$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa File: 8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa (raw, json) Hash identifier: u+e/rxjldV+UlEjVAZ52camEpMPIXKs/8eLcjYVnfrg= Subject key identifier: 10:6E:40:4A:FD:D7:AF:A1:53:65:0E:16:7E:A1:F4:7F:4C:FD:8E:EC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4ED2540E9B326E2E2F22B540 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa Signing time: Fri 27 Mar 2026 13:38:25 +0000 ROA not before: Fri 27 Mar 2026 13:38:25 +0000 ROA not after: Thu 25 Jun 2026 13:38:25 +0000 asID: 203466 IP address blocks: 38.45.18.0/24 maxlen: 24 206.42.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:d2:54:0e:9b:32:6e:2e:2f:22:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 27 13:38:25 2026 GMT Not After : Jun 25 13:38:25 2026 GMT Subject: CN=9c4adfe2-dbc7-4b20-bc61-5fa4349c20e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:14:ba:45:60:23:04:e1:8c:b8:f0:60:d4: 3b:13:e0:78:43:48:4d:52:88:9d:9f:97:23:12:7d: dc:4b:3e:30:1c:50:c6:46:01:43:3d:06:b6:18:74: 1e:d1:6c:02:87:f9:af:e5:84:e7:43:4c:2c:26:5f: 26:b8:cf:c8:67:ab:59:69:33:6c:a7:aa:24:41:28: 47:df:d5:17:0c:a2:f5:c7:8c:c6:ce:3f:5b:f9:80: 95:17:ac:82:f8:c0:c3:2e:0b:7f:db:bb:f3:0a:21: 9d:fb:61:16:3b:60:f5:08:e2:3a:87:15:09:16:93: 7f:28:c1:62:68:5f:16:12:a0:81:4c:20:9a:29:eb: ca:a8:4a:48:56:f8:0c:62:4c:21:6b:dd:b4:68:29: ae:ae:d4:db:04:91:da:80:f1:9c:43:5a:04:39:84: b8:10:36:1a:77:4c:de:d3:bb:64:17:7e:c4:4e:ab: d4:ff:96:e0:f5:6c:7d:34:da:bc:4d:d4:57:2f:e2: f5:67:05:f7:1a:ba:c2:d1:a6:03:41:d6:1a:aa:c5: 18:d2:05:9e:a8:24:78:ff:b3:a8:44:c5:0d:af:3b: 04:c9:3d:71:6b:6c:a6:3b:17:77:ce:67:ea:e4:7d: 81:39:dd:92:a6:1a:70:ca:d8:29:e6:69:f4:ca:c7: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:40:4A:FD:D7:AF:A1:53:65:0E:16:7E:A1:F4:7F:4C:FD:8E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.18.0/24 206.42.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8e:dd:63:13:df:93:7c:f2:af:73:37:1c:7f:99:f5:e7:cf: 7b:e9:63:4e:86:2f:da:26:d1:4e:8c:4e:14:63:39:cd:47:6b: ae:1b:54:b0:c7:48:1f:e8:17:49:a0:a3:51:80:4e:8c:4d:a3: 84:a4:80:58:77:6a:8a:42:1c:04:63:92:d4:fd:ec:f8:a0:b4: 34:e7:b1:e3:59:12:6d:ba:71:9a:10:5d:21:45:3f:31:02:5e: 09:51:ab:a0:dd:80:7d:79:28:69:cd:44:63:a5:9b:2a:4e:a3: e1:ce:8b:ab:2f:cb:86:92:24:f2:4c:8f:15:e0:97:f1:bd:01: 6d:a5:b7:7f:10:dc:1c:88:a2:b5:6f:27:3d:b5:22:10:56:9d: f0:4b:62:b8:44:db:29:37:78:77:33:97:0e:7f:48:44:d4:04: de:9d:c3:21:e3:33:52:05:33:0d:47:8c:cd:9c:01:d3:f6:d3: c4:a3:b3:bc:27:28:ba:18:2e:d3:92:35:40:b9:75:89:d6:8c: 43:e8:6e:5d:08:88:17:c0:69:a6:3d:a9:d0:e8:c0:10:e9:c0: 5a:d2:93:52:b0:36:f6:47:82:ab:90:76:2f:81:02:b1:bf:de: 73:0d:6d:55:30:bf:bb:1d:7b:c0:55:63:d5:fa:6f:84:b0:ea: 58:eb:29:ff -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1O0lQOmzJuLi8itUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNzEzMzgyNVoXDTI2MDYyNTEzMzgyNVowLzEtMCsGA1UEAxMk OWM0YWRmZTItZGJjNy00YjIwLWJjNjEtNWZhNDM0OWMyMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRUUukVgIwThjLjwYNQ7E+B4Q0hNUoidn5cj En3cSz4wHFDGRgFDPQa2GHQe0WwCh/mv5YTnQ0wsJl8muM/IZ6tZaTNsp6okQShH 39UXDKL1x4zGzj9b+YCVF6yC+MDDLgt/27vzCiGd+2EWO2D1COI6hxUJFpN/KMFi aF8WEqCBTCCaKevKqEpIVvgMYkwha920aCmurtTbBJHagPGcQ1oEOYS4EDYad0ze 07tkF37ETqvU/5bg9Wx9NNq8TdRXL+L1ZwX3GrrC0aYDQdYaqsUY0gWeqCR4/7Oo RMUNrzsEyT1xa2ymOxd3zmfq5H2BOd2Sphpwytgp5mn0yseSpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBBuQEr916+hU2UOFn6h9H9M/Y7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGE3ZjdhODQtZGRiYS0z YWE3LTg4MGYtYTg0Y2QyYjE0YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJi0SAwQA ziptMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFaO3WMT35N88q9zNxx/mfXnz3vpY06GL9om0U6MThRjOc1H a64bVLDHSB/oF0mgo1GAToxNo4SkgFh3aopCHARjktT97PigtDTnseNZEm26cZoQ XSFFPzECXglRq6DdgH15KGnNRGOlmypOo+HOi6svy4aSJPJMjxXgl/G9AW2lt38Q 3ByIorVvJz21IhBWnfBLYrhE2yk3eHczlw5/SETUBN6dwyHjM1IFMw1HjM2cAdP2 08Sjs7wnKLoYLtOSNUC5dYnWjEPobl0IiBfAaaY9qdDowBDpwFrSk1KwNvZHgquQ di+BArG/3nMNbVUwv7sde8BVY9X6b4Sw6ljrKf8= -----END CERTIFICATE-----Generated at Sun Mar 29 18:37:17 2026 by rpki-client