$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a860d21-856c-3064-b821-21bff6c35c7b.roa File: 0a860d21-856c-3064-b821-21bff6c35c7b.roa (raw, json) Hash identifier: /ORbwRUDxPuwh9fykpEt9JqwRqIt3k8mWVK90KbGuXs= Subject key identifier: 43:EB:B1:AB:A2:CE:74:2F:84:3E:09:C5:69:57:9A:FB:D7:BE:71:0D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D39CF70031B4A8D0C25E5A400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a860d21-856c-3064-b821-21bff6c35c7b.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 274235 IP address blocks: 38.46.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:70:03:1b:4a:8d:0c:25:e5:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=439aa69e-4a5d-44e9-bd2b-9f4b0e70ee55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:50:2e:5f:e5:f0:f2:d2:df:6d:ce:44:81: 9e:10:a2:18:14:ff:54:7b:fa:6e:da:50:32:20:e1: 5e:e2:66:a6:a1:b6:ba:3c:73:8d:f0:a9:1f:65:46: a1:2e:55:4b:71:f8:8e:24:4b:ad:9f:5a:87:55:0f: f3:25:cc:3d:f6:12:6f:c1:ea:17:29:3e:d6:48:56: 8a:ba:a2:32:4c:fc:13:15:54:99:7c:e9:52:41:1b: d6:49:5b:c7:ba:29:a0:26:c4:e8:3b:e8:0d:2a:5c: a2:2b:49:45:47:a4:9a:82:9d:2b:44:4d:6b:fe:03: ff:58:56:5c:bf:f5:98:9f:1c:b9:65:6d:3c:77:1f: 1c:20:73:69:b2:b0:76:84:29:d5:48:a7:5d:bf:43: ff:fa:a8:ec:65:ea:fd:65:04:db:89:50:f9:86:c5: ec:dd:1b:88:31:9e:01:a9:e6:d1:ea:25:5f:28:16: dc:d2:bc:0a:21:67:c3:85:8c:8d:b6:b9:3b:73:49: 3a:0b:d0:5a:79:19:dd:0b:ba:07:e2:0a:e1:b7:c0: 62:ee:70:bb:9d:b1:3e:44:ad:97:10:08:9f:fb:8a: 1c:ec:7d:f3:25:b9:09:09:9f:fb:14:cd:22:e5:e4: be:63:6c:aa:5b:1c:1c:0e:71:c1:1d:04:53:f6:a6: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EB:B1:AB:A2:CE:74:2F:84:3E:09:C5:69:57:9A:FB:D7:BE:71:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a860d21-856c-3064-b821-21bff6c35c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.46.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f1:74:98:24:3d:71:d6:eb:3e:61:c0:3e:2f:27:f9:c6:30: 8a:00:9c:61:cf:94:d9:d1:ec:d1:48:41:14:d5:34:96:e3:55: 57:85:4a:f0:8b:9e:ac:cf:f5:04:89:69:4f:b1:62:ac:d0:81: ea:a0:1a:e4:e4:45:33:38:9b:1d:1b:e1:a8:a2:38:1e:3e:26: 9a:fb:56:0e:6c:99:e6:8d:87:22:3b:63:1f:f1:d9:70:48:bc: 19:5c:09:27:e5:2c:4a:cc:ba:d3:f4:ee:64:34:23:88:8d:89: 8a:ed:97:8e:32:e5:91:03:b3:ae:fb:25:d4:f9:12:ea:5b:85: 60:14:e8:ea:81:74:33:30:55:b7:00:fb:08:4b:c0:08:e2:84: 36:30:67:34:65:82:e2:12:06:85:2a:d7:2f:48:fb:fa:1d:84: 81:1e:a2:54:3d:14:f2:9d:43:51:9b:e8:64:8b:84:c6:ca:30: 0e:e1:39:b1:a1:31:1a:c1:a6:f7:7d:ce:8b:a6:b6:5b:14:b0: 2c:7e:88:ad:a8:b0:35:bb:1e:f1:d9:ea:8d:d7:90:7d:2a:32: f9:ce:c7:c2:a2:6a:9b:3c:7d:a8:1c:60:ec:20:d7:16:70:99: 45:31:fe:c6:37:43:b4:b6:59:c4:fc:b0:09:e3:47:75:ed:d9: 74:ab:d4:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3ADG0qNDCXlpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NDM5YWE2OWUtNGE1ZC00NGU5LWJkMmItOWY0YjBlNzBlZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2NQLl/l8PLS323ORIGeEKIYFP9Ue/pu2lAy IOFe4mamoba6PHON8KkfZUahLlVLcfiOJEutn1qHVQ/zJcw99hJvweoXKT7WSFaK uqIyTPwTFVSZfOlSQRvWSVvHuimgJsToO+gNKlyiK0lFR6Sagp0rRE1r/gP/WFZc v/WYnxy5ZW08dx8cIHNpsrB2hCnVSKddv0P/+qjsZer9ZQTbiVD5hsXs3RuIMZ4B qebR6iVfKBbc0rwKIWfDhYyNtrk7c0k6C9BaeRndC7oH4grht8Bi7nC7nbE+RK2X EAif+4oc7H3zJbkJCZ/7FM0i5eS+Y2yqWxwcDnHBHQRT9qYYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPrsauiznQvhD4JxWlXmvvXvnENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGE4NjBkMjEtODU2Yy0z MDY0LWI4MjEtMjFiZmY2YzM1YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJi7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLxdJgkPXHW6z5hwD4vJ/nGMIoAnGHPlNnR7NFIQRTVNJbjVVeFSvCL nqzP9QSJaU+xYqzQgeqgGuTkRTM4mx0b4aiiOB4+Jpr7Vg5smeaNhyI7Yx/x2XBI vBlcCSflLErMutP07mQ0I4iNiYrtl44y5ZEDs677JdT5EupbhWAU6OqBdDMwVbcA +whLwAjihDYwZzRlguISBoUq1y9I+/odhIEeolQ9FPKdQ1Gb6GSLhMbKMA7hObGh MRrBpvd9zoumtlsUsCx+iK2osDW7HvHZ6o3XkH0qMvnOx8Kiaps8fagcYOwg1xZw mUUx/sY3Q7S2WcT8sAnjR3Xt2XSr1P4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:50 2026 by rpki-client