$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa File: 17f967e2-483e-360d-b576-18d7416b8529.roa (raw, json) Hash identifier: GeAxYm2zZIJh0fvCJuI+bv8IlHORabfxsJqHNVIJoJQ= Subject key identifier: CF:90:09:73:AE:C6:BE:71:E1:4C:E7:2F:6E:8D:DF:4C:8F:47:DA:57 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D20AF407C48FB6E5B93039540 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 60404 IP address blocks: 38.93.136.0/24 maxlen: 24 38.94.107.0/24 maxlen: 24 38.97.7.0/24 maxlen: 24 38.108.186.0/23 maxlen: 23 38.109.8.0/24 maxlen: 24 38.109.9.0/24 maxlen: 24 38.131.1.0/24 maxlen: 24 38.150.114.0/24 maxlen: 24 149.115.109.0/24 maxlen: 24 149.115.110.0/24 maxlen: 24 149.115.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:40:7c:48:fb:6e:5b:93:03:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=753f2f2b-e506-4ae3-9bdd-d2befc94f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:09:eb:9f:d3:c5:5e:16:99:05:52:23:b0: fc:bb:85:8c:57:4c:53:10:44:9a:4d:8c:1e:94:ab: 9f:a8:5c:b0:6a:2e:47:f3:0f:ce:99:95:52:30:32: ef:ca:df:3d:db:e2:04:34:31:e9:47:b8:c0:61:19: 04:be:b6:5c:ca:cf:75:e0:b2:86:b7:4d:7a:93:d4: a3:4d:af:e5:74:12:70:74:da:c4:cf:e1:cb:68:9d: 6e:74:3d:1d:a9:54:10:0b:11:33:b1:19:2a:1a:c7: 96:dd:44:0b:f4:e4:64:2f:dd:99:ef:04:f2:8e:1a: c5:0d:36:98:b0:c2:d7:a9:a5:58:8e:2c:f3:4a:84: a6:0e:ae:2c:6c:c4:7f:60:d3:5e:be:86:cf:5b:ac: 1e:15:a9:89:3a:bb:5b:de:0e:db:f8:fe:0b:af:7a: c1:47:f3:12:9b:6b:12:89:56:b3:8f:5a:cf:e1:a3: 23:df:9a:e0:70:26:9b:09:4e:85:71:21:be:9c:9f: 0f:e4:83:58:0b:5d:83:a7:04:31:93:79:5a:53:e1: 9d:66:37:95:22:b4:cd:e4:fa:43:cf:29:29:14:9f: e8:fa:00:ec:0b:8b:df:0c:b1:a6:6a:62:37:e5:26: 65:52:7b:60:ca:e1:f6:5f:ba:7e:62:1e:be:27:9c: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:90:09:73:AE:C6:BE:71:E1:4C:E7:2F:6E:8D:DF:4C:8F:47:DA:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.93.136.0/24 38.94.107.0/24 38.97.7.0/24 38.108.186.0/23 38.109.8.0/23 38.131.1.0/24 38.150.114.0/24 149.115.109.0-149.115.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:46:c9:09:d2:58:e5:8b:6c:f7:1a:d1:bf:86:97:a8:d7:af: c7:02:3e:d8:dc:29:63:80:8e:9e:9f:2c:71:dd:77:ac:d1:39: fb:24:85:94:de:4e:ad:bb:0e:e4:9f:31:06:6b:f6:fd:2f:88: 93:33:9a:d9:fc:2a:00:bb:6b:45:d4:b0:70:fe:4e:4b:bd:88: 40:2b:d8:d0:82:35:bb:cd:36:7c:06:cf:bb:1e:fb:d5:da:82: 7d:ab:41:03:d6:27:e8:88:70:8f:5b:db:97:59:7a:f4:b2:2e: 23:64:aa:fe:d1:26:35:53:78:ca:12:b0:c8:d7:33:51:c7:18: fb:a1:65:40:9a:03:a0:7b:f8:f6:98:32:ed:42:d4:92:fc:7a: c9:ae:cd:64:9d:bb:3c:89:35:c9:8e:d6:f9:68:fb:70:12:7b: c4:36:de:ea:e8:82:69:08:ce:e4:a1:a8:91:7b:30:35:de:c7: 5c:0a:41:e5:a9:42:e8:7b:dd:02:2f:88:22:8a:fd:89:da:07: 20:15:82:b9:e4:fa:8f:84:ac:b0:a2:04:8b:64:9a:b2:49:55: 6e:ea:f7:9f:db:f9:c3:c4:80:8e:23:32:40:17:0b:97:1c:87: 60:72:6c:c0:3c:8f:d4:81:b3:dc:ac:78:cc:81:5d:9a:df:9b: 46:c7:ae:e5 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE0gr0B8SPtuW5MDlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NzUzZjJmMmItZTUwNi00YWUzLTliZGQtZDJiZWZjOTRmNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3YJ65/TxV4WmQVSI7D8u4WMV0xTEESaTYwe lKufqFywai5H8w/OmZVSMDLvyt892+IENDHpR7jAYRkEvrZcys914LKGt016k9Sj Ta/ldBJwdNrEz+HLaJ1udD0dqVQQCxEzsRkqGseW3UQL9ORkL92Z7wTyjhrFDTaY sMLXqaVYjizzSoSmDq4sbMR/YNNevobPW6weFamJOrtb3g7b+P4Lr3rBR/MSm2sS iVazj1rP4aMj35rgcCabCU6FcSG+nJ8P5INYC12DpwQxk3laU+GdZjeVIrTN5PpD zykpFJ/o+gDsC4vfDLGmamI35SZlUntgyuH2X7p+Yh6+J5z+owIDAQABo4IDhzCC A4MwHQYDVR0OBBYEFM+QCXOuxr5x4UznL26N30yPR9pXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTdmOTY3ZTItNDgzZS0z NjBkLWI1NzYtMThkNzQxNmI4NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAJl2IAwQA Jl5rAwQAJmEHAwQBJmy6AwQBJm0IAwQAJoMBAwQAJpZyMAwDBACVc20DBASVc2Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAl0bJCdJY5Yts9xrRv4aXqNevxwI+2NwpY4COnp8scd13rNE5+ySF lN5OrbsO5J8xBmv2/S+IkzOa2fwqALtrRdSwcP5OS72IQCvY0II1u802fAbPux77 1dqCfatBA9Yn6Ihwj1vbl1l69LIuI2Sq/tEmNVN4yhKwyNczUccY+6FlQJoDoHv4 9pgy7ULUkvx6ya7NZJ27PIk1yY7W+Wj7cBJ7xDbe6uiCaQjO5KGokXswNd7HXApB 5alC6HvdAi+IIor9idoHIBWCueT6j4SssKIEi2SasklVbur3n9v5w8SAjiMyQBcL lxyHYHJswDyP1IGz3Kx4zIFdmt+bRseu5Q== -----END CERTIFICATE-----Generated at Sat Mar 14 18:22:55 2026 by rpki-client