$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa File: 1271aa39-6b6a-39a9-9818-a7a497734b16.roa (raw, json) Hash identifier: r6h8+pF+6GtZrJFq5W+BnTekShsgPTxB6R2XTJc8FRQ= Subject key identifier: 51:32:C2:8B:09:69:81:78:BE:22:0E:CE:54:29:C7:E6:66:7B:FE:F1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1F4A38C6E0D1B2FE75D65880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 0 IP address blocks: 38.95.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:38:c6:e0:d1:b2:fe:75:d6:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=849e78e0-6f37-4105-a2c6-7dd3bc963f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:df:74:73:d4:a6:55:76:48:cc:04:bd:34: 57:6c:b9:05:5e:04:2f:70:17:61:b5:ec:91:ec:f3: 9a:93:9b:05:0f:a5:63:c3:91:86:ff:25:ce:5a:25: 9f:6b:74:26:2e:87:71:c9:61:e2:f1:12:7d:3c:4f: 69:00:e9:b3:e1:02:f0:94:4c:25:88:8e:14:52:3b: 82:65:48:7d:03:15:59:f1:52:ea:8b:d4:29:b8:33: ba:90:32:3d:79:81:3b:e5:80:e5:04:9b:d6:d8:8d: 72:0c:ad:09:b0:52:d5:38:ec:63:8e:f1:98:f0:f5: 60:84:8e:c6:c1:db:3a:e4:a2:ba:88:58:38:65:3d: b2:9e:4d:98:c6:45:2c:ac:2c:99:6b:54:f8:93:cd: 8b:a1:da:c9:86:c1:b0:d6:4d:fa:92:46:74:54:19: 20:c3:73:bb:37:55:0a:83:29:d7:2f:78:13:d5:7b: 25:1a:94:bf:bc:49:22:58:d4:21:06:11:69:aa:78: 6d:a6:f3:c5:94:4f:87:4b:18:9a:c7:25:cf:96:76: 79:5b:1a:0a:de:b5:df:1c:bc:d4:e0:79:75:5c:53: 69:cb:8a:8c:13:44:42:c0:c2:a8:ce:2f:b9:6f:60: ef:a1:80:c2:be:22:38:8d:dc:6c:fa:0e:5b:54:2a: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:32:C2:8B:09:69:81:78:BE:22:0E:CE:54:29:C7:E6:66:7B:FE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.95.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:36:f6:aa:2b:f1:47:d9:d0:e0:d3:69:3d:6c:32:33:b6:39: 60:4f:b1:dd:94:56:c0:51:73:6e:96:2e:8e:23:2d:0b:d7:ee: 46:9d:b8:e2:19:d6:66:62:c1:fe:b1:d3:10:65:c2:ce:94:8c: f4:19:fe:59:7f:be:14:de:da:0b:03:21:9e:68:48:34:d8:f3: 53:db:14:f6:b2:c8:a6:59:24:83:38:20:77:17:69:73:27:e9: 7d:80:3b:00:79:47:75:d8:31:9b:27:ca:57:6d:bd:29:3d:c5: 77:55:1d:58:f3:90:38:1d:86:87:b3:98:4b:83:ad:eb:28:86: b2:fe:02:b5:8c:87:d8:76:d5:5a:84:0a:d8:67:ed:df:58:11: 58:26:40:66:cd:15:c4:b7:76:0f:9d:1e:07:9a:63:03:af:a8: c2:bb:30:81:66:e3:55:89:1b:41:b4:67:6c:c5:e0:74:5a:93: a3:a4:15:69:8a:a3:ad:47:59:9b:01:96:f3:fc:3e:50:87:08: b6:05:7b:ea:14:82:48:16:a3:e0:d0:61:d5:9a:63:b8:7f:94: fb:42:d8:75:18:b7:e9:4e:58:7e:1f:f9:ff:95:5d:2a:ed:fd: 81:a0:41:77:f6:1f:ca:53:8f:9e:d2:82:bc:21:c1:8a:84:db: ec:40:db:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjjG4NGy/nXWWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODQ5ZTc4ZTAtNmYzNy00MTA1LWEyYzYtN2RkM2JjOTYzZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycDfdHPUplV2SMwEvTRXbLkFXgQvcBdhteyR 7POak5sFD6Vjw5GG/yXOWiWfa3QmLodxyWHi8RJ9PE9pAOmz4QLwlEwliI4UUjuC ZUh9AxVZ8VLqi9QpuDO6kDI9eYE75YDlBJvW2I1yDK0JsFLVOOxjjvGY8PVghI7G wds65KK6iFg4ZT2ynk2YxkUsrCyZa1T4k82LodrJhsGw1k36kkZ0VBkgw3O7N1UK gynXL3gT1XslGpS/vEkiWNQhBhFpqnhtpvPFlE+HSxiaxyXPlnZ5WxoK3rXfHLzU 4Hl1XFNpy4qME0RCwMKozi+5b2DvoYDCviI4jdxs+g5bVCoXVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEywosJaYF4viIOzlQpx+Zme/7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTI3MWFhMzktNmI2YS0z OWE5LTk4MTgtYTdhNDk3NzM0YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJl8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw29qor8UfZ0ODTaT1sMjO2OWBPsd2UVsBRc26WLo4jLQvX7kaduOIZ 1mZiwf6x0xBlws6UjPQZ/ll/vhTe2gsDIZ5oSDTY81PbFPayyKZZJIM4IHcXaXMn 6X2AOwB5R3XYMZsnyldtvSk9xXdVHVjzkDgdhoezmEuDresohrL+ArWMh9h21VqE Cthn7d9YEVgmQGbNFcS3dg+dHgeaYwOvqMK7MIFm41WJG0G0Z2zF4HRak6OkFWmK o61HWZsBlvP8PlCHCLYFe+oUgkgWo+DQYdWaY7h/lPtC2HUYt+lOWH4f+f+VXSrt /YGgQXf2H8pTj57SgrwhwYqE2+xA28M= -----END CERTIFICATE-----Generated at Sat Mar 14 18:23:41 2026 by rpki-client