$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cac2861c-16e1-32a0-817d-a05110deb972.roa File: cac2861c-16e1-32a0-817d-a05110deb972.roa (raw, json) Hash identifier: 8oUfXE6fW1bkNCZAHDV132hp1s0reYa11gBIbs6vehE= Subject key identifier: 33:80:17:E9:EB:1B:EA:11:84:F5:E6:B7:18:E1:BD:D8:9E:F4:1D:B3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D143005585737EE89DD8C4C00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cac2861c-16e1-32a0-817d-a05110deb972.roa Signing time: Fri 06 Mar 2026 13:34:30 +0000 ROA not before: Fri 06 Mar 2026 13:34:30 +0000 ROA not after: Thu 04 Jun 2026 12:34:30 +0000 asID: 401322 IP address blocks: 38.159.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:30:05:58:57:37:ee:89:dd:8c:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 6 13:34:30 2026 GMT Not After : Jun 4 12:34:30 2026 GMT Subject: CN=fbab1bb0-8ffd-40a5-b1e4-ea2e2e91af65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:f6:9a:55:d5:ee:35:15:da:a4:61:5a:16: bb:1c:9b:2b:f3:39:d8:f3:f0:3b:b9:e6:08:c8:af: 32:fe:4c:f2:fd:96:21:4f:41:77:af:be:14:13:7c: 47:49:14:81:f1:61:21:75:92:5f:37:fd:cd:47:d7: b9:c7:91:4d:ab:ea:da:2c:19:a0:ba:cc:14:20:d2: 59:1b:bb:90:d3:6c:68:2c:4b:f1:54:0e:ce:77:25: 57:1b:d7:04:e7:61:39:9e:c5:56:39:6b:99:b6:55: 10:cc:48:f3:f9:82:15:b6:af:08:38:8b:15:11:6c: 5b:6a:b3:bc:82:45:e0:5e:ab:a1:2f:5e:1e:60:70: 30:fe:5e:15:dd:1a:99:92:8f:2b:3c:c0:8f:8e:11: b4:ec:aa:ec:1d:fa:e2:39:ff:1e:c5:58:31:3e:fc: 4a:41:68:6d:2e:9d:62:56:73:9c:fc:2c:38:64:ef: 0b:01:a9:b2:8f:32:cb:e3:04:3f:4f:8f:60:bb:80: 16:a0:3c:ed:1f:f4:59:40:76:c6:b4:02:c0:95:46: a2:45:4d:98:d7:a7:ff:13:00:a9:08:fd:95:7b:61: 7e:7e:6b:4b:9e:99:18:43:26:6f:34:19:8c:1c:a7: 0e:e1:2d:24:8b:c1:53:e4:f8:cc:ca:d0:9a:1a:2e: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:17:E9:EB:1B:EA:11:84:F5:E6:B7:18:E1:BD:D8:9E:F4:1D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cac2861c-16e1-32a0-817d-a05110deb972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:95:1c:e6:d1:30:92:ec:21:cc:83:1b:6d:c9:a1:39:55:93: ca:3b:12:22:66:87:e0:ad:42:2a:48:38:74:68:b9:dd:4f:8c: 2f:c8:ab:cf:f5:d3:29:b0:90:28:1c:bc:20:a1:34:9e:40:12: 26:0a:ad:61:eb:6e:b9:7a:aa:2b:35:f1:5a:c0:07:f6:4b:ce: 63:d0:b3:ae:60:55:e9:e6:4b:c9:52:62:ac:e3:cf:d2:81:f4: c3:5d:82:df:e9:8d:a8:3c:99:bd:db:f2:7a:a6:1e:64:74:cb: c8:81:ac:7f:71:70:e0:63:5c:f2:f0:07:8a:0a:4d:25:1a:a6: 62:a5:68:45:19:eb:a3:86:1f:b5:6a:2f:13:41:eb:47:79:db: 0c:e5:6b:2d:49:0e:47:fe:42:20:2c:8c:cc:fc:ca:e1:03:2f: 43:07:11:0c:8d:0e:5d:04:cf:48:c3:b3:6c:14:4c:52:d0:bf: c2:b9:6a:a8:13:00:95:59:fb:6d:a7:6b:b9:87:c4:d9:60:8a: 62:44:83:a9:12:9b:b3:58:95:27:3e:e6:ce:b6:00:9f:e3:23: 68:cc:a4:e0:82:51:75:22:83:09:2c:24:2f:34:6b:37:65:02: 86:1a:95:36:e4:b8:7a:8f:e4:8b:95:04:e8:51:34:12:e8:eb: 66:73:53:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UMAVYVzfuid2MTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNjEzMzQzMFoXDTI2MDYwNDEyMzQzMFowLzEtMCsGA1UEAxMk ZmJhYjFiYjAtOGZmZC00MGE1LWIxZTQtZWEyZTJlOTFhZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI72mlXV7jUV2qRhWha7HJsr8znY8/A7ueYI yK8y/kzy/ZYhT0F3r74UE3xHSRSB8WEhdZJfN/3NR9e5x5FNq+raLBmguswUINJZ G7uQ02xoLEvxVA7OdyVXG9cE52E5nsVWOWuZtlUQzEjz+YIVtq8IOIsVEWxbarO8 gkXgXquhL14eYHAw/l4V3RqZko8rPMCPjhG07KrsHfriOf8exVgxPvxKQWhtLp1i VnOc/Cw4ZO8LAamyjzLL4wQ/T49gu4AWoDztH/RZQHbGtALAlUaiRU2Y16f/EwCp CP2Ve2F+fmtLnpkYQyZvNBmMHKcO4S0ki8FT5PjMytCaGi7ArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOAF+nrG+oRhPXmtxjhvdie9B2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2FjMjg2MWMtMTZlMS0z MmEwLTgxN2QtYTA1MTEwZGViOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJp93MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2VHObRMJLsIcyDG23JoTlVk8o7EiJmh+CtQipIOHRoud1PjC/Iq8/1 0ymwkCgcvCChNJ5AEiYKrWHrbrl6qis18VrAB/ZLzmPQs65gVenmS8lSYqzjz9KB 9MNdgt/pjag8mb3b8nqmHmR0y8iBrH9xcOBjXPLwB4oKTSUapmKlaEUZ66OGH7Vq LxNB60d52wzlay1JDkf+QiAsjMz8yuEDL0MHEQyNDl0Ez0jDs2wUTFLQv8K5aqgT AJVZ+22na7mHxNlgimJEg6kSm7NYlSc+5s62AJ/jI2jMpOCCUXUigwksJC80azdl AoYalTbkuHqP5IuVBOhRNBLo62ZzU2Q= -----END CERTIFICATE-----Generated at Sat Mar 14 18:20:14 2026 by rpki-client