$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e5fc086-7b9b-3542-807a-9907765ff930.roa File: 3e5fc086-7b9b-3542-807a-9907765ff930.roa (raw, json) Hash identifier: mx4jB+PpLKtTrlUv1e2YOhKl6+BrSLtGrU6k2LsjaiU= Subject key identifier: B9:4D:33:72:4C:45:5B:B0:D1:5B:57:71:CB:7F:62:4A:33:23:40:AF Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D15A24FEACBAC56B22C249A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e5fc086-7b9b-3542-807a-9907765ff930.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 270068 IP address blocks: 38.19.16.0/20 maxlen: 24 38.250.128.0/21 maxlen: 24 38.250.144.0/20 maxlen: 24 38.250.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:4f:ea:cb:ac:56:b2:2c:24:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=f0b88df8-52b8-4476-a2d0-c3284badd5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:8f:c4:c3:f8:69:65:d8:d7:8e:cc:ef:c9: dc:2c:00:62:1d:db:a4:f5:07:43:9d:ef:80:2a:a1: 16:d9:17:94:0d:93:12:e8:e9:ed:78:f1:53:03:44: 9f:a6:e8:bd:a6:55:b8:67:d1:3d:1e:85:c1:1b:ed: 01:b3:42:5e:0f:91:03:66:e6:90:8f:84:3f:1f:71: 23:26:c7:50:79:7d:2f:a9:6c:1c:d1:10:30:a2:17: 7c:76:43:20:e1:16:64:4a:67:ad:8a:c6:00:a5:f2: 0f:8b:7b:8d:02:a5:14:f1:0a:f3:b7:12:a2:87:19: ed:87:65:8d:43:48:15:49:f3:41:e9:be:90:ba:5f: 6e:1d:d5:d4:a9:f5:e0:dc:88:51:b9:35:01:bd:ea: a7:1d:e0:bd:5b:99:ea:e7:57:ab:92:16:e6:4b:24: 9a:2e:4a:19:08:2d:16:41:a0:84:fb:00:c5:55:c0: 42:78:bd:7b:55:ad:bc:63:b0:b1:08:35:21:b3:7a: 62:58:bf:52:fa:11:31:8b:2e:cb:fa:07:58:ba:a7: 01:fe:55:72:57:e7:91:ca:2b:89:50:a0:02:73:c3: ef:ba:89:c1:57:50:3d:ad:ae:cc:36:5b:f9:24:44: 52:93:ab:f9:6a:a8:df:c8:f0:36:4f:a7:d8:ff:d0: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4D:33:72:4C:45:5B:B0:D1:5B:57:71:CB:7F:62:4A:33:23:40:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e5fc086-7b9b-3542-807a-9907765ff930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.16.0/20 38.250.128.0/21 38.250.144.0/20 38.250.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:73:2a:44:68:17:9b:02:18:52:48:96:ab:ef:72:91:4d:96: 7f:b4:06:2b:32:52:01:1e:1a:de:dc:5c:8e:99:d7:88:28:bc: 46:d9:b6:da:54:d9:fe:74:4d:e8:ee:28:7a:74:9f:1c:e1:fb: eb:53:b7:b9:19:00:58:60:53:cc:a7:af:e9:d7:c8:52:9a:c6: 71:15:44:70:cc:91:88:eb:6e:9e:a2:4b:48:43:29:9f:34:d9: 7d:1d:87:5d:1e:96:42:c8:ce:80:79:f2:1b:e2:d2:92:d3:37: a8:86:c8:bf:b1:50:48:59:e0:2f:3b:f3:e5:55:cd:5b:f4:5b: 94:04:43:94:de:a9:34:2f:fb:c4:8a:1e:83:a4:7d:17:0c:83: f5:37:b5:a9:35:5c:cd:3f:7a:c2:ac:12:07:ef:ee:fe:ee:b5: 82:e4:ac:16:e2:47:df:c2:7d:80:aa:01:de:29:99:78:79:e1: 79:25:14:76:0a:a2:c2:0f:57:a7:23:8c:95:a8:60:9c:d3:7d: 0c:e5:9e:b3:ab:54:05:fd:7c:6c:a7:dc:d7:60:cd:f0:84:37: ba:09:23:5d:82:d5:51:0f:5b:9f:c3:64:3d:4c:d6:c1:52:8a: de:65:f1:2a:9d:6c:f3:30:ea:e7:2a:69:2d:b3:cd:a1:ee:c3: d0:48:57:18 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE0Vok/qy6xWsiwkmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZjBiODhkZjgtNTJiOC00NDc2LWEyZDAtYzMyODRiYWRkNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvuPxMP4aWXY147M78ncLABiHduk9QdDne+A KqEW2ReUDZMS6OntePFTA0Sfpui9plW4Z9E9HoXBG+0Bs0JeD5EDZuaQj4Q/H3Ej JsdQeX0vqWwc0RAwohd8dkMg4RZkSmetisYApfIPi3uNAqUU8QrztxKihxnth2WN Q0gVSfNB6b6Qul9uHdXUqfXg3IhRuTUBveqnHeC9W5nq51erkhbmSySaLkoZCC0W QaCE+wDFVcBCeL17Va28Y7CxCDUhs3piWL9S+hExiy7L+gdYuqcB/lVyV+eRyiuJ UKACc8PvuonBV1A9ra7MNlv5JERSk6v5aqjfyPA2T6fY/9BIdQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFLlNM3JMRVuw0VtXcct/YkozI0CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2U1ZmMwODYtN2I5Yi0z NTQyLTgwN2EtOTkwNzc2NWZmOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEJhMQAwQD JvqAAwQEJvqQAwQEJvqwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJpzKkRoF5sCGFJIlqvvcpFNln+0Bisy UgEeGt7cXI6Z14govEbZttpU2f50TejuKHp0nxzh++tTt7kZAFhgU8ynr+nXyFKa xnEVRHDMkYjrbp6iS0hDKZ802X0dh10elkLIzoB58hvi0pLTN6iGyL+xUEhZ4C87 8+VVzVv0W5QEQ5TeqTQv+8SKHoOkfRcMg/U3tak1XM0/esKsEgfv7v7utYLkrBbi R9/CfYCqAd4pmXh54XklFHYKosIPV6cjjJWoYJzTfQzlnrOrVAX9fGyn3NdgzfCE N7oJI12C1VEPW5/DZD1M1sFSit5l8SqdbPMw6ucqaS2zzaHuw9BIVxg= -----END CERTIFICATE-----Generated at Sat Mar 14 18:22:13 2026 by rpki-client