$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b7ec1c0-4f4e-3b0e-a558-40ebef34cb78.roa File: 0b7ec1c0-4f4e-3b0e-a558-40ebef34cb78.roa (raw, json) Hash identifier: quLqu1sXDKPpUvpWJEO/kt/W0l50HC70/tUa/8dqk6Y= Subject key identifier: 0E:EE:E8:25:E3:CA:58:F0:74:39:3B:60:1B:F3:DD:06:CE:C1:90:06 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D12D79B48BDDE900ED5713040 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b7ec1c0-4f4e-3b0e-a558-40ebef34cb78.roa Signing time: Fri 06 Mar 2026 02:00:31 +0000 ROA not before: Fri 06 Mar 2026 02:00:31 +0000 ROA not after: Thu 04 Jun 2026 01:00:31 +0000 asID: 266732 IP address blocks: 38.172.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:d7:9b:48:bd:de:90:0e:d5:71:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 6 02:00:31 2026 GMT Not After : Jun 4 01:00:31 2026 GMT Subject: CN=d3a717d4-b0ad-4d8f-9c89-4983a5355d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:20:48:43:dc:77:20:a5:4a:25:09:ab:3c: 89:0c:df:33:01:0e:6a:dd:94:2c:fe:b5:be:d8:44: 0f:60:d8:61:bf:11:66:48:c4:66:98:44:8d:5d:20: 2e:91:02:ba:2c:b3:fe:82:32:47:f4:24:4a:9e:9c: 1d:c3:26:7f:ab:82:8c:b6:51:bc:1d:ef:da:54:b1: eb:05:38:07:87:4b:1c:a7:15:5f:fe:8f:a6:ac:5c: 26:be:f3:c9:06:c4:45:b3:c6:3b:69:b5:96:eb:ee: 83:e6:de:ca:e3:c9:bd:89:10:50:a3:7a:18:5b:c1: 8c:b5:88:29:20:d8:00:1d:7d:55:05:d4:1e:a4:a5: f8:b3:4a:7a:48:78:40:68:1a:03:52:15:05:7c:47: 83:d4:e6:70:a0:18:97:76:a7:1a:0b:07:e9:da:52: 56:19:dd:42:08:59:38:29:fa:f2:56:e6:b9:3b:23: d2:d8:75:88:6e:54:49:db:a3:a7:aa:20:d7:9a:83: 2f:cb:b6:c9:11:0c:98:39:e1:a3:70:95:f5:78:a1: 0c:ec:31:5b:37:00:d4:96:4e:c7:d4:46:98:43:a3: 2f:47:10:a8:03:46:1c:35:20:d4:cd:4c:96:7b:58: bf:7b:c6:06:c4:51:83:c3:30:bf:11:6b:c4:87:64: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EE:E8:25:E3:CA:58:F0:74:39:3B:60:1B:F3:DD:06:CE:C1:90:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b7ec1c0-4f4e-3b0e-a558-40ebef34cb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:68:dd:7a:36:40:93:4b:6f:54:8d:ac:d5:03:20:22:12:00: 0a:9e:3e:48:32:86:7d:c1:b6:8d:82:7f:1c:0f:61:89:20:eb: 7e:05:0f:34:0b:54:97:78:02:ab:a1:40:be:8f:02:49:24:15: 30:97:31:c2:01:c1:b2:a8:76:5a:75:8e:bc:d1:dd:95:8d:89: 71:82:d4:21:19:8f:3b:94:51:19:e8:b5:d8:63:48:2d:cd:83: 87:c9:76:92:e8:09:c6:ff:a0:f2:d6:6e:8e:6c:0d:c2:cb:ce: 86:38:58:3b:04:bc:43:23:6f:c6:3b:51:c4:50:98:3a:28:63: 69:7e:95:e7:ff:ba:0b:80:e1:74:c7:f3:88:7c:68:b2:4e:2c: b2:d6:63:8c:8a:a2:83:70:a5:f4:0d:29:6b:71:3c:9e:b4:86: d1:f6:a8:d0:a9:73:48:be:99:66:21:82:e3:ad:74:17:cc:bd: 37:64:5b:0a:5a:9b:20:fa:bb:9a:a8:41:8f:40:ef:f7:02:76: 75:b7:ad:df:60:c7:be:6d:66:36:8b:a3:b0:41:8b:6e:d5:e2: 9e:7d:98:18:66:b2:62:f4:b5:b6:30:73:15:b3:24:be:f3:01: dc:e7:ed:89:79:38:5f:31:34:81:c5:bd:09:a4:c8:8d:4f:4a: 36:85:bd:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0S15tIvd6QDtVxMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNjAyMDAzMVoXDTI2MDYwNDAxMDAzMVowLzEtMCsGA1UEAxMk ZDNhNzE3ZDQtYjBhZC00ZDhmLTljODktNDk4M2E1MzU1ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwkgSEPcdyClSiUJqzyJDN8zAQ5q3ZQs/rW+ 2EQPYNhhvxFmSMRmmESNXSAukQK6LLP+gjJH9CRKnpwdwyZ/q4KMtlG8He/aVLHr BTgHh0scpxVf/o+mrFwmvvPJBsRFs8Y7abWW6+6D5t7K48m9iRBQo3oYW8GMtYgp INgAHX1VBdQepKX4s0p6SHhAaBoDUhUFfEeD1OZwoBiXdqcaCwfp2lJWGd1CCFk4 KfryVua5OyPS2HWIblRJ26OnqiDXmoMvy7bJEQyYOeGjcJX1eKEM7DFbNwDUlk7H 1EaYQ6MvRxCoA0YcNSDUzUyWe1i/e8YGxFGDwzC/EWvEh2QnFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7u6CXjyljwdDk7YBvz3QbOwZAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGI3ZWMxYzAtNGY0ZS0z YjBlLWE1NTgtNDBlYmVmMzRjYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJqzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJo3Xo2QJNLb1SNrNUDICISAAqePkgyhn3Bto2CfxwPYYkg634FDzQL VJd4AquhQL6PAkkkFTCXMcIBwbKodlp1jrzR3ZWNiXGC1CEZjzuUURnotdhjSC3N g4fJdpLoCcb/oPLWbo5sDcLLzoY4WDsEvEMjb8Y7UcRQmDooY2l+lef/uguA4XTH 84h8aLJOLLLWY4yKooNwpfQNKWtxPJ60htH2qNCpc0i+mWYhguOtdBfMvTdkWwpa myD6u5qoQY9A7/cCdnW3rd9gx75tZjaLo7BBi27V4p59mBhmsmL0tbYwcxWzJL7z Adzn7Yl5OF8xNIHFvQmkyI1PSjaFvaQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:16:29 2026 by rpki-client