$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/087b3567-59e7-314b-96f2-dcaf05e4f06f.roa File: 087b3567-59e7-314b-96f2-dcaf05e4f06f.roa (raw, json) Hash identifier: FtFaz7jMafERLVf6kz0Hgog+u8/v7yYGRdQuxbot0J4= Subject key identifier: 6D:8B:27:B1:12:08:F3:60:10:0A:1C:0A:56:D5:0B:BD:78:BB:4B:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D46C483DDA062A43B7D1F8980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/087b3567-59e7-314b-96f2-dcaf05e4f06f.roa Signing time: Tue 24 Mar 2026 16:24:07 +0000 ROA not before: Tue 24 Mar 2026 16:24:07 +0000 ROA not after: Mon 22 Jun 2026 16:24:07 +0000 asID: 274163 IP address blocks: 38.191.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:c4:83:dd:a0:62:a4:3b:7d:1f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 16:24:07 2026 GMT Not After : Jun 22 16:24:07 2026 GMT Subject: CN=1efc452c-d202-45dd-a1df-1fed411b2b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:b2:14:7e:7f:14:e9:0e:7b:c8:d5:83:87: 57:06:5e:80:8d:e1:5a:25:4b:89:36:f5:19:51:27: 4f:f8:5c:10:07:b3:49:ba:27:cf:ba:f7:ce:ff:09: 2c:eb:f2:aa:97:c1:84:2c:b0:64:4a:c9:83:8f:bb: ce:70:a2:39:b5:b2:ca:c1:ea:b4:7d:3b:86:6f:e9: e1:ba:97:a2:68:ac:5c:a2:44:e6:99:5d:5a:77:d3: c7:c6:c2:e3:9a:1e:84:d9:5e:ff:16:d3:d6:39:a4: 36:d3:49:73:fc:d8:8d:8b:59:55:b9:e0:08:41:fa: f6:66:cc:73:2f:dd:ea:ab:a9:53:38:8a:af:20:b3: 9c:f5:10:c7:17:b5:24:a2:cd:f0:dd:e8:68:f3:20: 68:4c:ea:82:2a:61:79:49:3e:f9:f2:df:b4:a0:53: 65:36:f4:39:07:4e:6f:af:29:1f:fe:3b:e6:28:58: ad:ff:7e:a4:aa:d7:32:37:45:66:47:e8:15:b6:ac: a4:3c:fc:69:26:50:58:81:ef:41:e5:e0:42:aa:43: 57:55:49:e8:ad:a8:6e:99:86:a0:22:e8:5a:5d:66: 52:07:58:0f:b8:9f:14:47:ca:ed:3a:51:2e:2d:b0: af:85:3b:13:93:e6:90:79:9b:43:bb:0a:8c:a8:78: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8B:27:B1:12:08:F3:60:10:0A:1C:0A:56:D5:0B:BD:78:BB:4B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/087b3567-59e7-314b-96f2-dcaf05e4f06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.191.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9a:d7:c1:1a:80:36:2c:94:80:19:99:37:eb:20:60:c4:a7: ac:be:c2:fa:3f:90:0a:97:dc:30:13:06:46:74:c8:b5:01:ac: 79:3a:68:60:bd:b7:51:1d:c3:00:30:93:19:f6:9c:e2:10:23: 11:50:e5:9e:8e:e3:da:23:f9:2b:ff:5f:83:61:ab:60:f7:2b: f8:86:98:98:9a:fc:f9:98:7b:d2:63:2b:68:fe:ba:b0:61:46: 42:70:f3:b7:44:08:d6:4c:bf:0d:bf:98:b5:75:e5:4e:ea:66: 69:33:8f:19:a1:2f:e5:74:04:f5:d5:97:6a:b7:74:f8:5e:87: b5:0a:59:7b:80:cf:be:bf:e7:b2:dc:eb:74:b2:81:9b:d5:78: 1a:cb:b2:8a:39:74:2c:d8:51:fe:07:db:4d:2e:07:e3:68:95: 3f:e9:75:ca:b1:0e:3e:14:00:82:dc:7d:7f:a1:f1:90:80:0b: ad:d7:93:1f:67:86:98:d7:f8:d3:8f:46:39:1c:b4:b3:cd:0d: 12:aa:17:c4:0b:52:f0:b4:dd:5f:ab:33:f7:22:a9:86:5a:62: fc:2a:cc:17:47:02:f5:28:f4:c8:cc:08:84:2c:15:ba:98:ce: c1:0b:32:a9:ca:10:4f:3d:ff:e2:91:70:a1:b8:32:7c:ac:04: 8a:a6:fa:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GxIPdoGKkO30fiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDE2MjQwN1oXDTI2MDYyMjE2MjQwN1owLzEtMCsGA1UEAxMk MWVmYzQ1MmMtZDIwMi00NWRkLWExZGYtMWZlZDQxMWIyYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRayFH5/FOkOe8jVg4dXBl6AjeFaJUuJNvUZ USdP+FwQB7NJuifPuvfO/wks6/Kql8GELLBkSsmDj7vOcKI5tbLKweq0fTuGb+nh upeiaKxcokTmmV1ad9PHxsLjmh6E2V7/FtPWOaQ200lz/NiNi1lVueAIQfr2Zsxz L93qq6lTOIqvILOc9RDHF7Ukos3w3eho8yBoTOqCKmF5ST758t+0oFNlNvQ5B05v rykf/jvmKFit/36kqtcyN0VmR+gVtqykPPxpJlBYge9B5eBCqkNXVUnorahumYag IuhaXWZSB1gPuJ8UR8rtOlEuLbCvhTsTk+aQeZtDuwqMqHit6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2LJ7ESCPNgEAocClbVC714u0sbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDg3YjM1NjctNTllNy0z MTRiLTk2ZjItZGNhZjA1ZTRmMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJr/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAea18EagDYslIAZmTfrIGDEp6y+wvo/kAqX3DATBkZ0yLUBrHk6aGC9 t1EdwwAwkxn2nOIQIxFQ5Z6O49oj+Sv/X4Nhq2D3K/iGmJia/PmYe9JjK2j+urBh RkJw87dECNZMvw2/mLV15U7qZmkzjxmhL+V0BPXVl2q3dPheh7UKWXuAz76/57Lc 63SygZvVeBrLsoo5dCzYUf4H200uB+NolT/pdcqxDj4UAILcfX+h8ZCAC63Xkx9n hpjX+NOPRjkctLPNDRKqF8QLUvC03V+rM/ciqYZaYvwqzBdHAvUo9MjMCIQsFbqY zsELMqnKEE89/+KRcKG4MnysBIqm+oE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:15:42 2026 by rpki-client