$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00b99be4-2be5-3f0f-9b33-5e44a82d7d4a.roa File: 00b99be4-2be5-3f0f-9b33-5e44a82d7d4a.roa (raw, json) Hash identifier: oSNadzLdJGlEvmkC0YxlW4DZm8IDJCQIT4mQ5CDX/S8= Subject key identifier: 12:D8:3D:38:27:ED:77:B2:DB:F7:17:C9:50:75:79:CD:D8:FA:3B:E0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C4DCB7285910361A72CE00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00b99be4-2be5-3f0f-9b33-5e44a82d7d4a.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 273286 IP address blocks: 38.255.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:dc:b7:28:59:10:36:1a:72:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=8491603f-1a6e-47d1-bfa0-b1203d0188e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:45:e9:c2:90:89:c6:30:6b:e9:82:27:4b: 23:48:74:a8:b9:a8:3d:86:2c:6c:d4:82:ad:52:d1: 66:9d:8c:0c:e4:b4:d5:54:6c:f5:1b:c0:67:85:7f: 28:09:71:60:60:df:df:a7:53:0f:15:c8:cb:46:99: e9:9e:bf:2e:76:b8:2c:6c:a5:bd:a3:2c:d3:cf:3a: bd:29:e0:02:94:b6:bf:60:b4:e0:f1:34:b5:a5:e7: 72:89:05:4e:62:2e:99:a7:ad:ed:52:02:16:a1:4d: d6:d3:cd:5a:ef:4f:61:f0:b5:68:6e:6e:0e:1c:8e: b5:73:5e:5d:1f:3a:1a:99:63:bb:17:11:42:f8:07: 3f:a4:31:53:62:82:74:00:b4:a3:c0:fd:a1:ff:38: 92:4a:98:fa:b3:3e:8c:ae:d4:79:32:a1:df:ba:52: 25:01:b1:7b:56:6d:19:6a:b0:8e:ef:1e:c2:83:12: d2:93:d3:18:63:a8:db:f3:af:1f:31:38:38:4d:3f: 8f:1b:b4:eb:f0:9f:7f:2b:b7:0b:88:b1:6e:d7:1c: 16:25:a9:f8:1b:d7:68:fa:79:0a:b5:62:2c:22:87: d8:3e:42:cd:e1:bc:2f:69:52:5f:cd:05:ab:a6:98: 53:20:76:f2:76:e5:1a:ad:cd:ef:62:35:77:96:2a: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:3D:38:27:ED:77:B2:DB:F7:17:C9:50:75:79:CD:D8:FA:3B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00b99be4-2be5-3f0f-9b33-5e44a82d7d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c6:6e:80:e9:3c:6b:f9:e5:ee:7f:44:ca:58:1e:40:4f:ae: 76:35:a5:fb:a5:bc:3c:81:69:0e:34:3f:01:49:3c:0b:46:df: 7d:7b:59:61:c4:6a:c1:76:1c:6c:c1:71:0d:3b:3e:45:13:c7: 4f:17:d6:30:33:33:f0:20:d8:04:80:ad:6a:a7:84:44:94:cc: 98:62:56:78:0c:20:0b:ad:c4:57:3c:15:b3:f3:94:db:25:cd: 5b:77:0b:12:af:2c:35:b5:42:df:01:36:77:d7:7e:69:b5:cd: 24:2a:28:6f:60:d6:09:b0:af:c6:c5:53:02:da:e0:ff:97:84: ae:40:7c:e5:62:40:98:4c:a3:dd:47:a6:8b:f1:c3:20:c9:44: 9f:e9:1e:c6:50:6e:f1:33:ab:9a:81:af:da:67:29:79:f7:9d: f7:2b:3b:85:c6:f7:33:f0:73:29:86:31:d6:48:6d:b0:f1:d3: 59:1c:19:8b:a4:be:bc:e7:d2:a1:11:d2:56:3b:74:3e:26:1e: 57:f6:e0:71:8b:52:14:05:22:12:e6:23:dc:04:d0:81:b5:e6: e1:7d:12:9f:15:82:3b:41:03:cf:c3:11:6c:d9:1f:1f:13:6f: b7:62:e1:4b:2b:3d:3d:23:62:a0:3e:ae:5d:44:60:38:2b:bb: a5:31:b8:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxNy3KFkQNhpyzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ODQ5MTYwM2YtMWE2ZS00N2QxLWJmYTAtYjEyMDNkMDE4OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mVF6cKQicYwa+mCJ0sjSHSouag9hixs1IKt UtFmnYwM5LTVVGz1G8BnhX8oCXFgYN/fp1MPFcjLRpnpnr8udrgsbKW9oyzTzzq9 KeAClLa/YLTg8TS1pedyiQVOYi6Zp63tUgIWoU3W081a709h8LVobm4OHI61c15d HzoamWO7FxFC+Ac/pDFTYoJ0ALSjwP2h/ziSSpj6sz6MrtR5MqHfulIlAbF7Vm0Z arCO7x7CgxLSk9MYY6jb868fMTg4TT+PG7Tr8J9/K7cLiLFu1xwWJan4G9do+nkK tWIsIofYPkLN4bwvaVJfzQWrpphTIHbyduUarc3vYjV3lirOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLYPTgn7Xey2/cXyVB1ec3Y+jvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDBiOTliZTQtMmJlNS0z ZjBmLTliMzMtNWU0NGE4MmQ3ZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJv8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7GboDpPGv55e5/RMpYHkBPrnY1pfulvDyBaQ40PwFJPAtG3317WWHE asF2HGzBcQ07PkUTx08X1jAzM/Ag2ASArWqnhESUzJhiVngMIAutxFc8FbPzlNsl zVt3CxKvLDW1Qt8BNnfXfmm1zSQqKG9g1gmwr8bFUwLa4P+XhK5AfOViQJhMo91H povxwyDJRJ/pHsZQbvEzq5qBr9pnKXn3nfcrO4XG9zPwcymGMdZIbbDx01kcGYuk vrzn0qER0lY7dD4mHlf24HGLUhQFIhLmI9wE0IG15uF9Ep8VgjtBA8/DEWzZHx8T b7di4UsrPT0jYqA+rl1EYDgru6UxuLM= -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:45 2026 by rpki-client