$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c323119a-883a-302d-ac20-7359fa37bc88.roa File: c323119a-883a-302d-ac20-7359fa37bc88.roa (raw, json) Hash identifier: +GXksOATYC8scGBpoMdaEXqJT27B+nP1ZnRfiaj0Wyc= Subject key identifier: 3A:3F:8F:EF:22:19:00:A6:0C:84:F2:36:A5:3D:52:C7:77:E8:21:AF Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D100CFF2A9F371BEEEB08D380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c323119a-883a-302d-ac20-7359fa37bc88.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 273843 IP address blocks: 38.92.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:ff:2a:9f:37:1b:ee:eb:08:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=e826bb27-e393-4169-a391-cd167f070000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:e8:c1:aa:9f:5d:b1:cd:c5:9d:21:d3:62: 45:a7:e9:e0:de:98:9b:bb:dc:92:34:b9:00:80:30: fa:c0:0c:e8:0c:40:b7:18:1c:e9:ed:98:f1:48:2c: 79:1f:6c:72:11:ec:24:08:96:0d:9c:63:69:12:fc: 3d:b0:0c:18:7e:54:a3:fd:9a:56:ca:73:29:ed:bd: 08:00:e7:24:cb:75:c8:84:41:43:4c:15:b7:2d:a9: e1:b8:f0:f6:72:b5:ed:77:5a:22:49:e5:3a:bf:ac: b7:04:88:be:06:7c:85:95:74:cb:bc:8c:b5:10:45: 5f:9b:f2:76:af:1b:a0:ef:36:8e:48:cf:82:d1:d0: bc:83:b8:d4:5e:4c:52:cd:89:8a:ce:ac:67:73:7b: fd:55:bf:98:8c:72:f6:5d:00:7d:cc:e5:48:8a:e8: 79:0b:60:e8:10:68:65:f9:81:5b:58:9a:2d:26:a4: ff:33:3c:08:bf:18:00:99:42:56:a4:05:ba:e2:70: 0a:04:68:61:bc:1f:09:09:2b:eb:1f:87:c9:98:47: 78:a8:37:0c:b1:04:ef:98:c6:85:ea:cc:94:cb:23: 99:e1:cc:31:ed:60:62:0b:08:e8:d6:e5:28:40:d3: f4:2e:af:dd:e2:cf:4e:ee:8c:4d:fc:70:9c:54:b2: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3F:8F:EF:22:19:00:A6:0C:84:F2:36:A5:3D:52:C7:77:E8:21:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c323119a-883a-302d-ac20-7359fa37bc88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.92.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:3b:54:f8:a7:ab:84:50:1e:e7:7e:68:fa:91:44:df:71:54: 38:cf:5c:41:06:31:f8:8c:ed:91:77:8b:f0:ad:d4:0a:0b:7c: 0e:2d:c1:b8:61:67:dd:ac:80:11:55:0d:87:3d:f9:d0:e2:91: 7f:d0:00:df:05:dc:9c:4c:98:59:29:5e:be:ee:d4:12:3a:0e: 50:cc:b5:64:78:be:80:97:e6:04:ea:69:e8:fc:86:72:92:72: 33:e4:5a:33:e1:24:54:b1:ed:6d:20:c9:7a:e1:a0:f7:11:2b: f7:34:86:6e:f5:c9:46:15:0f:a6:79:67:9f:a5:f9:b3:31:3f: 5f:14:63:5e:b0:61:29:dd:2f:df:d7:5f:95:97:86:4c:b3:3b: 6a:05:05:41:8f:ff:2e:ab:1b:d7:f2:b9:0b:f7:13:a6:f3:93: 20:18:85:61:29:aa:d3:59:da:85:04:de:59:7b:73:ed:ef:58: 58:1f:54:bf:1c:17:df:20:ac:dd:72:b7:ce:ab:42:f8:77:97: 93:3f:0f:b2:97:f2:c3:db:5e:19:26:f0:ce:6d:2d:cb:16:ec: d4:47:c4:ff:2c:25:44:0f:14:92:88:40:dd:dc:dd:86:31:77: da:6d:29:ee:48:41:95:e8:7b:00:b2:05:3a:05:bf:69:60:0e: 07:75:d4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDP8qnzcb7usI04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTgyNmJiMjctZTM5My00MTY5LWEzOTEtY2QxNjdmMDcwMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCrowaqfXbHNxZ0h02JFp+ng3pibu9ySNLkA gDD6wAzoDEC3GBzp7ZjxSCx5H2xyEewkCJYNnGNpEvw9sAwYflSj/ZpWynMp7b0I AOcky3XIhEFDTBW3LanhuPD2crXtd1oiSeU6v6y3BIi+BnyFlXTLvIy1EEVfm/J2 rxug7zaOSM+C0dC8g7jUXkxSzYmKzqxnc3v9Vb+YjHL2XQB9zOVIiuh5C2DoEGhl +YFbWJotJqT/MzwIvxgAmUJWpAW64nAKBGhhvB8JCSvrH4fJmEd4qDcMsQTvmMaF 6syUyyOZ4cwx7WBiCwjo1uUoQNP0Lq/d4s9O7oxN/HCcVLIzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo/j+8iGQCmDITyNqU9Usd36CGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzMyMzExOWEtODgzYS0z MDJkLWFjMjAtNzM1OWZhMzdiYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJlwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALU7VPinq4RQHud+aPqRRN9xVDjPXEEGMfiM7ZF3i/Ct1AoLfA4twbhh Z92sgBFVDYc9+dDikX/QAN8F3JxMmFkpXr7u1BI6DlDMtWR4voCX5gTqaej8hnKS cjPkWjPhJFSx7W0gyXrhoPcRK/c0hm71yUYVD6Z5Z5+l+bMxP18UY16wYSndL9/X X5WXhkyzO2oFBUGP/y6rG9fyuQv3E6bzkyAYhWEpqtNZ2oUE3ll7c+3vWFgfVL8c F98grN1yt86rQvh3l5M/D7KX8sPbXhkm8M5tLcsW7NRHxP8sJUQPFJKIQN3c3YYx d9ptKe5IQZXoewCyBToFv2lgDgd11Ic= -----END CERTIFICATE-----Generated at Sat Mar 14 18:23:12 2026 by rpki-client