$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7f8afb9-fb97-3339-9aad-7f7b3b9571be.roa File: b7f8afb9-fb97-3339-9aad-7f7b3b9571be.roa (raw, json) Hash identifier: 8Eev6bzPvNsTQJYS0tGOEsbcNOTjHDN96sdVg1IPdJA= Subject key identifier: 87:BB:4C:FA:AF:14:31:87:08:84:31:6E:AA:6F:B8:78:EE:51:A4:A2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D0BE7CF2DC4277EEE55B6EB60 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7f8afb9-fb97-3339-9aad-7f7b3b9571be.roa Signing time: Tue 03 Mar 2026 14:22:32 +0000 ROA not before: Tue 03 Mar 2026 14:22:32 +0000 ROA not after: Mon 01 Jun 2026 13:22:32 +0000 asID: 153729 IP address blocks: 38.253.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:e7:cf:2d:c4:27:7e:ee:55:b6:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 3 14:22:32 2026 GMT Not After : Jun 1 13:22:32 2026 GMT Subject: CN=f8a4b9cd-0784-4822-ac1f-f3f68570ffe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:9b:59:6b:18:c8:b2:02:13:8b:66:11:78: 37:e2:1d:cd:14:6d:e0:a9:50:d7:f4:fb:9e:59:64: c9:28:2a:35:0c:8b:c1:b7:0d:c8:f0:f8:b9:96:02: b0:67:ad:f5:c1:87:2e:5b:02:01:20:81:67:f6:c9: ed:2e:25:14:38:7f:77:fb:c8:c4:c3:65:1c:b7:a5: dd:d2:51:6b:1c:72:4f:b7:3b:53:1c:6a:5f:40:82: ab:64:8f:51:e5:8f:7f:e4:d4:ee:74:49:58:28:16: 94:e5:36:13:29:62:50:33:66:76:70:8d:84:1b:fc: db:1e:4a:c2:cb:61:6e:c1:c1:e3:54:da:a6:58:a2: f3:00:b9:4d:33:19:4b:e2:eb:e4:7d:69:6c:bb:5f: b3:9a:f3:28:17:79:a3:6e:f7:a5:12:f3:34:2d:b8: 93:7a:3f:8c:e8:65:5a:b7:99:c1:5d:c7:6f:49:86: 73:bf:21:0a:49:fb:1e:1b:8d:7a:7b:52:59:04:95: 9c:2e:f7:27:9d:f2:94:71:1f:c0:d4:68:86:58:bd: ab:a4:ad:e7:9e:2a:27:dd:9b:92:a9:ad:20:ee:6b: 83:d5:5c:6a:24:3c:ce:ad:a1:81:74:0d:d1:c6:ff: 07:d2:88:b4:4b:fe:a9:f8:a9:83:62:e6:d2:a8:50: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:4C:FA:AF:14:31:87:08:84:31:6E:AA:6F:B8:78:EE:51:A4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7f8afb9-fb97-3339-9aad-7f7b3b9571be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:70:80:f5:b8:f4:e4:ed:45:69:26:f2:78:0b:87:f5:b4:ce: 5e:13:43:56:0a:c7:48:3c:87:82:3a:c4:cd:f7:d3:f2:3c:d1: 74:0e:79:16:22:60:87:2a:8b:1d:00:c4:f5:ec:4d:24:25:e1: 98:41:d2:4f:dc:83:8d:6b:ba:fb:c4:fa:0d:2e:16:70:ee:e6: f0:b1:fc:f8:b0:a0:98:cf:92:db:9a:a9:b6:8f:00:76:d8:6a: 33:a0:f3:08:e3:f4:91:b3:77:db:7c:90:68:c4:b4:98:7d:a3: ba:99:0b:0f:a6:be:c1:5b:9d:d5:77:e9:e0:c0:ca:45:e6:4e: 41:1f:bf:8e:16:4c:4c:93:e6:68:c0:84:20:4b:94:51:e5:75: e9:ea:29:da:28:a5:90:50:7a:4c:57:f1:41:a5:5f:99:42:af: ff:fa:f0:c8:2c:2c:0e:27:48:1c:ca:6c:23:c7:68:5e:de:72: af:b9:06:f1:b8:71:14:b2:98:54:fb:eb:41:63:12:c3:b0:36: db:c2:ea:ee:f2:32:03:b4:67:6a:09:b0:78:42:2a:76:f6:dd: 9d:e5:ea:af:b9:6c:aa:da:35:dd:fa:a7:39:2b:19:ba:1a:e2: ff:f0:0a:9d:14:56:e0:c5:fd:76:96:cd:07:a6:21:26:1e:dc: cf:84:ee:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L588txCd+7lW262AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMzE0MjIzMloXDTI2MDYwMTEzMjIzMlowLzEtMCsGA1UEAxMk ZjhhNGI5Y2QtMDc4NC00ODIyLWFjMWYtZjNmNjg1NzBmZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHObWWsYyLICE4tmEXg34h3NFG3gqVDX9Pue WWTJKCo1DIvBtw3I8Pi5lgKwZ631wYcuWwIBIIFn9sntLiUUOH93+8jEw2Uct6Xd 0lFrHHJPtztTHGpfQIKrZI9R5Y9/5NTudElYKBaU5TYTKWJQM2Z2cI2EG/zbHkrC y2FuwcHjVNqmWKLzALlNMxlL4uvkfWlsu1+zmvMoF3mjbvelEvM0LbiTej+M6GVa t5nBXcdvSYZzvyEKSfseG416e1JZBJWcLvcnnfKUcR/A1GiGWL2rpK3nnion3ZuS qa0g7muD1VxqJDzOraGBdA3Rxv8H0oi0S/6p+KmDYubSqFAHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe7TPqvFDGHCIQxbqpvuHjuUaSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjdmOGFmYjktZmI5Ny0z MzM5LTlhYWQtN2Y3YjNiOTU3MWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJv14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBwgPW49OTtRWkm8ngLh/W0zl4TQ1YKx0g8h4I6xM330/I80XQOeRYi YIcqix0AxPXsTSQl4ZhB0k/cg41ruvvE+g0uFnDu5vCx/PiwoJjPktuaqbaPAHbY ajOg8wjj9JGzd9t8kGjEtJh9o7qZCw+mvsFbndV36eDAykXmTkEfv44WTEyT5mjA hCBLlFHldenqKdoopZBQekxX8UGlX5lCr//68MgsLA4nSBzKbCPHaF7ecq+5BvG4 cRSymFT760FjEsOwNtvC6u7yMgO0Z2oJsHhCKnb23Z3l6q+5bKraNd36pzkrGboa 4v/wCp0UVuDF/XaWzQemISYe3M+E7jE= -----END CERTIFICATE-----Generated at Sat Mar 14 18:24:01 2026 by rpki-client