$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b8ea6ab-4223-31fc-9ca8-9cb4eb656569.roa File: 3b8ea6ab-4223-31fc-9ca8-9cb4eb656569.roa (raw, json) Hash identifier: tvXTzVbZD/IlV1VqsWvsKpxcNAHT/0ddANjhlChe8NM= Subject key identifier: 7A:D1:49:2D:77:1E:6F:5C:A1:6C:C2:AE:14:AE:A8:BC:2F:B2:B3:D2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C4DDEA82E94FB582ADF180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b8ea6ab-4223-31fc-9ca8-9cb4eb656569.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 273286 IP address blocks: 38.255.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:dd:ea:82:e9:4f:b5:82:ad:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=f063681e-f602-4364-92c3-980806c8a704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:37:bf:a4:e8:49:64:e6:e3:56:2a:b6:aa: 51:eb:5d:2a:7a:0f:a8:b8:90:e6:34:3e:ec:76:21: ba:04:a6:2b:fd:17:c2:1e:4f:ea:4c:7b:af:2e:97: eb:4c:42:01:79:7f:57:81:42:98:80:20:87:3b:a6: af:30:7e:8b:3b:4e:8d:c0:88:76:64:4a:a0:33:54: 70:17:58:b8:2e:50:69:8f:ba:2d:ed:f4:7e:89:a8: 8d:3c:32:75:e9:44:72:52:71:ca:38:22:cb:3a:cd: 28:2b:8d:4b:b8:80:cd:42:40:aa:f5:a5:a3:3d:aa: bf:ec:42:bd:fa:93:b8:d4:b0:22:d8:bc:8d:15:57: 96:b6:e3:ac:a5:db:46:ed:10:5a:bf:db:28:8f:76: 91:78:60:cf:d2:60:4b:61:9f:54:40:92:da:ae:7c: 72:5d:f6:31:44:80:2e:81:16:1f:a7:dc:59:3d:63: 60:bb:bf:6a:44:f9:29:1a:2d:c1:8f:ee:28:09:2b: 8b:86:36:c4:d3:81:de:97:7c:ef:09:59:1b:44:57: 1e:7a:f2:89:1d:2d:07:19:a8:11:89:37:1f:e3:cd: 6d:20:66:75:e6:59:a6:e7:d0:15:e3:1e:b5:d3:1e: ce:69:d6:68:df:a0:ff:1c:a4:1f:8e:65:47:4b:af: 2e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:49:2D:77:1E:6F:5C:A1:6C:C2:AE:14:AE:A8:BC:2F:B2:B3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b8ea6ab-4223-31fc-9ca8-9cb4eb656569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:d2:3c:bc:88:7d:db:d6:0e:94:de:0c:5b:4e:ca:8a:97:db: 77:5c:c5:8c:b5:7d:9d:df:95:c1:06:08:51:4a:a8:2c:5b:fd: 5f:05:75:ac:56:09:1e:c5:62:68:76:2f:d3:c9:99:02:a6:18: b3:6b:4b:16:e6:6b:0e:37:19:f5:b7:18:12:b1:3e:d5:12:7f: 6f:0b:09:b0:99:81:1d:08:0c:94:71:ab:45:a1:e9:83:6e:8e: af:60:1b:c1:43:0b:fb:25:15:a0:42:79:3e:e1:aa:7e:84:e7: 35:ad:7b:96:a4:1c:c7:03:b6:44:03:3a:42:03:31:86:74:83: 81:15:fe:86:29:ee:14:09:a3:99:e9:bc:39:58:0a:10:58:df: 5f:d4:80:22:6e:da:99:29:a8:c4:c7:8e:80:45:aa:2e:9f:2b: b6:37:50:21:9b:a8:c4:aa:2c:49:4b:c1:79:c5:dd:3c:0d:ac: f3:16:d6:c8:a5:cd:c9:e1:d2:d2:05:f6:46:d6:51:30:da:c0: f1:bc:ab:fd:96:68:09:16:49:9b:8e:89:89:32:f8:b3:b2:ff: 11:2c:ee:04:0d:4a:7c:b1:a2:b2:0d:93:70:90:a8:91:64:cc: 77:23:3a:3e:8c:2e:a8:a5:17:8a:22:74:95:be:f4:89:34:76: 9f:ae:82:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN3qgulPtYKt8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjA2MzY4MWUtZjYwMi00MzY0LTkyYzMtOTgwODA2YzhhNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlg3v6ToSWTm41YqtqpR610qeg+ouJDmND7s diG6BKYr/RfCHk/qTHuvLpfrTEIBeX9XgUKYgCCHO6avMH6LO06NwIh2ZEqgM1Rw F1i4LlBpj7ot7fR+iaiNPDJ16URyUnHKOCLLOs0oK41LuIDNQkCq9aWjPaq/7EK9 +pO41LAi2LyNFVeWtuOspdtG7RBav9soj3aReGDP0mBLYZ9UQJLarnxyXfYxRIAu gRYfp9xZPWNgu79qRPkpGi3Bj+4oCSuLhjbE04Hel3zvCVkbRFceevKJHS0HGagR iTcf481tIGZ15lmm59AV4x610x7OadZo36D/HKQfjmVHS68ujQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrRSS13Hm9coWzCrhSuqLwvsrPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2I4ZWE2YWItNDIyMy0z MWZjLTljYTgtOWNiNGViNjU2NTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTSPLyIfdvWDpTeDFtOyoqX23dcxYy1fZ3flcEGCFFKqCxb/V8FdaxW CR7FYmh2L9PJmQKmGLNrSxbmaw43GfW3GBKxPtUSf28LCbCZgR0IDJRxq0Wh6YNu jq9gG8FDC/slFaBCeT7hqn6E5zWte5akHMcDtkQDOkIDMYZ0g4EV/oYp7hQJo5np vDlYChBY31/UgCJu2pkpqMTHjoBFqi6fK7Y3UCGbqMSqLElLwXnF3TwNrPMW1sil zcnh0tIF9kbWUTDawPG8q/2WaAkWSZuOiYky+LOy/xEs7gQNSnyxorINk3CQqJFk zHcjOj6MLqilF4oidJW+9Ik0dp+ugng= -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:55 2026 by rpki-client