$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/870801a6-7f6d-34f3-9da8-ea307e9380ed.roa File: 870801a6-7f6d-34f3-9da8-ea307e9380ed.roa (raw, json) Hash identifier: nX5LVt7D+xXAAvV/ZoD4DYxt18KS+xbZOxN9WNTuxII= Subject key identifier: 56:83:0A:88:47:9F:1A:CD:99:9A:DA:0B:68:2A:98:2A:C9:23:15:DE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4EED0CAC930D06A446308180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/870801a6-7f6d-34f3-9da8-ea307e9380ed.roa Signing time: Fri 27 Mar 2026 14:32:15 +0000 ROA not before: Fri 27 Mar 2026 14:32:15 +0000 ROA not after: Thu 25 Jun 2026 14:32:15 +0000 asID: 0 IP address blocks: 38.211.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:ed:0c:ac:93:0d:06:a4:46:30:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 27 14:32:15 2026 GMT Not After : Jun 25 14:32:15 2026 GMT Subject: CN=995ef136-b98f-480e-8d6b-ced8529894e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:b9:76:50:cd:ef:a4:84:1c:85:40:b0:7d: 3e:ed:23:b4:94:4e:19:b0:39:62:ce:a4:16:9a:9c: f0:ce:7a:d7:bc:da:32:b7:8b:74:f6:31:30:e5:9a: 47:c9:d4:62:2b:7e:9c:47:67:d0:63:7d:ef:eb:53: ca:01:27:1e:cc:02:d6:c2:9e:f2:d5:a7:41:94:da: fe:db:fa:a9:25:9e:39:f9:b0:70:60:05:d3:1c:14: 15:7b:dd:b9:18:87:84:71:1f:ca:ac:56:20:b9:02: 0d:82:39:f8:93:be:5c:1a:f5:eb:b9:fe:66:c3:3b: fd:26:69:02:30:c7:a1:a0:a3:bd:1a:cc:22:0e:af: bb:50:e2:8d:79:05:6b:f2:ec:0e:0a:8b:93:9f:eb: 0e:f8:22:e2:c9:e7:bb:36:d8:61:74:67:b2:be:0a: 79:75:c1:b5:da:27:79:b8:29:61:96:11:b3:b2:37: a1:3d:29:c4:be:6c:df:16:3b:48:a1:c2:3c:98:68: c7:0d:9b:a6:68:d0:55:61:a5:2f:61:22:78:bd:31: a1:b1:e4:42:aa:a5:06:e4:ff:5b:53:44:92:94:1c: 0a:17:bd:a1:4e:e9:a3:ec:be:d9:3e:9f:14:5e:64: 0b:8a:4d:e5:18:17:97:93:f5:ce:cb:16:26:e6:53: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:0A:88:47:9F:1A:CD:99:9A:DA:0B:68:2A:98:2A:C9:23:15:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/870801a6-7f6d-34f3-9da8-ea307e9380ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:46:cc:c1:4e:7e:76:ec:61:2a:b4:b9:3d:14:47:a6:4d:44: 12:d6:39:15:2a:96:0a:26:03:8a:ef:e1:cb:0b:2c:ad:b3:ef: 30:98:2f:a5:fe:9c:fe:b7:a9:3e:8c:21:29:25:16:a2:be:13: 5c:6d:18:4a:b4:ab:c4:31:52:f8:e3:35:80:06:11:48:2e:55: 30:c8:89:27:d9:ca:46:e9:ae:b9:7c:dc:52:39:e7:55:d1:8f: 62:14:84:07:24:6e:dc:58:6a:7a:cf:5c:9b:88:09:45:eb:0f: ab:8d:c4:83:2e:f0:8a:2c:2f:c5:86:44:eb:4d:5a:36:01:a5: 62:e6:c3:30:27:48:80:9e:ec:60:15:7f:5d:1f:de:b3:7d:1a: 11:4d:b8:d1:36:e2:4f:4f:4c:0d:67:f9:a6:8a:fe:50:68:97: 30:da:34:0a:9b:9b:a4:5a:f9:3e:d2:b8:31:4b:e7:58:5c:53: 6c:8f:6d:14:c6:88:82:19:6a:b3:b8:9d:31:62:31:4c:53:a3: 5a:db:ec:e6:0e:33:56:a0:ae:2e:96:28:0e:5c:4c:f4:d4:58: 85:f1:f1:09:32:10:48:ca:4c:39:5f:09:e6:03:9b:eb:86:f9: 85:64:21:30:c9:a1:d2:99:e4:24:ff:a3:68:d4:99:a8:f8:89: b4:2a:7f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1O7Qyskw0GpEYwgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNzE0MzIxNVoXDTI2MDYyNTE0MzIxNVowLzEtMCsGA1UEAxMk OTk1ZWYxMzYtYjk4Zi00ODBlLThkNmItY2VkODUyOTg5NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsG5dlDN76SEHIVAsH0+7SO0lE4ZsDlizqQW mpzwznrXvNoyt4t09jEw5ZpHydRiK36cR2fQY33v61PKAScezALWwp7y1adBlNr+ 2/qpJZ45+bBwYAXTHBQVe925GIeEcR/KrFYguQINgjn4k75cGvXruf5mwzv9JmkC MMehoKO9GswiDq+7UOKNeQVr8uwOCouTn+sO+CLiyee7NthhdGeyvgp5dcG12id5 uClhlhGzsjehPSnEvmzfFjtIocI8mGjHDZumaNBVYaUvYSJ4vTGhseRCqqUG5P9b U0SSlBwKF72hTumj7L7ZPp8UXmQLik3lGBeXk/XOyxYm5lOHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaDCohHnxrNmZraC2gqmCrJIxXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODcwODAxYTYtN2Y2ZC0z NGYzLTlkYTgtZWEzMDdlOTM4MGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJtP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFGzMFOfnbsYSq0uT0UR6ZNRBLWORUqlgomA4rv4csLLK2z7zCYL6X+ nP63qT6MISklFqK+E1xtGEq0q8QxUvjjNYAGEUguVTDIiSfZykbprrl83FI551XR j2IUhAckbtxYanrPXJuICUXrD6uNxIMu8IosL8WGROtNWjYBpWLmwzAnSICe7GAV f10f3rN9GhFNuNE24k9PTA1n+aaK/lBolzDaNAqbm6Ra+T7SuDFL51hcU2yPbRTG iIIZarO4nTFiMUxTo1rb7OYOM1agri6WKA5cTPTUWIXx8QkyEEjKTDlfCeYDm+uG +YVkITDJodKZ5CT/o2jUmaj4ibQqf6g= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:48 2026 by rpki-client