$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/068455d2-0501-3c40-b4a3-9f0ef3075c73.roa File: 068455d2-0501-3c40-b4a3-9f0ef3075c73.roa (raw, json) Hash identifier: KTt3gdxcD3P+WxTVpPvAgFGibBYET52XJH5YaDe4Uz8= Subject key identifier: 50:75:9A:18:F0:C6:85:8D:41:1E:FE:0A:9B:6F:E2:40:05:0B:6D:92 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1DE48E50B422A38200636460 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/068455d2-0501-3c40-b4a3-9f0ef3075c73.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 328840 IP address blocks: 38.109.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:8e:50:b4:22:a3:82:00:63:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=1f5a408f-e0ea-4f32-9993-a77a3241df9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d7:3e:da:ae:38:01:f1:53:b9:d9:5e:5a:87: 28:a0:42:7c:96:3e:f8:16:29:07:30:14:3c:7a:38: 72:c0:d2:cc:96:67:7e:b7:0a:80:16:85:f5:1f:e7: af:82:6d:c7:d5:f1:3f:2d:84:3b:07:08:43:2a:13: 2f:41:4a:8f:d0:0d:42:49:11:7a:e1:4d:bb:a5:3b: 8a:63:42:9c:5e:1a:7b:ea:ce:66:3b:9a:55:62:6b: 6b:d7:3e:c8:89:c1:fb:79:d9:cf:40:2d:03:43:72: 27:88:6c:88:17:ac:a5:78:ae:92:e5:12:5b:0d:44: 49:5d:50:8f:0f:0f:40:c9:a7:cd:37:cf:a7:e2:96: f1:a7:6e:1c:f9:91:70:8f:e4:be:df:3c:ac:f6:a9: 25:6b:a5:9c:8c:79:f8:f7:79:86:b3:26:cb:d1:54: c8:c4:64:63:f9:c0:64:31:51:af:2a:b8:c3:33:b4: 98:0f:a0:12:7d:b8:3a:0b:7b:d3:be:61:57:ca:e8: db:54:d7:e1:af:e6:d9:85:1c:21:63:25:39:d3:fe: 72:8a:18:b4:c1:8f:9b:69:57:fd:e1:f4:77:fd:d5: 32:0c:ff:a0:e1:11:d8:e5:c3:32:a3:a2:7c:52:6a: 24:6f:3c:8a:19:86:40:aa:19:71:0d:50:c1:7a:3a: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:75:9A:18:F0:C6:85:8D:41:1E:FE:0A:9B:6F:E2:40:05:0B:6D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/068455d2-0501-3c40-b4a3-9f0ef3075c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.109.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:23:49:b1:7f:28:ac:b2:38:a9:37:5d:ec:89:60:e0:8e:b5: b8:f3:e0:ba:37:10:55:6c:6b:00:f6:5b:34:43:09:23:98:29: 40:c5:6e:f2:fd:8e:48:c8:96:4f:f7:aa:4b:bd:00:98:03:92: d7:3b:c5:63:10:e8:9e:39:bf:91:3a:26:94:6f:1f:f0:5d:10: 89:fc:c0:26:a7:b9:f9:3b:b0:1f:05:81:c5:27:01:40:0a:ef: 96:2c:df:9b:04:d3:a9:89:b3:80:8b:f4:0b:c5:77:29:7d:22: 4a:f8:64:7e:2d:4b:03:a4:8f:e1:c1:ef:6d:20:87:d1:7e:7e: c7:66:af:82:e3:bf:da:c5:e3:a9:2d:b2:d3:fe:9b:1e:fc:67: cb:d7:28:c6:6b:fd:62:47:8a:6b:15:cf:a7:ef:9f:b6:39:b6: 88:6a:90:d0:bf:eb:9c:30:57:f7:f4:e1:bb:1a:f0:2c:a7:06: 39:6d:60:34:7d:e5:66:42:c8:28:85:e9:0e:09:9c:f6:8f:9a: 2d:15:71:90:2a:fe:58:2c:ad:12:85:a4:eb:66:26:c7:68:07: 08:cd:ee:31:99:13:89:a6:96:a7:a6:73:d1:6a:9d:be:e2:83: 14:4b:40:37:99:c2:72:fd:d9:03:99:dd:1c:0c:e7:af:14:92: 85:f7:04:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5I5QtCKjggBjZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk MWY1YTQwOGYtZTBlYS00ZjMyLTk5OTMtYTc3YTMyNDFkZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39c+2q44AfFTudleWocooEJ8lj74FikHMBQ8 ejhywNLMlmd+twqAFoX1H+evgm3H1fE/LYQ7BwhDKhMvQUqP0A1CSRF64U27pTuK Y0KcXhp76s5mO5pVYmtr1z7IicH7ednPQC0DQ3IniGyIF6yleK6S5RJbDURJXVCP Dw9AyafNN8+n4pbxp24c+ZFwj+S+3zys9qkla6WcjHn493mGsybL0VTIxGRj+cBk MVGvKrjDM7SYD6ASfbg6C3vTvmFXyujbVNfhr+bZhRwhYyU50/5yihi0wY+baVf9 4fR3/dUyDP+g4RHY5cMyo6J8UmokbzyKGYZAqhlxDVDBejoNrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB1mhjwxoWNQR7+Cptv4kAFC22SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDY4NDU1ZDItMDUwMS0z YzQwLWI0YTMtOWYwZWYzMDc1YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJm1mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsjSbF/KKyyOKk3XeyJYOCOtbjz4Lo3EFVsawD2WzRDCSOYKUDFbvL9 jkjIlk/3qku9AJgDktc7xWMQ6J45v5E6JpRvH/BdEIn8wCanufk7sB8FgcUnAUAK 75Ys35sE06mJs4CL9AvFdyl9Ikr4ZH4tSwOkj+HB720gh9F+fsdmr4Ljv9rF46kt stP+mx78Z8vXKMZr/WJHimsVz6fvn7Y5tohqkNC/65wwV/f04bsa8CynBjltYDR9 5WZCyCiF6Q4JnPaPmi0VcZAq/lgsrRKFpOtmJsdoBwjN7jGZE4mmlqemc9Fqnb7i gxRLQDeZwnL92QOZ3RwM568UkoX3BD0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:53 2026 by rpki-client