$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0c8e05ea-aa35-37f6-9c86-b2cf0efd941e.roa File: 0c8e05ea-aa35-37f6-9c86-b2cf0efd941e.roa (raw, json) Hash identifier: NlcTHJv7Yb8f2Q9FhgK7h71qZJYfJIQ3W2XEeN2TSyU= Subject key identifier: 1F:00:62:76:89:22:29:54:D8:9C:57:EE:E1:3C:EA:2C:75:65:A9:49 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D46EFE722C3A1E0EA37EAE700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0c8e05ea-aa35-37f6-9c86-b2cf0efd941e.roa Signing time: Tue 24 Mar 2026 17:51:32 +0000 ROA not before: Tue 24 Mar 2026 17:51:32 +0000 ROA not after: Mon 22 Jun 2026 17:51:32 +0000 asID: 0 IP address blocks: 38.86.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:ef:e7:22:c3:a1:e0:ea:37:ea:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 17:51:32 2026 GMT Not After : Jun 22 17:51:32 2026 GMT Subject: CN=0e94d82d-c8f1-4a6a-8084-9dc72692caec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:7a:ac:d0:66:e3:ac:37:11:5b:3c:26:23: a2:34:76:83:01:60:39:d1:76:53:1f:bc:9b:fa:77: c1:55:0e:b9:ab:d3:b2:2a:01:7d:d9:e2:9a:3b:57: 09:93:ab:77:73:67:71:3e:4e:b8:15:9b:38:a4:6a: 5f:2f:7a:4d:81:75:3e:47:8a:64:f9:94:06:5d:48: f4:9c:51:07:50:08:37:08:b3:9f:f1:5f:16:b3:b9: 04:5f:65:29:df:da:91:3c:e3:0a:ee:46:6f:f0:dd: 24:d3:50:a7:c5:45:6e:55:5a:55:14:0e:8f:88:27: 77:56:e3:82:e8:ef:b2:ff:b9:ab:65:36:87:ef:62: d1:40:d0:42:e0:fc:dd:7a:00:c6:e6:54:f7:e1:da: 85:96:fd:89:a7:2d:72:c4:2f:9d:b2:37:ac:36:bf: 41:32:d0:7a:49:b8:a7:fb:ca:c5:b9:0f:e9:62:f9: 21:09:d9:44:27:e3:e9:08:6f:77:fe:d7:bf:e3:92: 41:85:ff:3d:e5:1e:8a:29:6a:2f:f3:c1:a2:70:af: 5b:96:65:c4:e9:40:19:f0:51:07:bc:9e:3c:be:ec: 79:22:11:b8:2c:b1:75:42:22:ba:2d:f2:b2:2c:68: 98:7a:ed:58:65:f0:e0:dd:8b:97:76:cd:2b:01:b0: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:62:76:89:22:29:54:D8:9C:57:EE:E1:3C:EA:2C:75:65:A9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0c8e05ea-aa35-37f6-9c86-b2cf0efd941e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:75:c3:94:c1:c3:66:65:21:35:c3:8a:43:0e:95:54:34:f1: dd:d2:32:a9:12:64:46:40:4c:ea:70:6a:c8:6d:9f:b7:d9:13: 7c:8f:d2:f6:bb:14:6d:8b:37:3b:51:c1:90:33:7e:58:38:84: 22:5b:8c:81:b0:d6:77:1d:c2:e8:d8:41:91:7e:d4:93:cf:67: 28:8f:20:02:c6:35:07:94:57:85:2d:a8:08:07:8a:35:2a:88: 97:43:da:53:e8:bc:d6:be:f0:3d:8f:db:0a:5a:6f:e3:19:06: 16:03:52:70:8e:2e:7e:66:32:25:ca:11:05:ec:e4:b5:b7:04: 26:d8:ef:a3:ed:be:bc:fb:61:87:ef:1a:99:59:9f:29:0c:9f: 36:ef:7f:7c:ad:6d:8b:2d:df:09:5d:f8:d0:fd:19:aa:f6:57: 64:a4:08:62:f6:5d:c7:d3:39:fd:6e:f4:f8:e0:ce:c0:e4:90: 1a:64:f1:91:26:d5:e4:50:6d:a7:76:48:37:71:64:f5:24:25: 47:2d:d9:a3:0f:cc:e7:4c:3c:75:a6:fb:a7:ab:54:e7:f4:2c: d8:8a:a0:49:ee:2c:32:80:31:ee:b5:a8:14:eb:f4:bb:c7:1a: 3f:6e:e3:74:48:ec:2d:e3:5f:64:c2:7b:35:df:0e:45:22:6c: e4:9d:59:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1G7+ciw6Hg6jfq5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDE3NTEzMloXDTI2MDYyMjE3NTEzMlowLzEtMCsGA1UEAxMk MGU5NGQ4MmQtYzhmMS00YTZhLTgwODQtOWRjNzI2OTJjYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnox6rNBm46w3EVs8JiOiNHaDAWA50XZTH7yb +nfBVQ65q9OyKgF92eKaO1cJk6t3c2dxPk64FZs4pGpfL3pNgXU+R4pk+ZQGXUj0 nFEHUAg3CLOf8V8Ws7kEX2Up39qRPOMK7kZv8N0k01CnxUVuVVpVFA6PiCd3VuOC 6O+y/7mrZTaH72LRQNBC4PzdegDG5lT34dqFlv2Jpy1yxC+dsjesNr9BMtB6Sbin +8rFuQ/pYvkhCdlEJ+PpCG93/te/45JBhf895R6KKWov88GicK9blmXE6UAZ8FEH vJ48vux5IhG4LLF1QiK6LfKyLGiYeu1YZfDg3YuXds0rAbCHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8AYnaJIilU2JxX7uE86ix1ZalJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGM4ZTA1ZWEtYWEzNS0z N2Y2LTljODYtYjJjZjBlZmQ5NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJlbmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp1w5TBw2ZlITXDikMOlVQ08d3SMqkSZEZATOpwashtn7fZE3yP0va7 FG2LNztRwZAzflg4hCJbjIGw1ncdwujYQZF+1JPPZyiPIALGNQeUV4UtqAgHijUq iJdD2lPovNa+8D2P2wpab+MZBhYDUnCOLn5mMiXKEQXs5LW3BCbY76Ptvrz7YYfv GplZnykMnzbvf3ytbYst3wld+ND9Gar2V2SkCGL2XcfTOf1u9PjgzsDkkBpk8ZEm 1eRQbad2SDdxZPUkJUct2aMPzOdMPHWm+6erVOf0LNiKoEnuLDKAMe61qBTr9LvH Gj9u43RI7C3jX2TCezXfDkUibOSdWQ4= -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:32 2026 by rpki-client