$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c06b4d49-55c4-36a2-b89c-3d4dbac9c983.roa File: c06b4d49-55c4-36a2-b89c-3d4dbac9c983.roa (raw, json) Hash identifier: kuPunGdQ0ISdiWjn4p+kzk9iXSIY1lsejtGjFrdf5d8= Subject key identifier: 16:CC:61:69:89:32:D1:EA:84:46:A0:A0:90:16:04:39:F7:6B:7B:0A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D0975492A8946A14BD1CACC00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c06b4d49-55c4-36a2-b89c-3d4dbac9c983.roa Signing time: Mon 02 Mar 2026 17:20:10 +0000 ROA not before: Mon 02 Mar 2026 17:20:10 +0000 ROA not after: Sun 31 May 2026 16:20:10 +0000 asID: 0 IP address blocks: 38.125.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:75:49:2a:89:46:a1:4b:d1:ca:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 2 17:20:10 2026 GMT Not After : May 31 16:20:10 2026 GMT Subject: CN=72be3b81-6536-47da-a619-0f370c20540d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:10:e9:14:5a:90:eb:8a:10:c2:fc:69:6e: 9f:48:25:3c:d5:12:f0:c1:6e:95:17:e0:7c:1c:04: 12:e3:35:b1:11:c8:4f:d4:0e:74:a1:46:76:1a:ac: 93:1c:64:b3:77:46:ee:f5:46:6e:ee:ba:eb:b7:f7: 1b:5d:d2:c6:24:7c:31:72:44:a6:29:09:48:0a:d2: ce:31:51:c4:9f:1a:6b:40:25:da:78:bf:9e:ea:d5: 2c:26:a1:2b:98:a9:8c:f5:b5:fa:9c:ec:93:aa:2e: 22:48:6e:0e:15:84:9d:35:82:66:18:2f:c0:55:d4: 10:fc:b7:68:a6:0a:d5:06:3e:6c:08:7f:06:2f:aa: ec:3e:fd:b1:fb:b5:cb:86:e7:b1:62:3b:c2:16:17: 50:e3:9e:e7:28:ad:1d:d7:4f:20:55:47:78:73:66: ec:4d:c4:85:43:1f:e4:c7:72:91:b1:f7:c1:d9:d1: a7:72:3b:c7:05:74:34:0d:b2:6f:04:75:93:ad:d3: b9:82:35:c5:08:7b:b7:6a:2a:5b:62:0f:12:71:f0: f2:39:5b:f2:50:24:0a:c2:1f:96:83:8d:f6:fa:4e: b8:06:7c:28:f8:7b:a2:2a:62:f4:d3:db:d3:db:01: 5f:f2:f3:89:af:40:16:91:15:d8:54:a6:df:e1:d2: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CC:61:69:89:32:D1:EA:84:46:A0:A0:90:16:04:39:F7:6B:7B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c06b4d49-55c4-36a2-b89c-3d4dbac9c983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.125.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:f1:01:75:f3:c6:f4:94:9a:4e:55:28:a7:62:29:0a:08:27: 34:b2:57:c9:f4:83:ca:37:01:f2:26:fb:db:43:1b:b9:5f:97: f7:a4:59:f3:d5:a2:c9:08:21:91:0a:00:82:cf:95:04:cf:f1: 3b:a3:58:8e:24:e0:9c:78:3f:eb:d0:de:34:8c:2c:6a:99:d0: c8:4d:50:b0:61:14:2d:59:42:6c:e4:67:35:1e:fe:79:3b:91: 30:ea:05:db:a9:37:96:9c:02:9d:83:22:0e:c1:6e:07:44:d9: b3:ab:5a:b6:5f:27:ce:59:2e:94:16:39:fa:08:3e:57:dd:2e: 0b:f9:f5:9c:88:5e:86:76:04:7e:3a:d8:42:55:51:b9:ca:90: c3:b3:26:31:b0:b5:11:14:fa:80:d0:ae:91:3b:31:ce:49:52: f3:60:b0:34:54:29:da:1c:00:af:0d:1c:bb:5f:64:ab:35:0a: 34:dc:5c:34:14:0c:fb:e2:9e:7d:bc:9b:16:c7:3e:89:69:37: fe:2a:d5:40:c5:d6:cc:45:fe:de:64:3a:24:a8:b2:d1:c9:84: a2:ae:31:54:f9:7f:c1:77:4c:c0:83:a3:66:4c:8e:17:a8:82: c7:f4:ba:39:52:79:93:26:41:cf:aa:c7:94:f9:65:69:c1:4e: 09:4b:24:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JdUkqiUahS9HKzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMjE3MjAxMFoXDTI2MDUzMTE2MjAxMFowLzEtMCsGA1UEAxMk NzJiZTNiODEtNjUzNi00N2RhLWE2MTktMGYzNzBjMjA1NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+AQ6RRakOuKEML8aW6fSCU81RLwwW6VF+B8 HAQS4zWxEchP1A50oUZ2GqyTHGSzd0bu9UZu7rrrt/cbXdLGJHwxckSmKQlICtLO MVHEnxprQCXaeL+e6tUsJqErmKmM9bX6nOyTqi4iSG4OFYSdNYJmGC/AVdQQ/Ldo pgrVBj5sCH8GL6rsPv2x+7XLhuexYjvCFhdQ457nKK0d108gVUd4c2bsTcSFQx/k x3KRsffB2dGncjvHBXQ0DbJvBHWTrdO5gjXFCHu3aipbYg8ScfDyOVvyUCQKwh+W g432+k64Bnwo+HuiKmL009vT2wFf8vOJr0AWkRXYVKbf4dLVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbMYWmJMtHqhEagoJAWBDn3a3sKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzA2YjRkNDktNTVjNC0z NmEyLWI4OWMtM2Q0ZGJhYzljOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJn34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvxAXXzxvSUmk5VKKdiKQoIJzSyV8n0g8o3AfIm+9tDG7lfl/ekWfPV oskIIZEKAILPlQTP8TujWI4k4Jx4P+vQ3jSMLGqZ0MhNULBhFC1ZQmzkZzUe/nk7 kTDqBdupN5acAp2DIg7BbgdE2bOrWrZfJ85ZLpQWOfoIPlfdLgv59ZyIXoZ2BH46 2EJVUbnKkMOzJjGwtREU+oDQrpE7Mc5JUvNgsDRUKdocAK8NHLtfZKs1CjTcXDQU DPvinn28mxbHPolpN/4q1UDF1sxF/t5kOiSostHJhKKuMVT5f8F3TMCDo2ZMjheo gsf0ujlSeZMmQc+qx5T5ZWnBTglLJCs= -----END CERTIFICATE-----Generated at Sat Mar 14 18:24:02 2026 by rpki-client