$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa File: 0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa (raw, json) Hash identifier: gvrxMDpARyGPabpAECjgPPl77CyAyY0wxh398toXcMs= Subject key identifier: 87:45:13:5F:CE:D7:41:AE:F9:43:7E:B5:E9:EB:27:10:41:5B:0A:81 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1B19E3C99A9983D0B03AE340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 46783 IP address blocks: 38.57.234.0/23 maxlen: 24 38.64.56.0/21 maxlen: 24 38.65.88.0/21 maxlen: 24 38.71.18.0/24 maxlen: 24 38.146.29.0/24 maxlen: 24 38.146.30.0/24 maxlen: 24 38.255.16.0/23 maxlen: 24 154.50.110.0/24 maxlen: 24 154.51.40.0/23 maxlen: 24 154.53.74.0/23 maxlen: 24 209.146.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e3:c9:9a:99:83:d0:b0:3a:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=25b7fd7c-29b7-4fbe-bdba-def97ccb0ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:b0:4c:8b:e1:23:75:c1:cc:dd:5f:40:63: 12:8a:f4:f8:cf:36:3b:98:d5:03:9b:f6:94:5c:25: 82:c1:24:4a:d7:8a:a1:a1:78:0b:0e:2f:0d:3d:12: 60:fa:6d:de:02:42:e0:bc:5c:4d:db:e8:9a:b8:62: 25:6f:b2:1d:e4:ff:56:93:ef:81:40:da:c5:eb:95: 61:c7:02:eb:ce:5f:74:40:fe:4c:35:de:e3:27:13: 87:b4:e2:35:70:b8:27:45:73:99:84:73:8f:d2:d1: 58:01:74:2a:28:d7:06:af:4f:c2:6e:9c:5d:30:98: ca:13:e8:b6:9f:ab:15:12:ed:94:a7:4f:d9:da:53: 73:c5:9e:4a:61:cb:28:ab:a2:21:a4:d7:53:46:20: 68:3c:7f:67:bf:ca:71:be:64:41:90:fa:de:8e:e5: 78:ea:9a:d9:20:27:30:9f:f1:4b:a8:c4:dc:3e:1b: 53:a4:0b:d0:ad:91:0d:a7:1d:1f:a2:69:02:e5:06: ca:56:91:66:99:3b:28:2b:86:aa:02:49:c1:f9:b0: 22:0a:39:06:71:d6:94:52:f5:ee:f9:34:cf:07:00: 24:6b:99:61:25:f3:68:9b:de:be:64:f8:99:6b:c9: de:eb:54:c3:69:a1:b8:7d:3a:50:cd:46:0d:ed:12: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:45:13:5F:CE:D7:41:AE:F9:43:7E:B5:E9:EB:27:10:41:5B:0A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.234.0/23 38.64.56.0/21 38.65.88.0/21 38.71.18.0/24 38.146.29.0-38.146.30.255 38.255.16.0/23 154.50.110.0/24 154.51.40.0/23 154.53.74.0/23 209.146.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fa:89:5a:e3:3f:95:bd:10:b4:75:78:b5:e2:3b:b5:44:b0: b6:1f:35:64:04:05:98:b6:f8:73:4d:22:3a:cf:75:b7:66:43: 4e:d0:c1:56:b1:49:70:e6:a5:0c:fb:ea:01:f1:59:d3:7e:c4: 30:9a:e1:bd:5f:db:d9:42:96:c9:77:69:85:17:6f:26:ef:b2: cf:ca:3a:4d:49:02:71:17:30:1b:19:d6:7f:0f:f5:d3:5d:87: 7f:e4:79:2e:d0:fa:cb:2f:ab:3b:0b:df:fc:ff:f3:d7:db:68: 0e:1a:ac:7c:15:84:ab:cd:2a:ca:fd:a2:be:e5:38:a8:e8:df: 20:77:67:7c:82:a0:44:87:78:75:0a:f1:f1:ce:57:59:b2:31: f1:35:8d:68:b6:68:85:d8:d9:52:fa:a3:84:81:15:a5:2f:25: 01:86:68:df:37:c4:37:04:a8:d9:51:b8:07:72:e0:28:24:e8: b8:3d:2b:f6:95:87:25:97:bb:5f:1a:95:e3:97:56:4f:f8:b1: 52:f2:5b:5c:99:94:be:a5:91:2d:8d:81:36:a0:0f:9f:89:3c: 9e:8a:3d:a9:2c:3a:83:6e:f5:1c:96:ad:a7:a1:07:51:40:3f: c3:df:f5:94:08:3e:a0:d8:e0:b0:fe:fb:6b:b9:5f:ec:71:59: 3a:48:6d:c9 -----BEGIN CERTIFICATE----- MIIGgTCCBWmgAwIBAgIUAQ0Mn0MoWE0bGePJmpmD0LA640AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjViN2ZkN2MtMjliNy00ZmJlLWJkYmEtZGVmOTdjY2IwZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWSwTIvhI3XBzN1fQGMSivT4zzY7mNUDm/aU XCWCwSRK14qhoXgLDi8NPRJg+m3eAkLgvFxN2+iauGIlb7Id5P9Wk++BQNrF65Vh xwLrzl90QP5MNd7jJxOHtOI1cLgnRXOZhHOP0tFYAXQqKNcGr0/CbpxdMJjKE+i2 n6sVEu2Up0/Z2lNzxZ5KYcsoq6IhpNdTRiBoPH9nv8pxvmRBkPrejuV46prZICcw n/FLqMTcPhtTpAvQrZENpx0fomkC5QbKVpFmmTsoK4aqAknB+bAiCjkGcdaUUvXu +TTPBwAka5lhJfNom96+ZPiZa8ne61TDaaG4fTpQzUYN7RKOyQIDAQABo4IDkzCC A48wHQYDVR0OBBYEFIdFE1/O10Gu+UN+tenrJxBBWwqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGZhOTM3YWMtZWE1OC0z YjM2LWI0NDQtYWJlM2ViMWUwYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBJjnqAwQD JkA4AwQDJkFYAwQAJkcSMAwDBAAmkh0DBAAmkh4DBAEm/xADBACaMm4DBAGaMygD BAGaNUoDBADRknQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAXPqJWuM/lb0QtHV4teI7tUSwth81ZAQFmLb4 c00iOs91t2ZDTtDBVrFJcOalDPvqAfFZ037EMJrhvV/b2UKWyXdphRdvJu+yz8o6 TUkCcRcwGxnWfw/1012Hf+R5LtD6yy+rOwvf/P/z19toDhqsfBWEq80qyv2ivuU4 qOjfIHdnfIKgRId4dQrx8c5XWbIx8TWNaLZohdjZUvqjhIEVpS8lAYZo3zfENwSo 2VG4B3LgKCTouD0r9pWHJZe7XxqV45dWT/ixUvJbXJmUvqWRLY2BNqAPn4k8noo9 qSw6g271HJatp6EHUUA/w9/1lAg+oNjgsP77a7lf7HFZOkhtyQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:28 2026 by rpki-client