$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0217a71e-b9fc-3be2-9664-37d526bf314a.roa File: 0217a71e-b9fc-3be2-9664-37d526bf314a.roa (raw, json) Hash identifier: M/OOoYBYdnnj33dvbu02qGqRDpsZBH+0HygX4N4EcDM= Subject key identifier: C6:41:E3:6A:BF:91:3E:DB:AE:87:42:06:4E:B6:96:60:56:FF:F1:E4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D316F6AF35AA27A4497592500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0217a71e-b9fc-3be2-9664-37d526bf314a.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 28459 IP address blocks: 38.58.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6a:f3:5a:a2:7a:44:97:59:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=79bba2b6-62ce-4af4-aa2a-f9bda3c7dcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:a2:62:9a:90:53:b8:03:45:3e:4c:ee:10: 31:89:b3:97:33:f7:4e:13:00:9b:55:ac:1c:7d:f2: dc:c7:dc:3f:48:a4:3b:32:e8:2b:cd:4b:b7:65:07: fb:fa:0e:0c:c7:ed:57:35:23:af:12:bf:fc:f2:01: 29:6d:e6:45:ba:72:aa:7c:21:4a:52:61:4e:36:90: 19:9b:cc:a9:42:31:22:10:72:12:73:47:f2:75:10: b7:fe:46:21:c7:ea:12:98:d2:51:b0:da:3a:e2:e6: 81:08:c0:54:5e:0e:a1:10:3c:c4:ec:55:ad:59:e2: b5:04:68:9a:ee:4f:93:77:f7:7c:d3:40:37:42:c1: b7:41:e5:9f:e3:16:a7:94:3b:90:8f:fb:c0:82:31: 57:c9:3c:04:10:34:8e:f2:31:73:fe:d1:41:fa:d1: 86:b9:da:69:de:43:ed:cd:c5:d7:77:5b:8b:a0:f2: 03:08:87:99:3a:02:06:f8:e2:d8:73:69:47:95:9f: b1:88:32:11:fc:49:2d:ca:90:13:b4:82:4e:99:19: d5:0a:37:4e:89:f8:f5:d7:a8:e3:00:56:b3:ab:59: b1:65:a2:a2:6f:98:d9:5a:1c:9f:3b:29:7f:98:d4: 99:2b:d3:a8:f2:9e:b9:4a:ff:49:59:3e:71:b0:1a: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:41:E3:6A:BF:91:3E:DB:AE:87:42:06:4E:B6:96:60:56:FF:F1:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0217a71e-b9fc-3be2-9664-37d526bf314a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:01:a8:c2:33:33:cd:ed:9c:36:a8:14:23:0e:e1:31:4f:fc: c5:46:4d:0f:0a:8e:ce:e8:45:98:2b:fa:4b:f5:c7:98:c9:af: c3:5d:53:f1:96:b5:c7:da:7b:73:34:03:0e:ac:ef:34:c5:a6: 45:9d:dc:71:c3:fd:81:72:da:59:d4:12:56:1b:42:60:f4:d0: 83:5c:27:39:f8:48:92:ec:08:89:0f:9b:c5:a5:cc:1b:2d:b4: ab:e3:7a:f0:21:28:a3:18:57:9c:4e:4d:b4:60:e1:8c:d7:65: 19:10:7d:4d:f0:b7:66:69:aa:a2:9c:04:b3:7f:f4:9b:7e:58: ff:93:d8:c7:15:ea:d5:e8:cf:dc:38:be:6e:11:83:69:ff:d9: 5e:3d:23:46:66:cc:03:a4:bb:8f:05:36:be:40:77:25:eb:3a: d5:43:5a:9a:64:88:78:2a:97:f1:4a:69:05:e9:ab:37:b4:4c: 16:af:75:99:c1:c2:62:f3:28:db:3c:b3:60:9b:99:88:b4:e7: d2:d8:6c:72:e4:4f:f8:9a:dd:1f:f1:f7:24:a4:e3:3e:85:49: 29:13:49:0c:fe:95:73:fb:dd:73:b8:f7:0e:3b:05:cc:16:c5: 06:8f:82:16:b1:6d:fd:8e:26:4f:45:62:e1:a6:73:f3:6b:3c: 91:1e:2d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2rzWqJ6RJdZJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NzliYmEyYjYtNjJjZS00YWY0LWFhMmEtZjliZGEzYzdkY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yeiYpqQU7gDRT5M7hAxibOXM/dOEwCbVawc ffLcx9w/SKQ7MugrzUu3ZQf7+g4Mx+1XNSOvEr/88gEpbeZFunKqfCFKUmFONpAZ m8ypQjEiEHISc0fydRC3/kYhx+oSmNJRsNo64uaBCMBUXg6hEDzE7FWtWeK1BGia 7k+Td/d800A3QsG3QeWf4xanlDuQj/vAgjFXyTwEEDSO8jFz/tFB+tGGudpp3kPt zcXXd1uLoPIDCIeZOgIG+OLYc2lHlZ+xiDIR/EktypATtIJOmRnVCjdOifj116jj AFazq1mxZaKib5jZWhyfOyl/mNSZK9Oo8p65Sv9JWT5xsBoolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZB42q/kT7brodCBk62lmBW//HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDIxN2E3MWUtYjlmYy0z YmUyLTk2NjQtMzdkNTI2YmYzMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4BqMIzM83tnDaoFCMO4TFP/MVGTQ8Kjs7oRZgr+kv1x5jJr8NdU/GW tcfae3M0Aw6s7zTFpkWd3HHD/YFy2lnUElYbQmD00INcJzn4SJLsCIkPm8WlzBst tKvjevAhKKMYV5xOTbRg4YzXZRkQfU3wt2ZpqqKcBLN/9Jt+WP+T2McV6tXoz9w4 vm4Rg2n/2V49I0ZmzAOku48FNr5AdyXrOtVDWppkiHgql/FKaQXpqze0TBavdZnB wmLzKNs8s2CbmYi059LYbHLkT/ia3R/x9ySk4z6FSSkTSQz+lXP73XO49w47BcwW xQaPghaxbf2OJk9FYuGmc/NrPJEeLTk= -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:46 2026 by rpki-client