$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa File: 0952f43e-16b7-3030-95a3-48a989059742.roa (raw, json) Hash identifier: DJ1Ayj/EpdlPMFCG0P0xeELMom4YdiUJnoeix2KsIgo= Subject key identifier: DD:9C:85:32:C7:4D:48:4D:AE:67:31:68:B2:F5:0F:B3:5A:12:6F:06 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1DE494FF1112AFF65072AB80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 270165 IP address blocks: 38.19.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:94:ff:11:12:af:f6:50:72:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=a71865ba-412f-41da-9671-abe2daa964a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:68:d1:31:46:93:0c:a1:f0:8c:98:ef:4b: 7f:07:5c:7c:52:56:ea:20:8d:c4:8f:4c:e7:a1:23: c0:c1:65:41:4b:1d:f7:2b:4a:3f:69:e8:f4:28:e7: fd:e4:6e:88:c6:a6:b1:38:34:9e:30:58:aa:78:30: a7:ea:5e:c6:0c:62:b2:d0:15:f8:93:81:e8:f2:fd: 09:79:6d:46:97:7f:dd:c4:da:cb:e9:36:df:61:6d: 36:2e:0f:de:b7:95:66:f9:cc:74:5a:f1:40:fe:39: 6e:b4:34:21:07:09:da:3f:e1:78:24:eb:a2:b6:36: 01:a8:8e:40:27:28:e5:65:58:1c:9f:e4:cc:17:5d: c9:cc:f1:2a:a5:27:7c:36:01:5c:99:8e:0a:87:4c: 14:62:4e:13:1d:58:8a:71:fb:0e:45:30:04:21:cb: f4:9e:65:b1:1d:cf:fe:97:f1:a0:f2:fb:e5:59:64: f4:2c:f3:e7:26:72:d7:3b:08:1e:df:15:7d:ee:99: c3:86:d2:6f:00:e1:27:4c:f5:82:3c:3a:c8:04:85: bc:3e:6e:82:1a:c4:3c:99:61:8f:ab:c2:42:0f:68: e0:0c:56:04:2e:e6:b5:dd:93:1a:6e:78:69:82:21: 73:af:9c:7e:05:4c:23:5c:6e:c2:91:b3:2e:81:11: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:85:32:C7:4D:48:4D:AE:67:31:68:B2:F5:0F:B3:5A:12:6F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:96:01:04:28:9e:b4:a4:b5:45:3c:d3:90:11:74:e0:7a:2a: 08:0f:9b:4a:b1:24:77:37:7e:ac:52:4a:f2:b8:9b:a0:cc:88: 80:31:be:7e:31:b4:3c:d8:1e:f9:0f:e6:3c:fb:31:40:98:87: 5a:67:fb:37:44:64:4c:b6:14:2f:f1:7d:51:83:67:c4:83:24: 87:53:ad:42:6b:f3:1d:17:ad:1a:1f:e1:ad:04:6e:9a:f9:96: d4:3a:07:3c:09:48:1e:41:92:2a:2a:70:de:26:1c:9e:06:5e: 3e:59:95:96:63:95:11:90:1b:21:d8:4c:56:80:e6:e4:df:ff: f6:00:b4:6b:48:2d:87:70:9d:4e:5f:f1:88:c7:1b:be:37:97: 42:4f:2a:62:7d:d3:13:6f:c7:65:f1:89:56:12:6f:99:a6:2d: db:75:15:e0:0a:c3:52:59:b2:a8:e2:31:c3:62:a4:21:4f:e1: b7:45:95:ec:5d:b1:88:73:e0:e4:12:0f:58:03:7e:7c:81:72: ad:ac:de:8c:d6:96:db:65:e4:af:3b:a5:fc:07:ee:61:9d:09: bd:c6:34:a4:7e:26:f5:7c:87:a8:0e:bd:a0:15:36:b2:6e:db: 4f:73:9a:c1:9b:34:a3:1e:42:d5:26:fc:2c:f0:25:0b:d7:07: e1:4c:43:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JT/ERKv9lByq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk YTcxODY1YmEtNDEyZi00MWRhLTk2NzEtYWJlMmRhYTk2NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmZo0TFGkwyh8IyY70t/B1x8UlbqII3Ej0zn oSPAwWVBSx33K0o/aej0KOf95G6IxqaxODSeMFiqeDCn6l7GDGKy0BX4k4Ho8v0J eW1Gl3/dxNrL6TbfYW02Lg/et5Vm+cx0WvFA/jlutDQhBwnaP+F4JOuitjYBqI5A JyjlZVgcn+TMF13JzPEqpSd8NgFcmY4Kh0wUYk4THViKcfsORTAEIcv0nmWxHc/+ l/Gg8vvlWWT0LPPnJnLXOwge3xV97pnDhtJvAOEnTPWCPDrIBIW8Pm6CGsQ8mWGP q8JCD2jgDFYELua13ZMabnhpgiFzr5x+BUwjXG7CkbMugRGvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2chTLHTUhNrmcxaLL1D7NaEm8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDk1MmY0M2UtMTZiNy0z MDMwLTk1YTMtNDhhOTg5MDU5NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGWAQQonrSktUU805ARdOB6KggPm0qxJHc3fqxSSvK4m6DMiIAxvn4x tDzYHvkP5jz7MUCYh1pn+zdEZEy2FC/xfVGDZ8SDJIdTrUJr8x0XrRof4a0Ebpr5 ltQ6BzwJSB5BkioqcN4mHJ4GXj5ZlZZjlRGQGyHYTFaA5uTf//YAtGtILYdwnU5f 8YjHG743l0JPKmJ90xNvx2XxiVYSb5mmLdt1FeAKw1JZsqjiMcNipCFP4bdFlexd sYhz4OQSD1gDfnyBcq2s3ozWlttl5K87pfwH7mGdCb3GNKR+JvV8h6gOvaAVNrJu 209zmsGbNKMeQtUm/CzwJQvXB+FMQ+c= -----END CERTIFICATE-----Generated at Sat Mar 14 18:23:42 2026 by rpki-client