$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa File: f98e473e-c87d-32f1-bdf9-de6df3252819.roa (raw, json) Hash identifier: ZckHAb9AP3ryOdcGA6RwgtjDm0qdo1yxx5jhPQ0SeRk= Subject key identifier: A0:0D:FE:15:D3:A9:40:22:F0:62:59:B4:65:BF:8D:B4:15:8C:B0:FA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DB7702A4BD376C5F17C43F300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 272464 IP address blocks: 38.19.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2a:4b:d3:76:c5:f1:7c:43:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=d78602f3-6ebc-47e5-a918-625811e4e551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:72:f8:ce:6d:f4:59:11:fd:c8:04:0a:4c: cf:d5:fa:72:6a:9c:d8:74:45:8f:c8:de:81:66:63: 5e:44:1f:ef:c0:b4:18:a7:64:ec:bf:74:7a:58:cb: 8f:91:75:92:75:6f:ab:e9:20:06:6c:dc:2d:fc:13: 62:96:60:ab:e7:42:e2:62:61:25:75:c2:74:73:c8: 64:80:63:d8:71:af:10:c8:2a:9c:b6:81:72:95:9c: 08:3b:d1:42:6d:76:90:ed:15:1d:6e:07:a6:d3:37: cb:52:60:4c:8d:d1:39:dd:bc:e3:05:97:8e:55:93: 9a:6a:e2:24:4d:8d:b8:0b:a2:3e:18:3f:9a:4c:46: c6:43:39:db:3d:56:e8:7b:1a:b2:52:c2:79:b8:25: ef:52:78:40:1e:1e:6b:b7:25:2f:61:ca:ae:85:e6: d2:80:8b:58:3d:75:89:25:87:1a:8d:f6:db:a9:93: 51:f3:48:21:80:a1:a8:00:63:b9:53:fc:fd:2e:26: 33:5a:9e:87:05:89:51:18:4e:60:3c:ce:52:96:f9: f5:77:91:18:8b:5c:d0:d0:c6:e8:0b:9b:dc:56:1e: 5f:b1:76:46:85:69:6f:8d:ce:5c:12:aa:d6:0f:da: 4c:e9:c1:5f:3d:16:a3:89:01:f9:02:44:67:97:8a: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0D:FE:15:D3:A9:40:22:F0:62:59:B4:65:BF:8D:B4:15:8C:B0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bd:23:11:65:49:61:7a:7f:1f:62:f3:c8:db:09:01:3a:3c: a8:f4:15:b1:d2:89:09:02:c5:c3:1f:80:21:3c:43:a2:76:ed: 34:92:ba:ec:06:b0:7e:ca:dd:26:31:66:48:5a:17:70:fd:44: e7:ef:5b:0d:2f:21:7c:e7:06:d3:ad:e9:04:a9:92:6e:6d:5e: 5d:7c:d7:96:76:05:9a:80:bd:79:ce:46:89:73:ba:fe:21:7f: b4:45:9d:31:00:13:1f:00:89:67:65:e3:66:52:46:53:49:3f: 31:7d:20:20:f5:ed:d3:77:19:80:23:ac:0f:74:30:cb:ad:31: cc:f6:28:80:e9:2a:0c:4e:4c:41:62:c3:60:67:1a:57:b5:dc: 2c:43:1d:09:a7:51:bf:27:a1:a7:83:70:0d:d7:8b:fb:83:6d: b4:9e:3e:25:3e:aa:bb:7a:bc:f7:15:a1:1a:2a:db:e4:9e:07: fc:bf:55:69:fc:e4:88:bd:01:e8:b4:03:d8:76:9b:5e:db:d4: 64:bb:b9:45:0f:58:ab:cb:e6:88:2e:5e:af:ed:fe:25:8d:47: 04:2b:91:ed:cf:58:78:3a:65:c0:ba:5c:10:d8:f3:df:6a:84: 8e:ad:4d:65:67:db:9e:9f:64:81:a3:dc:8e:ad:03:69:1d:c9: 8e:5c:6b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCpL03bF8XxD8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDc4NjAyZjMtNmViYy00N2U1LWE5MTgtNjI1ODExZTRlNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bxy+M5t9FkR/cgECkzP1fpyapzYdEWPyN6B ZmNeRB/vwLQYp2Tsv3R6WMuPkXWSdW+r6SAGbNwt/BNilmCr50LiYmEldcJ0c8hk gGPYca8QyCqctoFylZwIO9FCbXaQ7RUdbgem0zfLUmBMjdE53bzjBZeOVZOaauIk TY24C6I+GD+aTEbGQznbPVboexqyUsJ5uCXvUnhAHh5rtyUvYcquhebSgItYPXWJ JYcajfbbqZNR80ghgKGoAGO5U/z9LiYzWp6HBYlRGE5gPM5Slvn1d5EYi1zQ0Mbo C5vcVh5fsXZGhWlvjc5cEqrWD9pM6cFfPRajiQH5AkRnl4ocTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAN/hXTqUAi8GJZtGW/jbQVjLD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjk4ZTQ3M2UtYzg3ZC0z MmYxLWJkZjktZGU2ZGYzMjUyODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhNlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG9IxFlSWF6fx9i88jbCQE6PKj0FbHSiQkCxcMfgCE8Q6J27TSSuuwG sH7K3SYxZkhaF3D9ROfvWw0vIXznBtOt6QSpkm5tXl1815Z2BZqAvXnORolzuv4h f7RFnTEAEx8AiWdl42ZSRlNJPzF9ICD17dN3GYAjrA90MMutMcz2KIDpKgxOTEFi w2BnGle13CxDHQmnUb8noaeDcA3Xi/uDbbSePiU+qrt6vPcVoRoq2+SeB/y/VWn8 5Ii9Aei0A9h2m17b1GS7uUUPWKvL5oguXq/t/iWNRwQrke3PWHg6ZcC6XBDY899q hI6tTWVn256fZIGj3I6tA2kdyY5ca3M= -----END CERTIFICATE-----Generated at Wed May 13 08:58:54 2026 by rpki-client