$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e4f3efe7-a9e8-3601-a16e-9b6f6d3865dd.roa File: e4f3efe7-a9e8-3601-a16e-9b6f6d3865dd.roa (raw, json) Hash identifier: sudTXKLPcQaWnwbzGx3u6uVZeE2CAKN9pHTcy39eb+0= Subject key identifier: C9:59:A3:26:C3:B7:1E:5B:7C:07:8B:14:57:66:DB:CE:BA:EE:02:B1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB94EAEEDA7A41955D7E52280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e4f3efe7-a9e8-3601-a16e-9b6f6d3865dd.roa Signing time: Mon 04 May 2026 17:04:39 +0000 ROA not before: Mon 04 May 2026 17:04:39 +0000 ROA not after: Sun 02 Aug 2026 17:04:39 +0000 asID: 0 IP address blocks: 38.170.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b9:4e:ae:ed:a7:a4:19:55:d7:e5:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 4 17:04:39 2026 GMT Not After : Aug 2 17:04:39 2026 GMT Subject: CN=daa0e5d1-f4dd-4ee1-83e8-3097f00aa7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:5f:0b:45:06:74:b0:3c:ff:df:82:3b:cf: 4c:a6:06:a1:31:f2:aa:6c:93:56:f8:bb:1f:b9:66: ae:b9:35:2e:45:56:19:fb:27:b1:33:70:86:84:70: d6:31:1c:08:fc:6f:d0:d4:ce:d4:00:45:f4:6b:72: 9d:2d:7e:0b:96:89:aa:af:0c:6a:3b:6a:de:ca:3f: 96:3d:9a:37:b4:12:6d:4f:41:63:94:08:e2:36:0d: 33:34:b7:0f:42:2b:c1:69:69:f7:30:15:9e:e1:3e: c9:8f:37:8c:4f:fb:15:09:3a:ea:a3:18:6d:5c:c0: d8:ae:9b:e4:0e:59:c1:b7:1b:6b:68:ee:5f:32:34: c1:f0:e0:b5:79:f4:44:10:4a:96:84:5b:91:62:43: 77:85:41:77:45:08:18:3a:ca:b5:8e:f6:c2:dc:45: b5:1a:95:28:7e:0f:b5:5c:da:03:68:9a:c2:d2:0b: 35:e5:9d:d4:8f:fb:9d:7b:e7:f7:64:05:9f:12:2c: 82:72:c5:66:8b:b6:0a:6c:7b:5f:44:86:b6:d1:15: 38:2f:00:0b:d4:0d:02:47:bf:7c:32:6d:bf:a3:ff: 45:7f:37:d4:1f:99:ca:d6:3f:a8:1e:16:16:f6:1a: f6:be:fe:89:86:19:d1:3e:d6:53:f8:8f:68:06:c2: 23:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:59:A3:26:C3:B7:1E:5B:7C:07:8B:14:57:66:DB:CE:BA:EE:02:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e4f3efe7-a9e8-3601-a16e-9b6f6d3865dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.170.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1c:a0:e3:b1:48:41:fe:4e:ae:d5:d1:9b:53:dd:91:9d:6a: e7:43:80:53:c9:73:7e:8d:25:a5:49:c1:5c:21:59:20:92:85: 95:09:8a:5c:00:67:5d:bb:d3:16:d1:42:aa:b7:a2:4d:9b:04: 4d:31:89:ba:6f:4a:44:f5:50:f3:22:23:61:6d:cc:9e:18:e3: c0:9a:e5:68:aa:64:ba:fa:68:8a:86:33:3b:39:ab:5b:8d:c4: 1f:84:74:83:fe:e8:70:52:af:eb:b2:f3:d2:0d:9f:7f:42:13: 8b:38:56:f0:01:c6:71:12:c2:7c:4b:ee:c0:01:2f:d7:9a:c5: a4:5a:8e:74:d5:2b:d5:f0:51:b3:92:06:52:39:40:a7:ee:d8: 09:70:ab:c7:95:29:fa:f0:15:42:d6:87:59:7d:88:97:71:f0: 1f:11:17:f8:c4:bd:96:a1:87:ef:53:d4:29:62:0e:f4:4f:99: 52:9d:78:cc:6b:dd:f1:69:5e:12:70:65:14:bd:1c:f2:9f:b9: c0:cf:f8:13:d9:8f:b9:2a:b0:e2:14:4f:3f:d6:1a:a8:4d:6e: 84:dc:60:06:c5:51:81:72:38:7e:bc:f6:d5:89:b1:15:1f:ba: e0:fd:a2:91:5d:45:0b:80:0f:77:b4:eb:86:42:3a:64:57:73: 93:9f:4d:92 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE25Tq7tp6QZVdflIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNDE3MDQzOVoXDTI2MDgwMjE3MDQzOVowLzEtMCsGA1UEAxMk ZGFhMGU1ZDEtZjRkZC00ZWUxLTgzZTgtMzA5N2YwMGFhN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMlfC0UGdLA8/9+CO89MpgahMfKqbJNW+Lsf uWauuTUuRVYZ+yexM3CGhHDWMRwI/G/Q1M7UAEX0a3KdLX4LlomqrwxqO2reyj+W PZo3tBJtT0FjlAjiNg0zNLcPQivBaWn3MBWe4T7JjzeMT/sVCTrqoxhtXMDYrpvk DlnBtxtraO5fMjTB8OC1efREEEqWhFuRYkN3hUF3RQgYOsq1jvbC3EW1GpUofg+1 XNoDaJrC0gs15Z3Uj/ude+f3ZAWfEiyCcsVmi7YKbHtfRIa20RU4LwAL1A0CR798 Mm2/o/9FfzfUH5nK1j+oHhYW9hr2vv6JhhnRPtZT+I9oBsIjEwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMlZoybDtx5bfAeLFFdm28667gKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTRmM2VmZTctYTllOC0z NjAxLWExNmUtOWI2ZjZkMzg2NWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJqowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAahyg47FIQf5OrtXRm1PdkZ1q50OAU8lzfo0lpUnBXCFZIJKFlQmKXABn XbvTFtFCqreiTZsETTGJum9KRPVQ8yIjYW3MnhjjwJrlaKpkuvpoioYzOzmrW43E H4R0g/7ocFKv67Lz0g2ff0ITizhW8AHGcRLCfEvuwAEv15rFpFqOdNUr1fBRs5IG UjlAp+7YCXCrx5Up+vAVQtaHWX2Il3HwHxEX+MS9lqGH71PUKWIO9E+ZUp14zGvd 8WleEnBlFL0c8p+5wM/4E9mPuSqw4hRPP9YaqE1uhNxgBsVRgXI4frz21YmxFR+6 4P2ikV1FC4APd7TrhkI6ZFdzk59Nkg== -----END CERTIFICATE-----Generated at Tue May 12 21:48:24 2026 by rpki-client