$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d393acfd-1a02-3ec6-9f10-e199c594f79e.roa File: d393acfd-1a02-3ec6-9f10-e199c594f79e.roa (raw, json) Hash identifier: y+TI9dFoaPFuVlKUdM6ynge9VQwVF6Bq+MBMvFlQw4Q= Subject key identifier: 57:27:B7:1F:80:CD:05:DD:63:35:45:7A:BC:43:81:42:FE:34:2F:3C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D07ACE65061D381E9A8B4F000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d393acfd-1a02-3ec6-9f10-e199c594f79e.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 394303 IP address blocks: 38.70.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:e6:50:61:d3:81:e9:a8:b4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=bba0ee64-ba4a-461d-93cc-965a4094b002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:16:2a:6b:89:c0:b8:75:48:00:1b:a6:a6: a3:47:c4:91:55:81:6a:d9:fa:71:5e:66:f7:03:be: 14:26:3f:af:c4:6d:1a:22:cf:7e:da:cd:67:79:c2: 64:b4:26:8e:4d:1a:32:79:27:55:4f:bc:c2:78:61: 27:3d:67:15:da:85:f5:93:39:49:71:fa:8b:9c:f8: 91:28:ac:cd:05:10:aa:0e:9f:3d:40:e1:e5:69:8e: 57:1b:b7:db:97:5a:70:1b:79:bc:cd:2a:cf:01:be: fd:89:e9:9c:81:ae:b7:10:da:fc:a7:af:d8:f5:91: 7d:a6:ce:5b:ff:0c:15:f8:38:87:82:c2:a7:bf:99: 14:18:96:38:b6:86:61:5e:66:36:a5:ad:eb:d6:ae: 2a:fb:97:3d:dc:e7:61:53:06:2c:22:54:8f:b8:59: 0a:6e:c9:06:b4:01:b1:56:d1:17:65:9d:89:d1:6f: 2a:f1:ce:38:c7:c7:82:ee:f7:ab:7e:f5:1f:71:e3: 4d:a4:41:af:54:71:2e:b4:28:66:41:23:35:46:a3: e7:f5:c5:6d:b0:da:82:7f:da:08:a2:92:97:93:22: 43:93:9e:62:0e:1c:14:02:96:99:84:66:06:a2:0b: f7:a0:1b:b8:5b:c9:67:e8:fb:8c:4b:2e:19:6c:74: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:27:B7:1F:80:CD:05:DD:63:35:45:7A:BC:43:81:42:FE:34:2F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d393acfd-1a02-3ec6-9f10-e199c594f79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:ab:6d:f7:53:f1:ee:d2:89:e4:00:59:41:b7:24:a2:f6: 74:27:25:8c:bd:dc:c7:c7:f6:83:fe:5c:5c:7f:de:07:f8:cd: 90:c3:7d:24:c3:e4:ad:5b:62:5f:a6:93:a6:cc:72:f3:2e:17: fc:8b:9a:c9:d7:28:c0:af:fc:ba:6d:9f:83:2f:eb:07:3e:8d: db:f0:49:a8:59:94:88:4b:8d:da:67:ff:e7:19:8c:4a:2d:cb: 1f:d5:6e:8a:09:ff:26:4c:d6:7d:db:52:b2:25:86:6d:73:0a: 03:c4:b2:64:da:be:37:ec:4f:7d:bb:7a:bf:1e:16:c2:e4:cc: d0:62:57:04:3e:8e:da:67:e7:1a:dc:d1:ce:98:d1:52:53:25: 53:d7:cd:6f:4b:94:c6:52:37:57:ed:8a:fa:a2:3b:90:8d:e4: bc:57:07:27:1b:ee:ca:94:da:95:7d:73:fd:3b:8e:92:38:42: b8:e4:bd:8e:95:b3:bb:b3:81:b9:6e:34:2b:20:d0:08:ea:c8: a2:28:be:67:74:32:eb:10:e4:6f:f3:f6:b5:ce:09:4c:73:8d: e1:f6:68:d6:ad:8e:d2:74:97:b5:8d:d8:eb:9f:14:2b:72:35: fd:21:0a:c2:42:9e:73:48:a8:02:cd:a0:e1:cc:04:5f:c4:77: 9f:67:cb:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOZQYdOB6ai08AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YmJhMGVlNjQtYmE0YS00NjFkLTkzY2MtOTY1YTQwOTRiMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12IWKmuJwLh1SAAbpqajR8SRVYFq2fpxXmb3 A74UJj+vxG0aIs9+2s1necJktCaOTRoyeSdVT7zCeGEnPWcV2oX1kzlJcfqLnPiR KKzNBRCqDp89QOHlaY5XG7fbl1pwG3m8zSrPAb79iemcga63ENr8p6/Y9ZF9ps5b /wwV+DiHgsKnv5kUGJY4toZhXmY2pa3r1q4q+5c93OdhUwYsIlSPuFkKbskGtAGx VtEXZZ2J0W8q8c44x8eC7verfvUfceNNpEGvVHEutChmQSM1RqPn9cVtsNqCf9oI opKXkyJDk55iDhwUApaZhGYGogv3oBu4W8ln6PuMSy4ZbHTTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcntx+AzQXdYzVFerxDgUL+NC88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDM5M2FjZmQtMWEwMi0z ZWM2LTlmMTAtZTE5OWM1OTRmNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYbq233U/Hu0onkAFlBtySi9nQnJYy93MfH9oP+XFx/3gf4zZDDfSTD 5K1bYl+mk6bMcvMuF/yLmsnXKMCv/Lptn4Mv6wc+jdvwSahZlIhLjdpn/+cZjEot yx/VbooJ/yZM1n3bUrIlhm1zCgPEsmTavjfsT327er8eFsLkzNBiVwQ+jtpn5xrc 0c6Y0VJTJVPXzW9LlMZSN1ftivqiO5CN5LxXBycb7sqU2pV9c/07jpI4QrjkvY6V s7uzgbluNCsg0AjqyKIovmd0MusQ5G/z9rXOCUxzjeH2aNatjtJ0l7WN2OufFCty Nf0hCsJCnnNIqALNoOHMBF/Ed59ny1Y= -----END CERTIFICATE-----Generated at Sat Mar 14 18:26:31 2026 by rpki-client