$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa File: d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa (raw, json) Hash identifier: 0Sr5+Ej+bpFrjcIbE4laz4q1MxJhFaPw6op4EWx55vs= Subject key identifier: 1C:69:E7:7A:9D:15:40:0E:D6:B5:64:C9:68:B0:55:35:97:B9:56:91 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D91C01B6F33B09AC652C07740 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 395657 IP address blocks: 38.45.128.0/22 maxlen: 24 38.46.242.0/23 maxlen: 24 38.74.70.0/23 maxlen: 24 38.75.250.0/24 maxlen: 24 38.81.124.0/23 maxlen: 24 38.94.98.0/24 maxlen: 24 38.103.138.0/24 maxlen: 24 38.109.213.0/24 maxlen: 24 38.127.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1b:6f:33:b0:9a:c6:52:c0:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=5ff9155f-f157-474f-be8f-55bddfadbc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9d:66:89:e3:c1:9f:66:45:b5:02:25:86:13: e7:ca:78:94:63:e0:d9:9b:20:9c:87:11:72:89:06: ec:18:46:c7:c4:b2:7d:46:d4:89:fe:6b:4d:29:e4: 95:df:d9:13:c3:bd:e4:f9:66:77:2e:00:4c:c6:1a: 42:80:9d:e7:83:73:19:ae:43:e8:d4:5a:e5:7d:2b: 3f:fa:73:05:53:e4:f6:73:2d:d7:17:ad:ad:ac:0e: 24:4f:81:dc:8e:d1:2a:4f:b6:5a:36:c5:98:4e:52: f7:40:c0:5d:da:5f:92:3c:de:b5:39:42:3f:fa:05: 55:16:a0:b2:ab:64:a8:36:f6:f2:db:28:4a:9f:dc: ba:4a:96:b0:0b:e1:38:33:8d:2e:4b:64:87:75:70: f7:52:33:27:40:f2:ad:99:a4:2f:3a:8b:7b:0a:0d: 5e:58:61:7d:eb:0f:c3:33:c9:62:78:60:77:7d:81: 76:11:ba:d7:60:7c:53:22:a4:7e:2c:69:bc:6b:38: 19:aa:59:e8:ba:82:53:a2:d6:81:ec:af:cc:2d:80: 55:75:94:92:39:fe:a1:68:2c:43:5a:a8:7e:c7:da: 61:87:ae:5e:34:5f:68:0f:cc:2e:43:48:e7:32:8e: 3d:65:b0:95:b5:e6:b3:11:69:62:e9:c0:2d:33:65: cb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:E7:7A:9D:15:40:0E:D6:B5:64:C9:68:B0:55:35:97:B9:56:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d85fc0e7-de18-3e32-b1e2-f5795becf02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.128.0/22 38.46.242.0/23 38.74.70.0/23 38.75.250.0/24 38.81.124.0/23 38.94.98.0/24 38.103.138.0/24 38.109.213.0/24 38.127.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:14:a1:77:80:74:92:2f:d9:a8:05:f5:aa:25:08:19:35:ff: 50:9e:a6:1c:5a:31:b7:e6:fc:5a:48:2e:b4:f9:62:1c:70:42: 41:26:d3:ce:6e:ca:d3:3c:53:6b:5e:7b:6a:86:f8:66:d5:ad: 44:bf:85:05:c0:4d:5c:dd:e0:a3:fd:67:5c:9e:58:b2:ba:08: ca:05:19:db:c1:96:4f:3a:fb:cb:ae:e8:6f:a5:26:90:5d:3f: 85:81:34:f2:64:c7:0b:5d:8f:ff:a2:d4:20:3d:51:a1:44:16: 36:6e:02:cd:27:d1:76:03:04:c4:d2:67:27:7d:d4:ac:19:89: e1:d4:ee:10:8f:99:8e:a3:f1:e5:e4:d0:e0:fb:94:19:c5:59: e3:d8:aa:1a:7c:79:c2:28:dc:83:fd:18:69:0d:f5:98:45:b1: 82:9c:53:50:c0:5f:79:80:77:36:81:ba:3f:27:37:81:1e:d2: a4:24:d6:85:54:77:27:22:9c:1f:2e:44:7b:05:02:96:83:34: df:d1:5e:40:51:7e:de:97:a2:ad:cd:81:09:0c:ee:e6:78:df: bf:72:6b:b8:ee:ef:d8:ca:f9:a3:63:15:c2:15:09:05:e2:dc: fc:42:3d:c7:d7:60:38:1a:85:68:86:8b:d1:17:01:64:31:be: 71:78:8a:92 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE2RwBtvM7CaxlLAd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NWZmOTE1NWYtZjE1Ny00NzRmLWJlOGYtNTViZGRmYWRiYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA451miePBn2ZFtQIlhhPnyniUY+DZmyCchxFy iQbsGEbHxLJ9RtSJ/mtNKeSV39kTw73k+WZ3LgBMxhpCgJ3ng3MZrkPo1FrlfSs/ +nMFU+T2cy3XF62trA4kT4HcjtEqT7ZaNsWYTlL3QMBd2l+SPN61OUI/+gVVFqCy q2SoNvby2yhKn9y6SpawC+E4M40uS2SHdXD3UjMnQPKtmaQvOot7Cg1eWGF96w/D M8lieGB3fYF2EbrXYHxTIqR+LGm8azgZqlnouoJTotaB7K/MLYBVdZSSOf6haCxD Wqh+x9phh65eNF9oD8wuQ0jnMo49ZbCVteazEWli6cAtM2XLHQIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFBxp53qdFUAO1rVkyWiwVTWXuVaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDg1ZmMwZTctZGUxOC0z ZTMyLWIxZTItZjU3OTViZWNmMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCJi2AAwQB Ji7yAwQBJkpGAwQAJkv6AwQBJlF8AwQAJl5iAwQAJmeKAwQAJm3VAwQAJn9eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkUoXeAdJIv2agF9aolCBk1/1CephxaMbfm/FpILrT5YhxwQkEm085u ytM8U2tee2qG+GbVrUS/hQXATVzd4KP9Z1yeWLK6CMoFGdvBlk86+8uu6G+lJpBd P4WBNPJkxwtdj/+i1CA9UaFEFjZuAs0n0XYDBMTSZyd91KwZieHU7hCPmY6j8eXk 0OD7lBnFWePYqhp8ecIo3IP9GGkN9ZhFsYKcU1DAX3mAdzaBuj8nN4Ee0qQk1oVU dycinB8uRHsFApaDNN/RXkBRft6Xoq3NgQkM7uZ4379ya7ju79jK+aNjFcIVCQXi 3PxCPcfXYDgahWiGi9EXAWQxvnF4ipI= -----END CERTIFICATE-----Generated at Wed May 13 09:25:17 2026 by rpki-client