$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa File: a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa (raw, json) Hash identifier: Ld8ar27w4M1WOzjqgLXH13WpE2fM1OnFgtGzLGVm4M4= Subject key identifier: B2:E4:C0:A1:2A:A6:95:91:25:D5:EB:97:01:3C:4C:EF:F8:6B:16:70 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D281F47E2E6B27623E2432080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa Signing time: Fri 13 Mar 2026 16:56:56 +0000 ROA not before: Fri 13 Mar 2026 16:56:56 +0000 ROA not after: Thu 11 Jun 2026 16:56:56 +0000 asID: 19188 IP address blocks: 38.111.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:1f:47:e2:e6:b2:76:23:e2:43:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 13 16:56:56 2026 GMT Not After : Jun 11 16:56:56 2026 GMT Subject: CN=4f473b88-f5cb-43c2-8aab-614e9f5c97d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:3d:18:9d:4e:96:1c:48:0b:b1:9e:36:83: 6c:62:d8:4f:b7:f0:0d:66:aa:bb:e8:7a:65:1d:cb: 9e:3f:74:bf:e5:a9:ec:36:63:c1:a6:cf:29:46:7d: e2:3c:38:9d:88:a2:d0:49:1c:89:91:13:4d:d6:30: 09:d1:de:b3:78:40:0a:02:79:ad:5e:ae:3f:74:21: 9b:25:13:b2:0a:2f:45:88:99:c1:a1:dd:b5:3c:a9: f9:9f:fa:5b:3e:f4:83:ef:30:61:26:f7:9e:04:b6: a5:b2:96:5a:9d:d9:5d:17:de:df:71:94:f7:b2:4c: b4:84:36:b6:3b:d3:15:38:1d:5c:3e:27:bd:86:66: 5d:6a:e8:06:96:a8:ce:15:f9:e0:2b:ac:a3:34:73: 7d:a9:47:1e:3f:bf:eb:25:d7:4a:21:fd:4a:70:28: 9d:ff:4a:4a:72:01:71:16:3f:f6:42:a4:8a:66:3a: 0f:74:fb:a1:e0:17:9a:be:89:5f:28:9c:18:1a:14: b9:13:13:30:a9:cd:74:2e:66:9f:23:99:27:78:6a: 67:68:32:d6:9b:4e:83:50:58:8e:b5:ca:04:83:77: 80:19:87:7e:dd:8b:39:c5:e4:59:9a:d6:30:96:68: a3:1b:ec:8a:4c:12:33:a4:94:2b:81:06:fb:a7:77: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:C0:A1:2A:A6:95:91:25:D5:EB:97:01:3C:4C:EF:F8:6B:16:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eb8e0c-0f87-3919-90c4-7e88d1d62872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.111.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b7:d8:a3:d4:02:94:97:ed:93:bf:7b:fb:44:a5:a3:9a:89: f6:90:00:fa:1a:13:5b:75:b9:a5:ea:75:c4:f4:0f:42:6e:0f: 90:7f:6f:24:3e:d9:b6:d9:4d:44:14:d8:f4:67:81:1b:dc:48: d6:57:a1:53:90:49:ea:a8:1c:9c:5f:ae:79:e2:b3:1d:af:f7: 9a:64:f6:3b:46:5c:17:1a:10:90:53:9b:34:b5:f4:b6:8b:bb: 06:45:a1:3f:32:cc:df:83:3f:21:6a:02:b2:f1:37:37:d0:cb: ee:32:90:1f:df:6e:9b:de:30:33:53:ce:06:28:61:43:86:80: 8d:18:5c:4a:4a:e2:a1:44:86:c5:5b:f3:18:ba:01:38:f9:81: ed:da:8b:54:3f:ff:b1:69:4f:34:72:82:27:fc:f0:87:51:9c: 95:b5:b0:96:56:56:ea:89:49:49:6c:2b:7a:a7:44:89:45:5d: ff:f7:a4:b6:05:42:0a:6e:37:5a:f5:1a:e1:a9:2c:b1:83:d6: 9f:a4:73:91:f6:af:14:9c:a9:79:96:43:08:35:7c:31:54:00: e7:57:85:eb:17:78:db:bb:74:0e:4e:a7:99:eb:06:00:52:8e: 58:ef:3e:7c:69:58:55:6b:ae:39:ea:88:9d:ae:f2:9c:45:06: 27:71:f6:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oH0fi5rJ2I+JDIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMzE2NTY1NloXDTI2MDYxMTE2NTY1NlowLzEtMCsGA1UEAxMk NGY0NzNiODgtZjVjYi00M2MyLThhYWItNjE0ZTlmNWM5N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1k9GJ1OlhxIC7GeNoNsYthPt/ANZqq76Hpl HcueP3S/5ansNmPBps8pRn3iPDidiKLQSRyJkRNN1jAJ0d6zeEAKAnmtXq4/dCGb JROyCi9FiJnBod21PKn5n/pbPvSD7zBhJveeBLalspZandldF97fcZT3sky0hDa2 O9MVOB1cPie9hmZdaugGlqjOFfngK6yjNHN9qUceP7/rJddKIf1KcCid/0pKcgFx Fj/2QqSKZjoPdPuh4BeavolfKJwYGhS5ExMwqc10LmafI5kneGpnaDLWm06DUFiO tcoEg3eAGYd+3Ys5xeRZmtYwlmijG+yKTBIzpJQrgQb7p3cGfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLkwKEqppWRJdXrlwE8TO/4axZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTdlYjhlMGMtMGY4Ny0z OTE5LTkwYzQtN2U4OGQxZDYyODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy32KPUApSX7ZO/e/tEpaOaifaQAPoaE1t1uaXqdcT0D0JuD5B/byQ+ 2bbZTUQU2PRngRvcSNZXoVOQSeqoHJxfrnnisx2v95pk9jtGXBcaEJBTmzS19LaL uwZFoT8yzN+DPyFqArLxNzfQy+4ykB/fbpveMDNTzgYoYUOGgI0YXEpK4qFEhsVb 8xi6ATj5ge3ai1Q//7FpTzRygif88IdRnJW1sJZWVuqJSUlsK3qnRIlFXf/3pLYF QgpuN1r1GuGpLLGD1p+kc5H2rxScqXmWQwg1fDFUAOdXhesXeNu7dA5Op5nrBgBS jljvPnxpWFVrrjnqiJ2u8pxFBidx9sU= -----END CERTIFICATE-----Generated at Sat Mar 14 18:24:01 2026 by rpki-client