:64:e0:a7:f5:b4:83:a3: 99:58:e0:ae:0f:69:81:d8:c1:9d:d7:b3:61:50:5f: 72:15:1d:f8:a5:53:b7:4e:e7:68:2f:27:f0:35:bb: 74:f8:75:b6:ee:e3:1c:f6:67:52:4f:bd:0f:41:f1: 78:3f:e7:62:67:66:72:a0:6d:de:5b:c6:35:cb:eb: fc:f1:ad:d2:09:27:fb:1f:2f:13:80:35:b3:93:bb: c8:48:29:6a:cb:35:90:aa:3f:93:f9:65:19:3a:79: ac:d7:17:da:f2:4f:fc:1d:a2:20:ef:a8:e1:22:a2: 50:d7:66:91:13:27:48:5c:f8:3a:3d:76:d8:81:5d: d5:87:cc:63:12:dd:5e:e1:55:c9:0e:0c:2b:e1:ef: 07:c6:40:7a:b6:c1:b2:c7:a6:50:42:a1:c0:a4:d1: 4d:a4:b7:63:86:fa:e4:41:06:b8:4e:de:0d:2c:a3: d8:c5:26:2b:65:d5:6b:5d:f2:f2:a0:7f:05:12:e5: 7c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A9:21:1F:51:F1:F1:CD:D3:4A:D0:EE:81:36:D0:24:86:A9:C4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708913e2-0f67-39af-92d6-310746ddadfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f0:40:72:35:fc:a4:96:c8:70:07:40:7e:79:09:6f:ca:2c: 43:eb:28:02:60:ce:ba:4c:88:6b:a3:80:ad:35:f2:c9:f8:c1: f1:42:c3:84:e3:c5:e1:9a:9b:a1:dc:7e:35:ea:0c:05:2f:ac: 26:aa:fb:c9:d1:4a:3d:be:ec:8d:b8:d0:fa:5a:de:ab:99:fd: ff:43:2f:7b:42:b6:34:ea:af:13:77:5d:ca:a4:a8:22:ec:35: a3:b7:f4:ee:d4:38:03:58:0a:5e:08:24:c0:d3:cc:5a:24:f7: 4a:c6:17:00:12:a4:8b:8b:6c:b6:fe:b5:bf:7d:a1:23:72:19: 15:f0:eb:6c:13:9f:8f:8b:b4:1a:1b:c2:12:ec:7e:7d:96:33: 2d:d6:42:39:30:08:b1:0e:9f:1c:1c:2d:63:1f:b7:9b:a1:62: 35:41:03:3b:c6:51:44:88:81:c3:e9:0e:03:ab:65:17:ff:46: d6:d8:0f:13:34:8a:36:af:a5:f7:a0:5e:fb:4d:6d:2c:71:48: 71:f6:db:20:fb:da:11:b8:81:6f:46:72:5c:fc:de:28:51:d3: 0a:d1:bb:6d:84:92:65:90:44:8e:0e:3c:f7:0d:c9:85:6d:1e: eb:f4:1d:88:d8:48:a5:4f:ac:49:69:6f:2e:69:2f:06:6b:81: e1:1a:55:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OxybCy1P8gyFUKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk OGI0NzA2NDItM2ZmNC00Mzg0LTlmNTctMzQyYmU0ODZkYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx80XFD8j2M7cc7rmOdBbaUC5bRmMYgqJug5y JlNShBoHJoz1KVckFqApQtXgUM0VO9pV3I6GALO8DOm4zNE3eecHEWTgp/W0g6OZ WOCuD2mB2MGd17NhUF9yFR34pVO3TudoLyfwNbt0+HW27uMc9mdST70PQfF4P+di Z2ZyoG3eW8Y1y+v88a3SCSf7Hy8TgDWzk7vISClqyzWQqj+T+WUZOnms1xfa8k/8 HaIg76jhIqJQ12aREydIXPg6PXbYgV3Vh8xjEt1e4VXJDgwr4e8HxkB6tsGyx6ZQ QqHApNFNpLdjhvrkQQa4Tt4NLKPYxSYrZdVrXfLyoH8FEuV8swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCpIR9R8fHN00rQ7oE20CSGqcQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzA4OTEzZTItMGY2Ny0z OWFmLTkyZDYtMzEwNzQ2ZGRhZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJl7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvwQHI1/KSWyHAHQH55CW/KLEPrKAJgzrpMiGujgK018sn4wfFCw4Tj xeGam6HcfjXqDAUvrCaq+8nRSj2+7I240Ppa3quZ/f9DL3tCtjTqrxN3XcqkqCLs NaO39O7UOANYCl4IJMDTzFok90rGFwASpIuLbLb+tb99oSNyGRXw62wTn4+LtBob whLsfn2WMy3WQjkwCLEOnxwcLWMft5uhYjVBAzvGUUSIgcPpDgOrZRf/RtbYDxM0 ijavpfegXvtNbSxxSHH22yD72hG4gW9Gclz83ihR0wrRu22EkmWQRI4OPPcNyYVt Huv0HYjYSKVPrElpby5pLwZrgeEaVXs= -----END CERTIFICATE-----Generated at Wed May 13 11:57:55 2026 by rpki-client