$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa File: b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa (raw, json) Hash identifier: 8lMaiESt0E+62JR/LL8hUpTMNUFvw0DoTq7+97zCNkA= Subject key identifier: A3:C4:E8:B5:49:C6:ED:9B:8C:C3:92:90:6C:27:75:80:83:0A:58:89 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D237A5EA9B407735BB9CDF800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 35699 IP address blocks: 38.254.126.0/24 maxlen: 24 154.44.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5e:a9:b4:07:73:5b:b9:cd:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=47620ebe-0a1a-4821-8eee-9737beec9485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:9e:e0:39:1e:e7:00:23:b5:92:ef:59:3b: af:0b:66:79:f9:36:86:5f:62:f6:85:48:84:18:a6: 58:c2:96:69:4f:f1:a6:20:3b:0a:0d:56:7e:b4:1d: 2b:40:63:6f:b3:31:de:e3:a6:f3:41:33:07:8c:ff: fe:57:11:b8:b1:7b:2e:f5:f9:bc:b4:a6:11:a0:91: 64:3a:18:93:27:96:34:bb:39:5c:73:30:83:ca:a3: 6f:1a:64:08:ae:c6:df:64:95:34:60:96:8d:90:40: 91:1c:8a:a2:63:29:6b:20:87:24:bd:b8:e8:db:69: c9:33:47:d4:ac:07:64:c8:b9:ae:c1:d7:77:ac:8a: c4:a2:c6:41:2e:3a:b5:c5:60:8f:6e:b1:f8:d0:91: 82:53:58:b7:f9:70:cc:91:e9:37:fd:01:0b:da:69: 81:e9:8b:d8:44:f8:cd:91:ec:b8:08:e2:a3:c4:b1: 86:43:8c:71:6a:06:5d:40:58:a2:e8:15:5a:6e:11: 65:fa:77:42:3f:f0:c3:84:23:ea:d3:36:02:e4:d5: 23:45:33:c8:45:d7:a8:71:40:cd:20:cc:7c:d2:c5: a4:7c:bc:01:5d:84:0e:7d:1f:69:1d:7c:52:5d:80: 3b:94:ea:d9:72:0a:0a:df:d6:f3:fc:95:8e:df:de: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:E8:B5:49:C6:ED:9B:8C:C3:92:90:6C:27:75:80:83:0A:58:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.126.0/24 154.44.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1b:f1:a8:b7:77:66:51:c0:f2:37:b2:c9:7b:97:67:4a:b6: fb:e6:d7:1b:84:6f:3c:67:aa:04:53:83:f2:2a:19:a5:71:7b: 56:f7:52:82:c1:aa:30:9a:bb:ad:ad:7e:d4:e1:18:bc:4d:06: 18:2b:cf:b3:6e:34:73:eb:8d:69:3b:0a:f0:e3:6e:47:d7:34: c6:47:2d:34:19:8f:8b:e0:71:b5:a3:02:21:37:46:fb:12:06: 87:fd:17:75:c7:dc:5a:6e:7e:10:bb:78:99:61:cd:56:65:60: 33:3e:25:15:b5:28:2d:82:fd:20:bf:52:6c:b2:7b:b2:7c:e7: aa:97:05:b5:71:e1:ee:e5:da:5f:35:55:6e:67:6f:19:eb:e9: 07:65:7f:b1:ff:8d:fe:29:cb:a7:71:95:6b:2e:8e:5c:cd:77: 1e:26:ff:1e:c5:1c:82:cb:5f:99:cc:9f:dd:2f:29:c0:69:80: 99:a3:6b:67:3c:a3:db:48:b3:47:be:11:fc:c3:77:e2:3d:16: fa:b1:0a:e4:4d:78:21:51:13:ba:d2:0c:09:c2:1e:8c:1e:02: 20:44:44:be:08:b5:c4:cc:1f:f9:a5:25:75:34:96:a4:7a:df: 83:3b:99:1e:72:63:48:77:d4:7a:f6:fa:7d:1c:7e:14:9b:79: f8:d8:bf:5b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0jel6ptAdzW7nN+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDc2MjBlYmUtMGExYS00ODIxLThlZWUtOTczN2JlZWM5NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Ce4Dke5wAjtZLvWTuvC2Z5+TaGX2L2hUiE GKZYwpZpT/GmIDsKDVZ+tB0rQGNvszHe46bzQTMHjP/+VxG4sXsu9fm8tKYRoJFk OhiTJ5Y0uzlcczCDyqNvGmQIrsbfZJU0YJaNkECRHIqiYylrIIckvbjo22nJM0fU rAdkyLmuwdd3rIrEosZBLjq1xWCPbrH40JGCU1i3+XDMkek3/QEL2mmB6YvYRPjN key4COKjxLGGQ4xxagZdQFii6BVabhFl+ndCP/DDhCPq0zYC5NUjRTPIRdeocUDN IMx80sWkfLwBXYQOfR9pHXxSXYA7lOrZcgoK39bz/JWO397iIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKPE6LVJxu2bjMOSkGwndYCDCliJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjE5ZDJkMTAtNjU5OC0z MTlmLWJjYjktYjRmZThhNTRkNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJv5+AwQC miyMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAkb8ai3d2ZRwPI3ssl7l2dKtvvm1xuEbzxnqgRTg/IqGaVx e1b3UoLBqjCau62tftThGLxNBhgrz7NuNHPrjWk7CvDjbkfXNMZHLTQZj4vgcbWj AiE3RvsSBof9F3XH3FpufhC7eJlhzVZlYDM+JRW1KC2C/SC/Umyye7J856qXBbVx 4e7l2l81VW5nbxnr6Qdlf7H/jf4py6dxlWsujlzNdx4m/x7FHILLX5nMn90vKcBp gJmja2c8o9tIs0e+EfzDd+I9FvqxCuRNeCFRE7rSDAnCHoweAiBERL4ItcTMH/ml JXU0lqR634M7mR5yY0h31Hr2+n0cfhSbefjYv1s= -----END CERTIFICATE-----Generated at Fri Mar 13 08:44:05 2026 by rpki-client