$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa File: 9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa (raw, json) Hash identifier: vLD6iIz9ucJAp/mZDBhVvvDz/LkArxuZxpPA7CZeXF8= Subject key identifier: A3:35:C9:EC:D0:32:15:8E:62:66:DC:78:97:5A:82:FF:FA:15:76:51 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB8D58BCFAB4110DF7FB2B900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa Signing time: Mon 04 May 2026 13:00:30 +0000 ROA not before: Mon 04 May 2026 13:00:30 +0000 ROA not after: Sun 02 Aug 2026 13:00:30 +0000 asID: 28213 IP address blocks: 38.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:d5:8b:cf:ab:41:10:df:7f:b2:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 4 13:00:30 2026 GMT Not After : Aug 2 13:00:30 2026 GMT Subject: CN=1f1fd326-5466-477a-a6f7-482fc535c72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:27:3e:af:90:d4:3f:06:76:8c:68:a1:0a: df:db:e3:d0:83:a5:a3:cd:90:1a:25:b7:cd:cc:f6: 95:7c:74:08:54:ab:03:51:f0:7e:28:d0:df:9e:a9: 4a:49:62:17:68:86:18:42:cd:b0:1c:3a:27:21:5f: 8d:e9:d4:4f:1f:08:e8:c7:6e:c3:b8:9d:12:f0:a8: e2:39:23:a2:e1:ba:78:38:74:22:38:d2:be:b5:07: 1a:28:6b:fa:ea:db:e8:f2:87:38:81:60:b1:b6:e1: eb:82:e7:22:68:8c:cc:1a:68:52:28:df:e7:e1:f3: ea:65:3a:66:39:68:b5:bc:6d:82:ba:7b:95:4b:06: 10:67:45:31:8b:17:44:1e:51:1e:50:82:d0:19:22: 11:b0:3a:ce:14:3d:58:be:51:a8:82:95:41:f8:57: 43:d8:3e:22:50:3a:a0:67:dc:3c:ac:cd:d4:73:ba: 13:5f:43:d6:e9:4e:30:35:52:5f:0c:92:44:74:60: 25:c7:85:46:c4:aa:ce:be:a0:f7:83:a1:d9:7a:01: 5e:3b:70:86:f4:d1:47:4c:14:e1:99:97:2e:3c:d5: 49:64:f0:65:f1:d4:26:80:01:b2:5d:d8:41:2b:eb: e7:a2:45:04:49:28:f3:bc:82:b1:08:7f:95:52:a4: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:C9:EC:D0:32:15:8E:62:66:DC:78:97:5A:82:FF:FA:15:76:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c5:ac:88:11:9e:22:9d:f1:eb:2f:35:b1:b7:60:6e:22:17: a9:34:aa:4b:e6:76:30:2e:67:18:aa:cd:4a:0c:52:81:6a:54: 39:b7:9b:f7:b7:6d:f4:2b:12:e5:c2:d9:ad:ec:d3:d1:4c:08: 73:df:b7:9e:aa:c2:24:6a:cc:58:33:61:0f:f0:5d:63:73:e0: c3:f2:cc:63:96:29:df:7e:7f:4e:57:5a:4d:37:b5:c5:f9:16: f1:20:f2:ec:92:d3:fa:02:ba:b4:86:2b:f3:18:db:8c:13:67: 00:ac:01:ac:2b:65:83:cb:24:81:df:b9:8b:1f:5d:f6:c6:75: 6d:77:b2:c4:14:a4:5a:20:74:60:72:51:15:0b:0e:d3:54:6c: c8:fc:e6:5b:9c:fa:62:e3:e8:8c:13:3f:68:a9:f1:97:4d:96: 8b:8b:27:5a:08:c1:84:39:77:4a:7c:6e:6d:a7:10:98:9a:57: b8:ed:e6:67:f1:68:04:a3:c8:33:28:c8:28:cc:5b:3d:30:c5: 31:07:e5:ed:68:91:31:f1:ab:3c:1c:e2:91:bf:9b:7e:2f:ac: e3:ce:2c:5f:64:84:ab:63:01:97:2c:fb:03:61:98:d3:7a:c4: ba:db:ac:7d:c8:df:66:2d:c6:6b:53:45:16:7a:62:9d:8d:12: 89:f1:fa:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE241YvPq0EQ33+yuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNDEzMDAzMFoXDTI2MDgwMjEzMDAzMFowLzEtMCsGA1UEAxMk MWYxZmQzMjYtNTQ2Ni00NzdhLWE2ZjctNDgyZmM1MzVjNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpInPq+Q1D8GdoxooQrf2+PQg6WjzZAaJbfN zPaVfHQIVKsDUfB+KNDfnqlKSWIXaIYYQs2wHDonIV+N6dRPHwjox27DuJ0S8Kji OSOi4bp4OHQiONK+tQcaKGv66tvo8oc4gWCxtuHrguciaIzMGmhSKN/n4fPqZTpm OWi1vG2CunuVSwYQZ0UxixdEHlEeUILQGSIRsDrOFD1YvlGogpVB+FdD2D4iUDqg Z9w8rM3Uc7oTX0PW6U4wNVJfDJJEdGAlx4VGxKrOvqD3g6HZegFeO3CG9NFHTBTh mZcuPNVJZPBl8dQmgAGyXdhBK+vnokUESSjzvIKxCH+VUqR1pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM1yezQMhWOYmbceJdagv/6FXZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWY1YTBlZDktZmY5NC0z MDA5LWI1YzMtNGUxZmZiMWEzM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHFrIgRniKd8esvNbG3YG4iF6k0qkvmdjAuZxiqzUoMUoFqVDm3m/e3 bfQrEuXC2a3s09FMCHPft56qwiRqzFgzYQ/wXWNz4MPyzGOWKd9+f05XWk03tcX5 FvEg8uyS0/oCurSGK/MY24wTZwCsAawrZYPLJIHfuYsfXfbGdW13ssQUpFogdGBy URULDtNUbMj85luc+mLj6IwTP2ip8ZdNlouLJ1oIwYQ5d0p8bm2nEJiaV7jt5mfx aASjyDMoyCjMWz0wxTEH5e1okTHxqzwc4pG/m34vrOPOLF9khKtjAZcs+wNhmNN6 xLrbrH3I32YtxmtTRRZ6Yp2NEonx+o4= -----END CERTIFICATE-----Generated at Wed May 13 05:08:12 2026 by rpki-client