$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2681aa1a-7c18-36c5-aefe-41e69a11297d.roa File: 2681aa1a-7c18-36c5-aefe-41e69a11297d.roa (raw, json) Hash identifier: 6xQVxkyd/NGBqq3ukauiuQPpCWkE60I+OsJr55baeqE= Subject key identifier: 70:0D:55:3B:37:AC:9A:90:B6:3B:E1:41:C6:05:6C:9A:D2:33:A9:0E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D46F242252374526627158100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2681aa1a-7c18-36c5-aefe-41e69a11297d.roa Signing time: Tue 24 Mar 2026 17:56:17 +0000 ROA not before: Tue 24 Mar 2026 17:56:17 +0000 ROA not after: Mon 22 Jun 2026 17:56:17 +0000 asID: 263806 IP address blocks: 38.191.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:f2:42:25:23:74:52:66:27:15:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 17:56:17 2026 GMT Not After : Jun 22 17:56:17 2026 GMT Subject: CN=cd035405-546e-4a31-be2f-1249ba58dff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:82:f1:01:a2:92:73:ab:d7:6f:41:3b:4d: 86:46:1c:fa:6e:08:49:73:81:63:c5:08:89:b0:66: 80:a0:ef:ae:f6:9d:47:4a:44:6b:0f:5c:b0:49:84: 1c:e5:d9:98:ec:bc:08:10:ce:ac:bb:08:f5:e5:48: f0:91:bf:0a:ac:1a:87:1d:89:63:75:84:ac:86:82: 8c:5f:f9:72:ba:32:31:96:a0:8f:8b:1c:57:3d:e7: ca:b7:e5:51:ae:2e:80:e9:34:be:fc:ac:b7:e2:cf: 45:90:8a:a7:13:35:9b:e1:9c:6e:f9:84:88:81:55: 57:93:06:d1:05:7a:07:a7:48:05:61:bd:25:fe:f1: 29:57:63:69:34:8c:54:96:b4:0b:b7:31:6c:77:28: 95:9b:b3:67:80:f7:4a:52:11:18:ee:d8:a9:e2:9c: 51:bd:1c:9b:03:6d:fd:bb:b1:ff:18:5d:06:ab:8c: 47:24:97:02:f5:b1:55:ed:81:d1:00:36:8c:78:20: 91:0d:20:3a:2c:5c:a2:a1:1d:ef:2e:07:4d:03:a2: b6:bc:f7:10:d5:8c:9d:f5:58:79:63:97:fa:2c:ee: 28:11:0c:09:0c:9a:08:31:3e:ba:45:cb:3a:4d:8c: e4:b4:7d:f0:d6:55:a9:49:d4:ba:36:e1:13:48:7f: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:55:3B:37:AC:9A:90:B6:3B:E1:41:C6:05:6C:9A:D2:33:A9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2681aa1a-7c18-36c5-aefe-41e69a11297d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.191.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:24:5c:0a:40:16:99:d0:53:b9:8a:03:e3:58:f4:80:c1:f7: e0:ec:a5:a4:61:b2:fa:90:1a:e2:88:30:1c:cb:23:67:12:83: 02:41:5d:9a:52:c4:8d:ab:a1:8e:1d:35:b4:0b:28:79:bb:7f: 52:95:38:62:01:c0:ad:b1:1e:d3:02:6a:ce:a0:f2:a0:c0:d4: 7a:e9:4c:4e:e1:43:ba:1b:2c:54:57:c8:8b:4a:35:cc:0b:b2: 66:ac:a0:14:39:e3:35:5b:b9:3b:1b:fa:9b:9d:8f:0e:78:1b: 82:43:9e:01:99:9e:25:19:26:5b:ea:26:12:70:39:2a:72:8c: 1f:71:69:b4:39:1c:dd:01:68:13:db:24:c4:27:d1:91:10:74: c7:e7:98:b3:50:49:25:2b:2f:45:c8:7f:55:29:21:c2:c0:b6: 75:9e:a8:d5:b0:d6:c2:3f:cb:c4:1f:b0:fe:f2:df:2f:5e:91: 56:0d:2e:e1:d6:ad:82:46:d8:de:fb:15:27:18:b2:64:e5:36: 92:28:3e:8d:10:65:e4:72:24:1d:9e:20:8e:a3:05:00:80:30: bb:40:d2:9a:23:3b:c6:10:0c:fd:72:83:4c:ba:62:a3:c9:11: 1e:f5:b6:f0:99:df:30:5b:15:43:c5:61:39:de:7e:cf:84:c2: fa:05:15:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1G8kIlI3RSZicVgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDE3NTYxN1oXDTI2MDYyMjE3NTYxN1owLzEtMCsGA1UEAxMk Y2QwMzU0MDUtNTQ2ZS00YTMxLWJlMmYtMTI0OWJhNThkZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCCC8QGiknOr129BO02GRhz6bghJc4FjxQiJ sGaAoO+u9p1HSkRrD1ywSYQc5dmY7LwIEM6suwj15Ujwkb8KrBqHHYljdYSshoKM X/lyujIxlqCPixxXPefKt+VRri6A6TS+/Ky34s9FkIqnEzWb4Zxu+YSIgVVXkwbR BXoHp0gFYb0l/vEpV2NpNIxUlrQLtzFsdyiVm7NngPdKUhEY7tip4pxRvRybA239 u7H/GF0Gq4xHJJcC9bFV7YHRADaMeCCRDSA6LFyioR3vLgdNA6K2vPcQ1Yyd9Vh5 Y5f6LO4oEQwJDJoIMT66Rcs6TYzktH3w1lWpSdS6NuETSH+owQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHANVTs3rJqQtjvhQcYFbJrSM6kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjY4MWFhMWEtN2MxOC0z NmM1LWFlZmUtNDFlNjlhMTEyOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJr9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYkXApAFpnQU7mKA+NY9IDB9+DspaRhsvqQGuKIMBzLI2cSgwJBXZpS xI2roY4dNbQLKHm7f1KVOGIBwK2xHtMCas6g8qDA1HrpTE7hQ7obLFRXyItKNcwL smasoBQ54zVbuTsb+pudjw54G4JDngGZniUZJlvqJhJwOSpyjB9xabQ5HN0BaBPb JMQn0ZEQdMfnmLNQSSUrL0XIf1UpIcLAtnWeqNWw1sI/y8QfsP7y3y9ekVYNLuHW rYJG2N77FScYsmTlNpIoPo0QZeRyJB2eII6jBQCAMLtA0pojO8YQDP1yg0y6YqPJ ER71tvCZ3zBbFUPFYTnefs+EwvoFFf4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:04 2026 by rpki-client