$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa File: 8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa (raw, json) Hash identifier: 6zKmJE0cy+wBEh+Txl4BH/jQDOk1go/k8kmscetxaPk= Subject key identifier: CA:EB:5F:B2:40:6E:55:F1:22:D5:6C:1F:28:F0:3F:6E:8D:A6:18:F5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D186CFE6944BEE4636E571480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 0 IP address blocks: 38.58.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:fe:69:44:be:e4:63:6e:57:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=bb71f510-3fdf-4d55-9f50-7af5d754a7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:4b:7e:80:c6:57:9f:d6:b1:9b:05:63:39: 76:57:ab:7e:56:3f:6b:aa:33:10:cc:81:fd:0f:58: 5c:cd:6e:cf:45:a6:27:81:1f:3a:f4:b3:55:2b:30: 0f:64:c3:ae:8d:e8:9a:ff:58:e9:c8:f5:5f:48:92: c3:3d:07:a9:c4:84:12:9a:38:60:d3:b0:5a:68:2d: 2a:73:23:f7:47:bf:66:17:7e:3c:6a:21:fc:74:91: 79:a7:69:a4:e0:b4:5d:9f:06:de:df:47:ea:d7:57: af:7b:8e:bd:58:4e:e1:06:10:99:c6:04:1a:f3:90: 46:d9:99:df:0d:8d:04:4f:42:77:f9:6f:21:87:66: 4d:c2:35:02:54:4c:6e:a4:d7:48:a8:4c:10:dc:2f: b3:7f:c7:da:02:18:f6:95:b0:d6:10:52:fc:fc:15: af:c1:5d:19:93:7d:bb:58:2a:d7:c6:b2:8d:cb:4d: 7f:2c:61:cc:fe:db:66:a5:0f:a1:95:e0:7c:96:d6: 5a:31:a1:61:a8:a3:85:40:98:63:5a:00:2c:43:5c: c3:3c:a0:10:2f:5b:4c:ac:38:9d:e5:48:99:e2:20: 2a:1c:26:42:74:25:81:fc:9a:6a:9c:46:1d:70:dd: 05:ee:c2:04:f4:68:40:43:52:b2:a6:2a:18:b5:18: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:5F:B2:40:6E:55:F1:22:D5:6C:1F:28:F0:3F:6E:8D:A6:18:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d7:5c:e4:77:34:47:68:06:71:7f:c9:57:0b:69:3e:08:90: f8:b0:bf:aa:56:0b:ab:07:b0:35:fa:15:61:82:75:8e:6b:89: 0c:fa:18:e3:9a:08:25:1f:28:99:e4:9f:04:ee:e2:e0:a3:e5: 29:9f:31:72:1b:7b:61:15:b9:9c:57:21:95:da:2b:4d:4e:51: 94:49:33:1e:a5:76:c0:a4:c7:ff:95:74:68:78:26:a9:25:0a: 4b:17:6f:b0:19:6d:32:d6:ae:8c:82:1d:c5:aa:37:e4:c8:b8: dc:0d:c7:2b:41:00:48:dc:86:30:67:61:1c:b7:22:58:99:2f: cc:0b:72:8c:32:36:e0:39:ed:a5:ba:2b:9d:e2:dc:c5:c5:63: 17:1c:71:d1:c3:48:93:e7:f4:c5:97:ad:13:e1:cf:43:ca:0f: ad:5f:df:b4:9d:8e:94:51:4b:77:fe:8c:e3:f4:5e:fa:4b:ed: 25:36:9a:84:02:05:66:1d:03:1a:b4:46:1d:de:b0:d0:24:f6: ce:1f:0c:f0:60:b5:07:56:3c:bd:02:70:5b:f9:95:9b:6f:84: f1:00:37:94:17:37:2f:39:9a:62:3a:cc:a6:1e:e7:5f:6b:9e: d8:a9:2b:dd:9f:bc:85:8e:66:1a:3a:51:5e:99:f8:35:f9:19: 23:33:f9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0YbP5pRL7kY25XFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk YmI3MWY1MTAtM2ZkZi00ZDU1LTlmNTAtN2FmNWQ3NTRhN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHpLfoDGV5/WsZsFYzl2V6t+Vj9rqjMQzIH9 D1hczW7PRaYngR869LNVKzAPZMOujeia/1jpyPVfSJLDPQepxIQSmjhg07BaaC0q cyP3R79mF348aiH8dJF5p2mk4LRdnwbe30fq11eve469WE7hBhCZxgQa85BG2Znf DY0ET0J3+W8hh2ZNwjUCVExupNdIqEwQ3C+zf8faAhj2lbDWEFL8/BWvwV0Zk327 WCrXxrKNy01/LGHM/ttmpQ+hleB8ltZaMaFhqKOFQJhjWgAsQ1zDPKAQL1tMrDid 5UiZ4iAqHCZCdCWB/JpqnEYdcN0F7sIE9GhAQ1KypioYtRjGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrrX7JAblXxItVsHyjwP26Nphj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGJkMjIwMjMtZjcwNi0z NjZmLWJhN2UtOWZhOGE3YzQ2ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjrqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPXXOR3NEdoBnF/yVcLaT4IkPiwv6pWC6sHsDX6FWGCdY5riQz6GOOa CCUfKJnknwTu4uCj5SmfMXIbe2EVuZxXIZXaK01OUZRJMx6ldsCkx/+VdGh4Jqkl CksXb7AZbTLWroyCHcWqN+TIuNwNxytBAEjchjBnYRy3IliZL8wLcowyNuA57aW6 K53i3MXFYxcccdHDSJPn9MWXrRPhz0PKD61f37SdjpRRS3f+jOP0XvpL7SU2moQC BWYdAxq0Rh3esNAk9s4fDPBgtQdWPL0CcFv5lZtvhPEAN5QXNy85mmI6zKYe519r ntipK92fvIWOZho6UV6Z+DX5GSMz+Sg= -----END CERTIFICATE-----Generated at Sat Mar 14 18:26:52 2026 by rpki-client