$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa File: a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa (raw, json) Hash identifier: mvljGxyWIy+dUBvrwVOCeYeJ3cUoLbQuS114wniBk+4= Subject key identifier: 83:B2:1B:9B:95:4F:82:2E:03:10:9F:AC:CF:8F:78:36:37:6F:FF:D8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5CB4F84E87239E94B1C1B140 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 272122 IP address blocks: 38.61.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f8:4e:87:23:9e:94:b1:c1:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=56fa6a9e-9708-4fed-94f2-458b866e6b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:52:77:8e:01:3d:cb:0f:5f:12:14:68:33: 3a:67:1d:15:15:a3:cf:ee:6d:43:8d:54:95:13:08: 33:db:3a:3a:82:42:0c:d6:b1:57:17:ad:e0:04:ce: b2:59:ed:95:7d:13:2c:68:28:d9:84:d3:9c:bf:64: 45:4d:e6:3a:3b:57:1e:ee:58:18:ff:10:2d:8f:7f: f4:c9:7b:8d:0d:cd:b0:cf:58:2a:f7:b3:0d:0f:26: a9:be:7a:83:aa:25:5c:c1:ef:3f:6a:b7:57:4a:98: 44:61:56:dd:b9:b9:14:a2:64:9b:17:2f:41:44:30: 02:9b:60:fa:e8:81:c0:cc:ec:10:c8:28:bd:a4:ee: 14:ac:39:38:73:78:46:50:7b:ca:e4:fb:bf:82:63: 6f:90:2e:28:5d:7a:b7:44:f0:b1:76:37:79:31:f4: ae:fa:35:0c:2e:25:7d:6f:fb:25:c3:5f:54:ea:27: 4b:67:83:5c:f9:18:39:27:b2:36:28:e7:d9:f1:27: fe:a6:2b:c2:a0:52:1a:09:01:9c:71:8c:f6:61:0c: 07:60:b8:e4:1f:6a:2b:41:c4:bb:db:58:ac:a0:4f: 00:d3:4d:b1:f3:f1:b9:55:d2:1a:c0:0f:e3:91:ac: 12:b8:50:33:3a:b9:ee:64:5b:11:44:e7:91:db:25: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B2:1B:9B:95:4F:82:2E:03:10:9F:AC:CF:8F:78:36:37:6F:FF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2585ca2-ffea-376e-a081-c5cb2c6e2b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.61.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:39:94:25:dc:f8:25:13:01:94:e4:a6:4c:7c:74:11:95:db: 30:64:15:8b:75:ae:57:c4:cd:45:42:9d:f7:4d:75:ae:8c:4e: cd:cb:95:f0:c6:c7:9d:b9:60:99:b6:e4:ed:22:68:65:58:0c: a2:17:0c:83:25:d9:c4:ec:d3:b8:62:ac:db:64:c5:41:13:49: 3d:89:eb:26:06:b8:52:05:06:27:80:81:81:5f:d3:82:08:73: 1c:f7:9c:aa:0f:9c:66:90:b2:4c:0f:d0:e4:7a:c0:82:f6:19: b0:1c:4a:f5:6c:d1:a3:9d:34:2c:6f:5b:b6:a7:21:d2:4d:77: 7f:11:e0:7d:aa:1a:5c:f1:7f:06:49:27:d8:64:41:a7:7c:5e: ab:2b:ee:0a:02:3d:6b:0a:3f:8b:7d:09:57:af:53:5d:2e:37: 30:10:24:a7:54:c7:6a:4e:0a:40:82:91:df:3a:b7:e9:13:29: 6a:67:2c:fe:ed:07:12:ba:4c:a8:d7:94:28:b1:bd:29:5a:29: 71:97:7e:99:7b:58:2e:3d:29:de:14:56:e9:fe:60:e7:57:ba: ab:f7:c4:bd:1e:93:20:70:fa:77:6d:83:7b:72:6e:f9:43:11: 8a:63:c5:44:94:ee:4d:76:ab:10:f5:51:4c:8b:a9:ef:76:53: 9e:8f:77:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPhOhyOelLHBsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk NTZmYTZhOWUtOTcwOC00ZmVkLTk0ZjItNDU4Yjg2NmU2YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS9Sd44BPcsPXxIUaDM6Zx0VFaPP7m1DjVSV Ewgz2zo6gkIM1rFXF63gBM6yWe2VfRMsaCjZhNOcv2RFTeY6O1ce7lgY/xAtj3/0 yXuNDc2wz1gq97MNDyapvnqDqiVcwe8/ardXSphEYVbdubkUomSbFy9BRDACm2D6 6IHAzOwQyCi9pO4UrDk4c3hGUHvK5Pu/gmNvkC4oXXq3RPCxdjd5MfSu+jUMLiV9 b/slw19U6idLZ4Nc+Rg5J7I2KOfZ8Sf+pivCoFIaCQGccYz2YQwHYLjkH2orQcS7 21isoE8A002x8/G5VdIawA/jkawSuFAzOrnuZFsRROeR2yV8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOyG5uVT4IuAxCfrM+PeDY3b//YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTI1ODVjYTItZmZlYS0z NzZlLWEwODEtYzVjYjJjNmUyYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHJj2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE5lCXc+CUTAZTkpkx8dBGV2zBkFYt1rlfEzUVCnfdNda6MTs3LlfDG x525YJm25O0iaGVYDKIXDIMl2cTs07hirNtkxUETST2J6yYGuFIFBieAgYFf04II cxz3nKoPnGaQskwP0OR6wIL2GbAcSvVs0aOdNCxvW7anIdJNd38R4H2qGlzxfwZJ J9hkQad8Xqsr7goCPWsKP4t9CVevU10uNzAQJKdUx2pOCkCCkd86t+kTKWpnLP7t BxK6TKjXlCixvSlaKXGXfpl7WC49Kd4UVun+YOdXuqv3xL0ekyBw+ndtg3tybvlD EYpjxUSU7k12qxD1UUyLqe92U56PdwI= -----END CERTIFICATE-----Generated at Wed Apr 8 07:15:24 2026 by rpki-client