$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7c32c87-06e2-3562-838d-6ae44e409a70.roa File: d7c32c87-06e2-3562-838d-6ae44e409a70.roa (raw, json) Hash identifier: pAQvkK8zQzP/hnwcCLl6XBNtO1f/B1kEXcrLtmEbqBY= Subject key identifier: EA:E4:08:48:25:C1:14:78:D6:0A:FB:6D:D4:AB:DF:76:E9:F9:B4:09 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D0CC2EF7322CD4B3DBE1F2B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7c32c87-06e2-3562-838d-6ae44e409a70.roa Signing time: Tue 03 Mar 2026 21:44:03 +0000 ROA not before: Tue 03 Mar 2026 21:44:03 +0000 ROA not after: Mon 01 Jun 2026 20:44:03 +0000 asID: 270677 IP address blocks: 38.236.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:c2:ef:73:22:cd:4b:3d:be:1f:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 3 21:44:03 2026 GMT Not After : Jun 1 20:44:03 2026 GMT Subject: CN=c3787beb-b02a-40a8-b854-3c776cdfe0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:cd:c0:a0:c8:13:22:e8:e0:cc:ae:42:e3: 99:9f:21:8f:19:5c:58:86:64:18:0c:5f:b0:b3:99: 33:d8:95:ab:e4:c5:37:88:06:d1:ba:3a:c0:be:84: cc:88:23:e4:7a:44:71:e9:b3:a2:4e:dd:dd:13:4b: af:9b:9d:1b:33:c2:64:ff:8f:f0:74:7f:af:6d:2c: 72:93:d6:84:a8:08:d2:93:d8:82:d4:a8:87:0f:8f: 60:98:07:7b:fd:1a:49:83:98:66:ba:a6:1f:7f:98: d0:84:96:50:59:34:1b:ff:09:99:f2:9f:5d:71:7c: c2:2b:ea:07:0b:f5:ce:fb:b7:cc:cb:5e:28:d0:a2: c5:53:d7:16:4d:a2:57:4f:e7:7c:a3:3f:ac:a7:83: e3:34:d4:c1:73:2a:d4:56:0a:c7:30:21:e1:cd:b0: 17:85:f6:8d:20:32:81:0c:64:94:a7:79:a4:79:87: c2:2b:1a:18:15:83:11:20:12:e8:78:67:aa:ee:f4: 12:5c:d1:65:35:54:d5:bb:c1:37:78:64:fe:21:a8: 96:c3:71:7c:0e:0d:99:fa:ef:06:8d:12:77:7b:f5: 78:2b:fc:ae:a8:c9:84:7d:ba:0a:14:4c:b5:48:8b: 77:d4:5f:c8:9e:7b:68:73:de:93:7a:8e:52:9b:0b: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E4:08:48:25:C1:14:78:D6:0A:FB:6D:D4:AB:DF:76:E9:F9:B4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7c32c87-06e2-3562-838d-6ae44e409a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:47:50:5f:8f:2b:3a:30:81:74:1b:63:24:65:ff:9f:ce:8f: 3c:da:98:12:f4:33:30:27:b9:53:af:39:b0:0f:18:4f:30:3c: 23:43:73:31:f2:fc:b2:49:2a:20:77:66:d0:83:7c:6f:74:47: ff:dd:f8:9e:45:41:96:be:80:ce:7b:fb:17:8f:c7:35:c1:4e: 10:b8:28:db:54:7a:7d:2a:85:ee:7a:58:af:f8:64:8c:4f:e5: 6f:1b:3a:d6:be:33:14:9b:61:fc:41:2b:db:1e:77:ce:b3:66: 0b:4c:9b:85:e8:fc:0d:4b:de:50:8a:ba:3a:dd:ab:8e:01:5c: 25:5a:44:2f:c4:24:2b:3f:f2:b7:33:8e:a7:bd:e9:44:5c:2e: a7:c7:1d:9f:26:0b:16:37:d7:09:6d:36:6f:c2:e7:ea:d0:cf: 37:f8:38:32:cc:cc:58:86:59:3b:ab:9f:a6:c8:e9:9e:23:c7: 59:ba:e4:bb:ab:cd:a1:b3:6a:12:c7:fc:6f:43:2e:ec:d6:40: 25:b9:b5:64:5f:b5:7b:93:ab:2f:2e:33:29:54:f0:16:2f:28: 38:d6:10:4a:c7:e8:48:ed:75:78:80:20:bc:bb:a6:46:d9:47: 86:72:e0:03:ef:18:da:5d:5e:04:9e:94:bb:89:bd:aa:f0:fd: 57:af:73:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Mwu9zIs1LPb4fK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMzIxNDQwM1oXDTI2MDYwMTIwNDQwM1owLzEtMCsGA1UEAxMk YzM3ODdiZWItYjAyYS00MGE4LWI4NTQtM2M3NzZjZGZlMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUbNwKDIEyLo4MyuQuOZnyGPGVxYhmQYDF+w s5kz2JWr5MU3iAbRujrAvoTMiCPkekRx6bOiTt3dE0uvm50bM8Jk/4/wdH+vbSxy k9aEqAjSk9iC1KiHD49gmAd7/RpJg5hmuqYff5jQhJZQWTQb/wmZ8p9dcXzCK+oH C/XO+7fMy14o0KLFU9cWTaJXT+d8oz+sp4PjNNTBcyrUVgrHMCHhzbAXhfaNIDKB DGSUp3mkeYfCKxoYFYMRIBLoeGeq7vQSXNFlNVTVu8E3eGT+IaiWw3F8Dg2Z+u8G jRJ3e/V4K/yuqMmEfboKFEy1SIt31F/Inntoc96Teo5SmwvfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrkCEglwRR41gr7bdSr33bp+bQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDdjMzJjODctMDZlMi0z NTYyLTgzOGQtNmFlNDRlNDA5YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlHUF+PKzowgXQbYyRl/5/OjzzamBL0MzAnuVOvObAPGE8wPCNDczHy /LJJKiB3ZtCDfG90R//d+J5FQZa+gM57+xePxzXBThC4KNtUen0qhe56WK/4ZIxP 5W8bOta+MxSbYfxBK9sed86zZgtMm4Xo/A1L3lCKujrdq44BXCVaRC/EJCs/8rcz jqe96URcLqfHHZ8mCxY31wltNm/C5+rQzzf4ODLMzFiGWTurn6bI6Z4jx1m65Lur zaGzahLH/G9DLuzWQCW5tWRftXuTqy8uMylU8BYvKDjWEErH6EjtdXiAILy7pkbZ R4Zy4APvGNpdXgSelLuJvarw/Vevc2M= -----END CERTIFICATE-----Generated at Sat Mar 14 18:25:40 2026 by rpki-client