$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa File: cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa (raw, json) Hash identifier: rnTG8ZSUKsAL/iyfklzG0AubhNkBW6nVz/c+LCU6r6o= Subject key identifier: FC:B1:7B:CD:F5:E8:EE:D3:99:86:6A:A3:CB:7B:16:4E:DD:84:B9:14 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DAAE022FA0CF0DBEFC4498E68 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 132925 IP address blocks: 38.130.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:22:fa:0c:f0:db:ef:c4:49:8e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=0d73abd4-f091-4213-bc93-c5844d2f798a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:34:6d:9f:c2:ba:30:15:5f:95:0b:a5:7b: 9c:01:24:a3:11:14:77:03:17:bf:fb:4a:98:b7:34: f4:34:a1:f2:7c:7d:a4:d5:10:1d:d6:03:cb:d0:2d: f8:ed:91:1a:5e:fa:8d:3c:48:f5:08:7e:1e:a3:36: 63:db:a0:d8:48:c8:85:ae:9b:f6:5d:49:87:68:a4: 89:d1:10:c9:dc:23:b9:09:45:3d:2c:58:4f:1a:b1: f1:05:cf:77:76:31:b9:b4:bf:0f:e7:99:22:34:54: 1b:44:f9:6f:50:64:a1:55:f1:73:53:09:90:fe:b3: dd:52:3f:48:83:f6:88:76:f3:fd:a3:58:00:8d:fc: 87:da:74:95:bc:b3:b1:e5:e0:ff:ef:8b:b5:64:0a: d3:89:39:12:6a:09:db:dc:7b:d4:ae:a9:21:2c:8b: d0:3a:65:8b:95:ff:6e:cb:bb:3f:e9:06:04:75:c2: 69:ee:e8:37:17:78:c0:27:d3:4e:b5:a3:a5:94:bd: 4b:b8:30:4f:7a:48:a1:1e:6b:73:78:5e:c9:55:49: e5:67:c1:73:a3:5a:39:c5:a8:0b:e7:cf:3a:13:af: 35:c3:1b:38:52:d7:fe:45:45:2b:99:04:97:e2:f9: dc:c2:36:7a:e6:9e:33:83:e6:8a:bc:55:66:02:9e: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B1:7B:CD:F5:E8:EE:D3:99:86:6A:A3:CB:7B:16:4E:DD:84:B9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.130.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:12:12:ae:ca:7c:88:21:50:4c:92:65:f3:2d:39:63:8e:84: 4c:ad:31:c8:9c:51:c7:6f:13:f5:76:18:8f:4c:8c:16:99:c3: 51:a8:8a:f3:bd:e6:bb:01:74:2c:58:5c:9a:8e:54:ea:b7:b1: 79:23:7a:ad:0c:8b:9f:32:61:3e:c4:f3:f1:bd:c8:1a:58:50: b3:57:ce:f9:9e:a7:5b:ed:44:5c:43:f7:89:94:64:e9:70:2b: 07:82:b9:53:e1:bd:00:58:42:54:c4:15:f3:d0:8a:78:73:c2: b7:97:6c:4a:fe:07:ce:1b:05:95:96:08:8e:37:fe:ba:3b:49: 48:75:e9:b2:7a:78:a4:09:3e:ca:97:d0:24:51:62:3e:de:b7: 3c:7b:ad:03:e7:11:c1:3e:41:02:1a:1b:b4:f0:56:ad:c0:3f: 49:75:69:39:52:a3:4a:57:f9:44:72:c6:1a:b8:85:6e:26:5a: da:6a:a8:6e:20:04:73:b8:e7:76:0a:61:5c:76:fe:61:11:cd: 37:6c:92:4d:96:0c:e1:1c:1b:c3:87:00:b9:5d:85:eb:7b:e2: 41:f8:76:53:04:58:a3:6d:2a:27:c0:09:0f:5c:9b:80:8a:9f: 61:58:22:30:90:cc:de:48:4c:1e:92:79:11:d9:0a:e1:0c:40: 08:d2:e7:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4CL6DPDb78RJjmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk MGQ3M2FiZDQtZjA5MS00MjEzLWJjOTMtYzU4NDRkMmY3OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweY0bZ/CujAVX5ULpXucASSjERR3Axe/+0qY tzT0NKHyfH2k1RAd1gPL0C347ZEaXvqNPEj1CH4eozZj26DYSMiFrpv2XUmHaKSJ 0RDJ3CO5CUU9LFhPGrHxBc93djG5tL8P55kiNFQbRPlvUGShVfFzUwmQ/rPdUj9I g/aIdvP9o1gAjfyH2nSVvLOx5eD/74u1ZArTiTkSagnb3HvUrqkhLIvQOmWLlf9u y7s/6QYEdcJp7ug3F3jAJ9NOtaOllL1LuDBPekihHmtzeF7JVUnlZ8Fzo1o5xagL 5886E681wxs4Utf+RUUrmQSX4vncwjZ65p4zg+aKvFVmAp6K7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyxe8316O7TmYZqo8t7Fk7dhLkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2JjNGQ5NmEtMGU1Yi0z NWJlLTg5ZmUtMDg1N2VmMGU3YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJoL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0SEq7KfIghUEySZfMtOWOOhEytMcicUcdvE/V2GI9MjBaZw1GoivO9 5rsBdCxYXJqOVOq3sXkjeq0Mi58yYT7E8/G9yBpYULNXzvmep1vtRFxD94mUZOlw KweCuVPhvQBYQlTEFfPQinhzwreXbEr+B84bBZWWCI43/ro7SUh16bJ6eKQJPsqX 0CRRYj7etzx7rQPnEcE+QQIaG7TwVq3AP0l1aTlSo0pX+URyxhq4hW4mWtpqqG4g BHO453YKYVx2/mERzTdskk2WDOEcG8OHALldhet74kH4dlMEWKNtKifACQ9cm4CK n2FYIjCQzN5ITB6SeRHZCuEMQAjS5wU= -----END CERTIFICATE-----Generated at Wed May 13 05:45:08 2026 by rpki-client