$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/151a71d8-a4c3-3cb5-9c35-ee11620e3d47.roa File: 151a71d8-a4c3-3cb5-9c35-ee11620e3d47.roa (raw, json) Hash identifier: GQ3sK0rOYwWogVMon9J/fx1mrz2KmBrMOEnSh1GcCh8= Subject key identifier: 35:F6:5C:20:35:27:EC:CA:4A:D9:0C:B1:66:D5:7C:ED:FE:98:95:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1B19E5DDEDAE952680C3FB60 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/151a71d8-a4c3-3cb5-9c35-ee11620e3d47.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 64139 IP address blocks: 38.211.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e5:dd:ed:ae:95:26:80:c3:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=f671b9ae-08b3-4b54-9b5c-48997a825f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:99:c8:18:0a:a7:ef:ae:a3:b9:30:95:9d: 7a:d9:eb:31:3f:91:44:9b:c6:b4:68:d1:2c:80:32: 2a:30:51:24:6d:de:aa:0f:7a:fb:58:6e:94:73:ea: 47:3a:f3:a8:4f:e3:2f:38:f6:e4:a6:ba:d7:9d:83: a0:c0:6a:92:d3:8c:94:60:94:54:d7:dd:b5:96:5b: cf:81:3e:19:ff:d5:3a:7f:42:4c:1f:c3:9c:65:64: d4:fc:a4:e5:ab:a9:49:bd:b6:4e:6f:64:77:8a:26: 4c:0f:38:89:29:79:d1:ac:ec:48:ae:7a:c8:4d:d2: d6:fe:c9:ec:88:bd:07:1c:6d:69:8f:87:f0:b4:50: 20:6e:72:2b:29:aa:f6:b9:9c:be:13:bb:56:36:e3: d9:5a:8b:e1:81:f6:95:17:a0:ed:89:ee:cc:b0:91: 63:2d:1b:88:ce:60:14:1e:dc:b1:0d:e0:9c:cc:67: 06:05:6e:3f:03:c4:81:05:37:76:32:53:d9:e2:4b: 5a:d2:df:f7:75:55:20:c0:ef:08:d5:13:59:8f:0f: e2:21:12:f7:51:0d:4a:22:8a:fe:a8:13:23:2c:4c: 67:88:ed:67:8d:4e:fa:3e:5c:96:84:bf:50:5a:e8: 91:d9:f6:cf:f2:9c:16:78:a4:d1:1f:c6:c8:76:3b: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F6:5C:20:35:27:EC:CA:4A:D9:0C:B1:66:D5:7C:ED:FE:98:95:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/151a71d8-a4c3-3cb5-9c35-ee11620e3d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ae:cc:cc:73:ec:b3:f1:9d:a6:8f:32:f1:15:15:08:c3:32: 5f:4f:b8:a8:66:cb:27:1e:66:13:d4:99:b8:92:de:cc:69:2a: a2:83:cc:d6:1f:1e:84:3b:9b:65:6d:ca:68:ad:e6:3b:0a:2b: 0f:4f:26:32:a9:7e:d1:06:85:66:00:59:cf:d0:17:b8:6e:b1: 6a:9a:20:94:9e:b9:eb:5a:75:0c:13:be:a6:4b:26:61:fd:8b: 86:dd:82:b2:30:d9:f5:0e:3d:34:38:bf:b5:bf:3a:bf:96:66: be:56:5f:39:23:f4:03:d3:bf:f8:a7:0f:76:8d:ea:3d:84:b1: f0:37:ba:c5:38:fa:78:0a:5c:a0:70:38:62:f7:9d:ed:4b:c9: 5a:91:4f:68:75:bc:dc:a5:bf:5b:bd:d7:06:21:2e:de:e5:85: 98:6c:84:40:93:c4:51:87:fb:fb:bc:5f:88:30:4c:14:a5:4a: 93:c4:4a:ad:a0:38:bf:4e:33:a0:dc:58:d9:15:e9:a6:8f:40: 66:ba:87:25:66:0e:d6:35:ac:66:b7:65:f9:7c:75:d2:1f:ba: 91:6c:ae:94:21:5f:c3:e4:73:f9:57:ef:6c:bd:f8:bc:66:ff: 1f:2e:e5:fb:17:64:5f:ea:9a:ad:3e:48:74:84:11:cc:09:cd: a0:dd:4d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeXd7a6VJoDD+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZjY3MWI5YWUtMDhiMy00YjU0LTliNWMtNDg5OTdhODI1ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikqZyBgKp++uo7kwlZ162esxP5FEm8a0aNEs gDIqMFEkbd6qD3r7WG6Uc+pHOvOoT+MvOPbkprrXnYOgwGqS04yUYJRU1921llvP gT4Z/9U6f0JMH8OcZWTU/KTlq6lJvbZOb2R3iiZMDziJKXnRrOxIrnrITdLW/sns iL0HHG1pj4fwtFAgbnIrKar2uZy+E7tWNuPZWovhgfaVF6Dtie7MsJFjLRuIzmAU HtyxDeCczGcGBW4/A8SBBTd2MlPZ4kta0t/3dVUgwO8I1RNZjw/iIRL3UQ1KIor+ qBMjLExniO1njU76PlyWhL9QWuiR2fbP8pwWeKTRH8bIdjvPGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX2XCA1J+zKStkMsWbVfO3+mJXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTUxYTcxZDgtYTRjMy0z Y2I1LTljMzUtZWUxMTYyMGUzZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJtOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6uzMxz7LPxnaaPMvEVFQjDMl9PuKhmyyceZhPUmbiS3sxpKqKDzNYf HoQ7m2Vtymit5jsKKw9PJjKpftEGhWYAWc/QF7husWqaIJSeuetadQwTvqZLJmH9 i4bdgrIw2fUOPTQ4v7W/Or+WZr5WXzkj9APTv/inD3aN6j2EsfA3usU4+ngKXKBw OGL3ne1LyVqRT2h1vNylv1u91wYhLt7lhZhshECTxFGH+/u8X4gwTBSlSpPESq2g OL9OM6DcWNkV6aaPQGa6hyVmDtY1rGa3Zfl8ddIfupFsrpQhX8Pkc/lX72y9+Lxm /x8u5fsXZF/qmq0+SHSEEcwJzaDdTRM= -----END CERTIFICATE-----Generated at Sat Mar 14 18:21:02 2026 by rpki-client