$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa File: cb1859a9-b40c-37fb-a9c2-f8b708109204.roa (raw, json) Hash identifier: NnuKsm/KfGFFkgF/QF++G/V+TDEygDNYd27rJcBO/0A= Subject key identifier: D1:C7:3B:8F:21:54:70:10:02:2D:C3:6F:C1:5A:D0:7C:22:B8:0B:34 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D7E9B5C137F483E6E1B5D1800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa Signing time: Mon 13 Apr 2026 16:26:27 +0000 ROA not before: Mon 13 Apr 2026 16:26:27 +0000 ROA not after: Sun 12 Jul 2026 16:26:27 +0000 asID: 134032 IP address blocks: 38.125.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:9b:5c:13:7f:48:3e:6e:1b:5d:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 13 16:26:27 2026 GMT Not After : Jul 12 16:26:27 2026 GMT Subject: CN=c621c1bc-e5fd-4e11-b9ab-a0abbcba9a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:ce:1e:08:e7:b3:52:bb:b4:17:30:c8:cf: 81:f3:da:4f:f1:ca:78:e9:1c:96:3f:bc:ea:aa:4b: c2:c7:65:ed:fa:5b:80:a1:fb:27:62:97:5f:bd:80: ae:e6:d1:13:14:a2:9e:a9:fc:28:b1:cf:0b:93:1d: fc:95:db:61:5c:d8:db:1b:d9:19:8f:ec:7d:ca:3b: 56:7d:72:a8:4c:82:dc:e6:45:0e:f0:9f:bc:8b:01: 01:1f:6c:99:de:cc:da:b4:e0:a9:10:a4:54:02:cf: 75:01:bf:7f:3e:0d:05:ec:12:21:0f:be:70:d9:2d: 6f:a4:2f:a8:97:0d:92:a5:cf:1d:11:23:91:8d:12: f8:00:e2:09:1d:6a:00:67:e2:f1:b8:b0:a7:ca:34: 4b:c9:f4:cb:93:6f:2a:f3:54:e6:fc:08:b2:9a:51: 41:eb:fa:42:32:bf:b0:99:40:a2:56:bb:15:62:ad: ff:56:11:1f:ba:e6:1a:47:6b:9c:4b:33:61:2e:56: 87:1c:f9:1d:ae:aa:b9:af:a0:81:42:5d:73:69:fe: ec:02:ef:28:95:84:4f:69:fa:30:fb:e5:1a:e6:40: c3:74:8e:4a:63:bb:ce:d8:3f:97:8f:cb:31:0f:e1: f7:c3:b6:5a:52:05:a7:fb:5c:08:28:45:e5:6c:db: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C7:3B:8F:21:54:70:10:02:2D:C3:6F:C1:5A:D0:7C:22:B8:0B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb1859a9-b40c-37fb-a9c2-f8b708109204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.125.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7c:21:d6:dc:29:e2:18:5d:2e:10:7d:18:2a:2d:29:b3:3d: d2:16:78:a9:ff:b5:b7:5d:67:74:f4:c5:8d:4e:f4:71:bd:55: c5:ab:26:b6:3a:39:70:80:e3:b8:62:cb:24:ad:8d:38:db:3b: 9b:92:3d:43:47:6a:22:f3:0c:58:ed:f9:f7:45:e0:28:94:a7: 36:79:2e:e7:a3:ae:a1:32:1c:ba:2a:5c:57:21:04:84:36:08: 8b:1b:2a:47:5c:77:96:55:53:d6:43:3f:27:eb:c1:c3:2c:fe: 6e:c9:dd:1f:43:cd:54:c3:e2:14:d7:bf:bd:07:b2:b3:0a:fe: ed:98:60:ab:7b:e4:5a:88:a0:1a:84:bc:f3:13:ec:d1:ef:45: c8:d3:42:9a:72:34:79:cf:7e:fa:a8:90:08:0e:e1:e6:46:81: 1b:88:f7:84:17:16:d7:15:e4:ab:f9:73:d3:36:81:83:09:d6: 91:91:07:00:8c:94:ba:7d:42:3c:f1:84:1b:84:8e:c9:89:db: 2b:a3:38:2e:f1:96:49:75:fe:f7:cc:b8:25:13:53:34:64:c9: 2a:4b:70:09:bd:06:b1:18:a1:f8:a5:2d:71:2c:37:cc:7c:4a: 25:06:8c:71:91:6d:9a:6a:2b:6b:b4:47:17:0b:84:c2:f1:87: 5c:e6:8e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+m1wTf0g+bhtdGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMzE2MjYyN1oXDTI2MDcxMjE2MjYyN1owLzEtMCsGA1UEAxMk YzYyMWMxYmMtZTVmZC00ZTExLWI5YWItYTBhYmJjYmE5YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9anOHgjns1K7tBcwyM+B89pP8cp46RyWP7zq qkvCx2Xt+luAofsnYpdfvYCu5tETFKKeqfwosc8Lkx38ldthXNjbG9kZj+x9yjtW fXKoTILc5kUO8J+8iwEBH2yZ3szatOCpEKRUAs91Ab9/Pg0F7BIhD75w2S1vpC+o lw2Spc8dESORjRL4AOIJHWoAZ+LxuLCnyjRLyfTLk28q81Tm/AiymlFB6/pCMr+w mUCiVrsVYq3/VhEfuuYaR2ucSzNhLlaHHPkdrqq5r6CBQl1zaf7sAu8olYRPafow ++Ua5kDDdI5KY7vO2D+Xj8sxD+H3w7ZaUgWn+1wIKEXlbNu+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHHO48hVHAQAi3Db8Fa0HwiuAs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2IxODU5YTktYjQwYy0z N2ZiLWE5YzItZjhiNzA4MTA5MjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJn00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ8IdbcKeIYXS4QfRgqLSmzPdIWeKn/tbddZ3T0xY1O9HG9VcWrJrY6 OXCA47hiyyStjTjbO5uSPUNHaiLzDFjt+fdF4CiUpzZ5LuejrqEyHLoqXFchBIQ2 CIsbKkdcd5ZVU9ZDPyfrwcMs/m7J3R9DzVTD4hTXv70HsrMK/u2YYKt75FqIoBqE vPMT7NHvRcjTQppyNHnPfvqokAgO4eZGgRuI94QXFtcV5Kv5c9M2gYMJ1pGRBwCM lLp9QjzxhBuEjsmJ2yujOC7xlkl1/vfMuCUTUzRkySpLcAm9BrEYofilLXEsN8x8 SiUGjHGRbZpqK2u0RxcLhMLxh1zmjkQ= -----END CERTIFICATE-----Generated at Thu Apr 16 05:15:22 2026 by rpki-client