$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0d212a0-dd63-309c-9805-db87de688c34.roa File: a0d212a0-dd63-309c-9805-db87de688c34.roa (raw, json) Hash identifier: HXgvU1c2dLuaQ9iNWoaEffGw6DcPi6//vGqAh/aBXEs= Subject key identifier: 5C:D9:F5:22:E1:B9:81:6C:DD:31:B4:84:92:F2:40:D9:63:E0:DF:33 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DC4CB5C1F90F6BDAA2C7BE440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0d212a0-dd63-309c-9805-db87de688c34.roa Signing time: Fri 08 May 2026 19:49:45 +0000 ROA not before: Fri 08 May 2026 19:49:45 +0000 ROA not after: Mon 27 Jul 2026 21:12:47 +0000 asID: 138842 IP address blocks: 38.20.156.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:cb:5c:1f:90:f6:bd:aa:2c:7b:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 8 19:49:45 2026 GMT Not After : Jul 27 21:12:47 2026 GMT Subject: CN=4302feed-e457-43ec-b551-4ae920044794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:25:4b:ca:b3:0d:52:05:7f:5c:7b:33:bd:de: 56:bd:a2:53:48:ab:fa:72:84:ca:5e:bb:6d:e3:84: dd:fa:c3:67:fe:07:81:06:d4:78:8f:6f:c9:f7:ba: d4:e3:1f:35:c4:39:52:9a:26:49:49:be:78:85:46: 12:2d:0f:fd:9b:ab:16:d3:95:10:d3:93:d8:2b:5d: ac:95:be:d5:a4:3c:ef:58:2d:c9:7c:0b:7f:a9:5e: 64:26:ae:4f:85:9b:bf:a3:6a:c9:e5:ab:97:4e:a6: c4:e2:d9:e6:fe:1f:1f:ce:39:e6:b8:85:78:46:9c: 2d:73:10:9d:17:a3:21:0b:24:2c:23:54:82:37:fc: de:2e:a0:32:6f:a9:c5:a0:88:db:a3:40:24:83:85: 4c:b3:3b:9d:0e:5a:04:21:97:63:9f:04:ed:07:6f: a6:b6:2f:f3:4c:13:c3:8b:97:3e:97:ea:a4:9a:3d: 60:28:a9:07:07:6d:0b:8d:5e:a8:4a:23:d6:43:8b: 8c:82:c2:21:b5:a9:7c:6f:8b:d2:61:c2:75:0c:8f: 63:ed:0a:de:41:77:58:84:65:cd:5f:1f:c7:42:a0: 96:47:b5:58:06:5f:43:ce:1e:4f:d3:33:22:62:37: 37:f9:2f:42:d5:fa:d5:79:1d:12:93:08:48:6c:35: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:F5:22:E1:B9:81:6C:DD:31:B4:84:92:F2:40:D9:63:E0:DF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0d212a0-dd63-309c-9805-db87de688c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:5f:a9:93:ec:64:56:1f:b1:23:32:6a:28:69:1b:a2:a6: b4:7c:53:77:1d:17:3b:83:1c:6c:dd:73:83:52:8f:62:20:9e: cc:6c:49:d9:dc:e8:20:62:ca:55:94:9b:2b:84:c1:82:b4:10: 89:73:fa:14:d1:b1:fe:58:15:7f:4e:44:64:b2:10:bf:d4:ba: eb:3e:2f:f2:ba:62:86:d3:c8:26:b0:52:a7:95:aa:ad:95:bc: a2:c7:b0:94:ce:ee:1f:5c:96:35:fe:f4:a6:a9:e6:b2:de:84: 94:d1:a3:88:96:ee:79:5d:9e:bf:d1:4c:38:52:bc:9b:72:01: f3:77:b5:60:9f:70:f0:fb:29:9a:27:95:99:61:5b:b9:57:c9: 91:4b:b7:ec:61:b6:ff:49:27:f5:cb:68:f8:88:2d:19:79:d8: 9a:81:74:cb:ea:ba:8c:eb:3a:76:b9:58:d4:ea:18:34:28:88: b8:b4:1a:bb:b4:6d:c3:8b:01:53:61:97:a1:e7:83:20:b7:50: 74:94:cb:06:44:8a:5c:e8:83:f3:1f:64:da:fe:5d:9c:1e:bb: dd:89:4a:32:7b:4f:03:7c:dc:4d:d6:d4:46:13:35:f8:de:7b: 18:07:5e:36:e5:ce:3b:bf:9a:9d:59:1f:b7:e0:a0:12:e1:45: 02:31:63:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Ey1wfkPa9qix75EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwODE5NDk0NVoXDTI2MDcyNzIxMTI0N1owLzEtMCsGA1UEAxMk NDMwMmZlZWQtZTQ1Ny00M2VjLWI1NTEtNGFlOTIwMDQ0Nzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yVLyrMNUgV/XHszvd5WvaJTSKv6coTKXrtt 44Td+sNn/geBBtR4j2/J97rU4x81xDlSmiZJSb54hUYSLQ/9m6sW05UQ05PYK12s lb7VpDzvWC3JfAt/qV5kJq5PhZu/o2rJ5auXTqbE4tnm/h8fzjnmuIV4RpwtcxCd F6MhCyQsI1SCN/zeLqAyb6nFoIjbo0Akg4VMszudDloEIZdjnwTtB2+mti/zTBPD i5c+l+qkmj1gKKkHB20LjV6oSiPWQ4uMgsIhtal8b4vSYcJ1DI9j7QreQXdYhGXN Xx/HQqCWR7VYBl9Dzh5P0zMiYjc3+S9C1frVeR0SkwhIbDXEQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzZ9SLhuYFs3TG0hJLyQNlj4N8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTBkMjEyYTAtZGQ2My0z MDljLTk4MDUtZGI4N2RlNjg4YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc6X6mT7GRWH7EjMmooaRuiprR8U3cdFzuDHGzdc4NSj2IgnsxsSdnc 6CBiylWUmyuEwYK0EIlz+hTRsf5YFX9ORGSyEL/Uuus+L/K6YobTyCawUqeVqq2V vKLHsJTO7h9cljX+9Kap5rLehJTRo4iW7nldnr/RTDhSvJtyAfN3tWCfcPD7KZon lZlhW7lXyZFLt+xhtv9JJ/XLaPiILRl52JqBdMvquozrOna5WNTqGDQoiLi0Gru0 bcOLAVNhl6HngyC3UHSUywZEilzog/MfZNr+XZweu92JSjJ7TwN83E3W1EYTNfje exgHXjblzju/mp1ZH7fgoBLhRQIxY1U= -----END CERTIFICATE-----Generated at Wed May 13 11:56:33 2026 by rpki-client