$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e52ae22-5638-3e05-9598-689acab6763f.roa File: 1e52ae22-5638-3e05-9598-689acab6763f.roa (raw, json) Hash identifier: PA+PUe6luqeyI2Nbk+5FGQnZYXPgz+qPvCWVs5Sxi3I= Subject key identifier: CC:C3:C0:A6:BB:7B:D2:7F:63:CC:22:91:4A:41:6F:9A:01:E7:53:3F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D44FA66E718DDD7FD31938B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e52ae22-5638-3e05-9598-689acab6763f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 203217 IP address blocks: 38.3.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:66:e7:18:dd:d7:fd:31:93:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0d38d04c-1858-42e8-a2c6-3212ae9531c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a4:5b:40:71:49:fd:ea:df:b8:cc:7e:02:c5: 78:06:6a:c7:c0:82:e9:cc:0b:5b:b9:8d:c2:f2:81: ab:4b:e2:b0:b2:14:70:75:53:1b:4c:bd:85:27:af: 7a:3e:96:1c:d9:de:17:97:3a:cb:f6:ac:54:ed:d7: db:77:11:5e:00:b6:6c:18:bc:02:4c:9e:1a:dd:d6: 80:24:09:4c:8a:f5:01:21:1a:b0:1a:98:99:f3:44: f4:5b:50:6d:a1:f3:e4:a0:c6:11:26:39:3d:7c:cc: 52:e4:70:a3:e2:b0:a7:4e:b4:a7:d9:4c:a0:3e:45: d1:4a:ac:42:b1:be:e3:78:39:0c:2a:49:57:d4:9f: 47:e5:d8:12:9e:67:27:b1:e5:d8:09:15:ea:3a:8d: ad:79:17:b2:d0:72:76:d7:d0:86:e8:79:ec:20:54: aa:40:db:79:fe:bc:cb:e8:a3:7f:d9:5e:cd:b9:d6: eb:1b:a4:c3:61:02:da:37:67:90:87:6a:91:a7:8a: b5:ed:cf:63:f8:b3:7f:ce:bc:12:19:8c:8a:89:f0: 05:5e:9a:be:81:02:76:03:fd:40:1a:da:55:aa:af: 46:d0:c4:af:87:a5:1a:a5:4a:a4:8d:d2:be:4b:ea: 74:03:e2:41:cb:c0:d0:64:c5:fa:14:13:d3:1d:8f: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C3:C0:A6:BB:7B:D2:7F:63:CC:22:91:4A:41:6F:9A:01:E7:53:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e52ae22-5638-3e05-9598-689acab6763f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:21:a7:d5:d1:29:c7:71:06:c5:30:68:80:36:70:a6:ec:c7: 72:07:92:a9:c5:41:35:c2:76:4d:83:e8:6c:a7:02:af:40:b4: f1:30:f7:9d:4a:9f:93:4a:9d:99:ab:46:e8:f2:67:f6:00:15: 6d:41:0e:4e:01:93:2b:9d:0c:85:eb:31:32:75:0f:17:b9:d7: 18:3a:2f:56:70:48:5f:7b:1a:65:8e:48:4a:fb:92:bc:74:e3: ac:89:7f:bf:71:1b:52:49:7c:36:a9:87:2c:b4:ac:bf:06:02: 26:19:18:94:1f:2d:62:d8:3f:34:c2:78:4a:90:a8:0a:cf:0a: e1:ea:b4:1b:63:17:b1:9b:b9:d7:b6:89:54:57:34:7e:aa:c8: 3e:78:6d:cf:86:95:f8:de:38:96:a4:9c:2e:ac:e6:60:b5:e0: 0c:78:1f:12:26:74:f5:a0:9d:1d:43:04:53:98:81:f5:a3:8b: 79:53:0d:3f:19:ce:3a:14:9a:f9:32:69:66:c4:29:22:c8:e1: cb:a3:da:9c:83:5a:77:a0:f9:2a:d4:f5:f9:f5:10:0c:c8:c5: a5:b0:c3:27:43:c6:6f:d7:10:9c:0b:c9:4e:70:af:3b:c9:23: 0b:7d:7b:3d:ca:da:39:cf:75:2d:a6:80:82:dd:51:f8:51:46: c0:79:20:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mbnGN3X/TGTi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGQzOGQwNGMtMTg1OC00MmU4LWEyYzYtMzIxMmFlOTUzMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6RbQHFJ/erfuMx+AsV4BmrHwILpzAtbuY3C 8oGrS+KwshRwdVMbTL2FJ696PpYc2d4XlzrL9qxU7dfbdxFeALZsGLwCTJ4a3daA JAlMivUBIRqwGpiZ80T0W1BtofPkoMYRJjk9fMxS5HCj4rCnTrSn2UygPkXRSqxC sb7jeDkMKklX1J9H5dgSnmcnseXYCRXqOo2teRey0HJ219CG6HnsIFSqQNt5/rzL 6KN/2V7NudbrG6TDYQLaN2eQh2qRp4q17c9j+LN/zrwSGYyKifAFXpq+gQJ2A/1A GtpVqq9G0MSvh6UapUqkjdK+S+p0A+JBy8DQZMX6FBPTHY/EzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzDwKa7e9J/Y8wikUpBb5oB51M/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWU1MmFlMjItNTYzOC0z ZTA1LTk1OTgtNjg5YWNhYjY3NjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJgPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAshp9XRKcdxBsUwaIA2cKbsx3IHkqnFQTXCdk2D6GynAq9AtPEw951K n5NKnZmrRujyZ/YAFW1BDk4BkyudDIXrMTJ1Dxe51xg6L1ZwSF97GmWOSEr7krx0 46yJf79xG1JJfDaphyy0rL8GAiYZGJQfLWLYPzTCeEqQqArPCuHqtBtjF7Gbude2 iVRXNH6qyD54bc+GlfjeOJaknC6s5mC14Ax4HxImdPWgnR1DBFOYgfWji3lTDT8Z zjoUmvkyaWbEKSLI4cuj2pyDWneg+SrU9fn1EAzIxaWwwydDxm/XEJwLyU5wrzvJ Iwt9ez3K2jnPdS2mgILdUfhRRsB5IGI= -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:26 2026 by rpki-client