$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa File: a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa (raw, json) Hash identifier: FP3LotAed8hi8cwrXf6Yus4KFasHk4FyKTyBT4rRcpc= Subject key identifier: E3:2E:3A:D9:6B:6E:71:59:11:F2:2F:9E:4C:95:FD:53:CF:B6:69:A9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DBE6B0DC52A4584BA8819BF40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 270169 IP address blocks: 38.19.96.0/22 maxlen: 22 38.20.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:0d:c5:2a:45:84:ba:88:19:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=56703361-8b2d-430a-966c-b93cc0791d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:e6:47:dc:78:43:0e:f0:78:08:ad:19:9d: 52:58:32:25:98:cd:22:29:05:dd:bf:e4:02:f5:7d: 99:0e:09:a0:0e:7b:74:d1:63:01:26:60:f6:e6:ff: c3:d0:e7:19:02:4d:51:60:fb:63:09:6e:d2:8c:5b: 23:04:14:ba:09:7a:e2:d0:5c:7d:3b:21:c1:a5:0e: 7d:aa:fa:67:23:32:94:d7:7c:7a:b1:10:ed:99:f7: 43:d8:f6:fb:c9:98:ec:d5:03:50:60:2b:fd:a9:28: 5d:17:69:bf:e7:1d:7f:97:a9:1e:7b:dd:f2:e0:7a: 58:10:3e:d1:be:de:eb:59:ee:bd:3d:ea:93:4d:a5: ff:b3:a9:98:e2:64:76:a1:46:26:eb:0a:8d:df:e1: f4:ef:3c:e9:e2:9f:f9:b0:f2:e1:58:52:26:22:80: 49:da:2c:0a:64:7f:fe:ea:7b:50:d4:fb:7f:22:2f: c1:6c:f1:ac:64:d2:b7:50:d8:4f:17:e6:00:5a:48: 7d:b6:42:17:1d:30:bc:0e:7d:da:0c:68:cc:27:55: 52:cc:31:3e:c9:82:23:a0:fc:6a:02:1a:c2:aa:30: 8d:9e:64:07:af:e0:ab:5e:5b:d6:4c:72:fc:8a:6c: 6e:27:4a:44:64:c3:2d:29:fe:c7:53:89:f9:62:f8: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:3A:D9:6B:6E:71:59:11:F2:2F:9E:4C:95:FD:53:CF:B6:69:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0b9709f-0e27-3e63-9280-be7dafdaca4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.96.0/22 38.20.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8e:08:72:e5:d9:3d:79:61:1d:7c:85:88:89:05:0a:16:db: 4e:53:4a:bf:ea:97:72:34:f2:60:76:7e:09:7a:cb:ed:d7:cd: 4c:ba:eb:45:86:ec:8a:41:0e:5a:50:13:72:f8:35:15:3d:37: 9c:10:bb:a9:f3:89:3b:7e:1a:57:81:3e:32:a0:56:14:62:4e: 49:d3:f8:bd:e8:0d:1c:c3:11:f9:49:94:04:31:c6:96:5a:12: ab:e4:9b:b1:7d:70:5e:d2:26:d9:b9:f5:61:aa:b3:e8:15:7e: 4b:5d:eb:e5:1f:32:0e:3a:e7:88:ac:1a:0c:d6:3b:09:b3:10: b6:cc:af:53:74:f9:ff:74:49:f4:65:e2:ce:31:e6:5e:42:a0: 9d:bf:8d:ee:0d:af:f7:64:ba:5b:61:38:4e:3c:72:34:fb:11: 88:4d:c3:b3:c3:94:aa:6b:95:9f:f4:5b:0b:eb:0f:b1:cb:da: 2a:23:19:6d:38:bd:37:53:d2:b9:ea:2c:25:6b:54:43:57:24: f0:32:06:22:d8:e6:7a:35:bc:94:e8:2b:97:a9:05:a4:70:c3: 9a:c7:59:32:82:08:66:e4:e8:26:de:40:19:8d:22:05:a9:49: 86:40:ec:9e:ac:db:14:41:4f:3a:82:3c:53:90:b3:35:19:30: fe:0a:18:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2+aw3FKkWEuogZv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk NTY3MDMzNjEtOGIyZC00MzBhLTk2NmMtYjkzY2MwNzkxZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSvmR9x4Qw7weAitGZ1SWDIlmM0iKQXdv+QC 9X2ZDgmgDnt00WMBJmD25v/D0OcZAk1RYPtjCW7SjFsjBBS6CXri0Fx9OyHBpQ59 qvpnIzKU13x6sRDtmfdD2Pb7yZjs1QNQYCv9qShdF2m/5x1/l6kee93y4HpYED7R vt7rWe69PeqTTaX/s6mY4mR2oUYm6wqN3+H07zzp4p/5sPLhWFImIoBJ2iwKZH/+ 6ntQ1Pt/Ii/BbPGsZNK3UNhPF+YAWkh9tkIXHTC8Dn3aDGjMJ1VSzDE+yYIjoPxq AhrCqjCNnmQHr+CrXlvWTHL8imxuJ0pEZMMtKf7HU4n5YvjmOwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOMuOtlrbnFZEfIvnkyV/VPPtmmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTBiOTcwOWYtMGUyNy0z ZTYzLTkyODAtYmU3ZGFmZGFjYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJhNgAwQA JhQDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA6OCHLl2T15YR18hYiJBQoW205TSr/ql3I08mB2fgl6y+3X zUy660WG7IpBDlpQE3L4NRU9N5wQu6nziTt+GleBPjKgVhRiTknT+L3oDRzDEflJ lAQxxpZaEqvkm7F9cF7SJtm59WGqs+gVfktd6+UfMg4654isGgzWOwmzELbMr1N0 +f90SfRl4s4x5l5CoJ2/je4Nr/dkulthOE48cjT7EYhNw7PDlKprlZ/0WwvrD7HL 2iojGW04vTdT0rnqLCVrVENXJPAyBiLY5no1vJToK5epBaRww5rHWTKCCGbk6Cbe QBmNIgWpSYZA7J6s2xRBTzqCPFOQszUZMP4KGDw= -----END CERTIFICATE-----Generated at Wed May 13 08:21:50 2026 by rpki-client