$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/02a87b63-cfbb-338d-8291-69ff3bab0d70.roa File: 02a87b63-cfbb-338d-8291-69ff3bab0d70.roa (raw, json) Hash identifier: HCngW8Td091z38hiX5zZ52/qQk0wPP74H9aV2tXN/+A= Subject key identifier: C6:00:41:52:34:9F:88:10:65:CA:00:88:52:30:24:AB:75:AC:CB:39 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D25C4298D3BF611503B9079F0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/02a87b63-cfbb-338d-8291-69ff3bab0d70.roa Signing time: Thu 12 Mar 2026 20:41:44 +0000 ROA not before: Thu 12 Mar 2026 20:41:44 +0000 ROA not after: Wed 10 Jun 2026 20:41:44 +0000 asID: 273051 IP address blocks: 38.236.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:c4:29:8d:3b:f6:11:50:3b:90:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 12 20:41:44 2026 GMT Not After : Jun 10 20:41:44 2026 GMT Subject: CN=45e89810-565d-4233-84fb-8903f411bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:2a:c4:b0:29:38:66:59:73:5e:ce:ad:6d: 3f:9a:22:d8:11:31:53:4c:cf:4f:78:cb:ad:cb:4e: a6:7f:81:b9:e9:9b:01:88:1f:8f:51:01:76:80:83: 01:dd:14:ab:56:87:12:7b:7f:88:07:54:ac:73:ff: 6d:fd:76:c7:f8:31:8b:9c:ff:2f:39:4f:9c:7e:4b: a6:3d:52:80:ff:b1:aa:f5:6c:1e:da:6a:c1:b8:2f: 97:ae:44:cf:21:e9:12:5f:34:c1:e7:0b:9c:18:86: 5a:d8:5e:0b:71:79:2f:09:79:d4:24:42:11:d4:ca: 0d:2a:a2:85:1d:8c:33:a9:83:48:65:bf:c0:32:d8: 08:33:03:54:a6:49:b6:fa:03:46:ae:27:58:d6:6d: f1:7a:77:74:c8:41:c0:23:d8:99:59:a7:9a:ed:0d: c9:8e:c4:ad:3e:1b:a7:70:1b:92:5c:e1:d4:41:b9: 83:0a:99:ed:61:8c:8e:33:1d:ee:fd:82:0c:25:4d: 7c:3c:62:12:50:e7:39:3e:2f:72:33:c4:e5:d2:13: ed:2f:92:e4:9f:7f:d3:ae:f7:9a:9c:89:25:b4:9d: d1:51:64:e9:e7:52:08:42:45:44:05:71:db:33:74: a9:05:4d:f3:6c:41:a2:90:f1:3a:56:17:fa:a3:b6: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:00:41:52:34:9F:88:10:65:CA:00:88:52:30:24:AB:75:AC:CB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/02a87b63-cfbb-338d-8291-69ff3bab0d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:65:d1:72:f4:2f:fc:55:13:09:93:a7:ad:e5:b6:86:a8:c1: a6:56:40:11:74:d2:08:cc:0f:62:4a:f3:9e:b7:92:35:de:ba: 41:28:5b:e8:72:28:21:df:6f:61:eb:4c:82:e6:54:9f:f9:56: b3:06:8f:73:04:c2:c6:8c:9a:ae:f4:6a:d0:6e:51:a1:c8:b2: 40:0d:e2:df:79:a8:1e:07:ec:69:98:86:57:b1:05:c4:ff:7c: 0e:2c:e7:9d:e3:cb:fc:a7:d5:f2:15:34:93:90:6f:c6:ac:c3: 7c:1f:40:4e:d9:e7:8a:44:35:99:f0:de:3d:a1:e2:cb:5b:22: 5e:37:8d:cd:cf:9c:35:34:e3:79:b4:2f:32:c5:8b:e1:5d:2e: 01:42:88:55:46:21:e3:4c:1c:a7:e1:f3:9c:29:ca:88:0b:94: 56:30:97:ff:44:c1:1b:56:ac:25:c8:1f:3d:cc:e2:dc:b7:ec: 26:c0:57:47:67:78:c8:d1:be:e0:76:0d:94:d5:5e:35:08:bf: a1:a1:38:84:eb:a5:3c:72:53:a3:d8:0f:d3:5d:88:dc:57:b8: cb:16:0a:2b:2b:e7:b6:b9:2d:e0:7e:a7:4f:00:fe:51:b9:e6: 9d:19:e9:aa:21:4c:99:b8:09:a9:a1:df:29:0c:1e:fe:3c:c0: b6:83:c0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0lxCmNO/YRUDuQefAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMjIwNDE0NFoXDTI2MDYxMDIwNDE0NFowLzEtMCsGA1UEAxMk NDVlODk4MTAtNTY1ZC00MjMzLTg0ZmItODkwM2Y0MTFiYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMqxLApOGZZc17OrW0/miLYETFTTM9PeMut y06mf4G56ZsBiB+PUQF2gIMB3RSrVocSe3+IB1Ssc/9t/XbH+DGLnP8vOU+cfkum PVKA/7Gq9Wwe2mrBuC+XrkTPIekSXzTB5wucGIZa2F4LcXkvCXnUJEIR1MoNKqKF HYwzqYNIZb/AMtgIMwNUpkm2+gNGridY1m3xend0yEHAI9iZWaea7Q3JjsStPhun cBuSXOHUQbmDCpntYYyOMx3u/YIMJU18PGISUOc5Pi9yM8Tl0hPtL5Lkn3/Trvea nIkltJ3RUWTp51IIQkVEBXHbM3SpBU3zbEGikPE6Vhf6o7Yu4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYAQVI0n4gQZcoAiFIwJKt1rMs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDJhODdiNjMtY2ZiYi0z MzhkLTgyOTEtNjlmZjNiYWIwZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9l0XL0L/xVEwmTp63ltoaowaZWQBF00gjMD2JK8563kjXeukEoW+hy KCHfb2HrTILmVJ/5VrMGj3MEwsaMmq70atBuUaHIskAN4t95qB4H7GmYhlexBcT/ fA4s553jy/yn1fIVNJOQb8asw3wfQE7Z54pENZnw3j2h4stbIl43jc3PnDU043m0 LzLFi+FdLgFCiFVGIeNMHKfh85wpyogLlFYwl/9EwRtWrCXIHz3M4ty37CbAV0dn eMjRvuB2DZTVXjUIv6GhOITrpTxyU6PYD9NdiNxXuMsWCisr57a5LeB+p08A/lG5 5p0Z6aohTJm4Camh3ykMHv48wLaDwAo= -----END CERTIFICATE-----Generated at Sat Mar 14 18:24:01 2026 by rpki-client