$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa File: 5aa6ef72-237e-3afb-88b6-12fde469da44.roa (raw, json) Hash identifier: qrKKHxp7lwWZda4BBEw9ZbZCMGl6g/0Nz98/C1FFbmM= Subject key identifier: EB:B2:98:21:B3:34:C0:DA:47:99:6E:55:6E:26:FB:45:3B:01:4C:7B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C4DD238CFF7C4141AEDDC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 273263 IP address blocks: 38.124.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:dd:23:8c:ff:7c:41:41:ae:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=5f95c82a-ee2f-4031-b2cf-f676ef4e8910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:b2:4a:50:2b:7f:6e:c6:7f:4b:30:65:e9: 01:0f:af:a8:68:fe:61:e9:fd:ba:21:e8:cb:21:bc: e2:29:ce:9b:42:cd:95:8f:87:78:0f:dc:62:4d:69: 5f:c2:7c:ad:dc:bf:3c:5d:91:68:f8:99:f4:4e:cd: 05:e4:6d:9a:dc:e8:65:e8:9b:d2:32:88:c3:b4:4f: ef:a0:3f:61:18:15:40:50:6f:b5:69:1b:6e:91:e7: 9b:ac:ce:d0:f6:d4:94:a4:a0:25:8b:2a:77:f3:15: 88:61:ec:4c:d3:9f:54:9d:fd:7a:a7:1b:01:a4:0d: 97:a5:6c:a9:59:42:46:55:b9:48:e8:6a:4d:ef:b7: 06:13:1a:66:a9:0f:f6:31:a3:da:64:c6:03:c3:d1: fc:a4:91:ee:e7:c5:2b:46:91:d4:c6:24:2d:01:4c: 1f:89:69:d6:3d:52:5e:34:99:dd:01:43:39:45:7f: 9f:be:2f:39:9e:08:16:9e:b8:f5:c9:c4:de:05:f6: 30:db:de:23:80:4b:13:67:f1:9e:79:f8:45:af:26: 21:20:38:d3:96:2c:6d:4c:eb:84:93:a0:33:82:60: 54:03:8c:eb:96:52:4a:67:fd:34:b0:67:3f:d0:4a: 71:8a:00:8a:04:1e:ac:29:d6:1a:e4:f1:30:96:8b: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:98:21:B3:34:C0:DA:47:99:6E:55:6E:26:FB:45:3B:01:4C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.124.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:fa:8a:37:d7:55:3c:eb:f0:07:77:47:05:77:bf:cb:9e:2d: 3e:39:96:1a:82:fd:d2:47:91:84:dc:9d:34:d1:24:e3:01:e6: b3:b9:b4:61:b3:a1:c8:af:91:91:44:01:71:2c:94:07:b0:49: 22:80:63:75:00:a3:0f:dd:e5:fe:02:40:58:71:69:c8:03:10: 59:7a:f6:82:2e:c8:6e:ac:82:e9:44:e2:b3:7d:f0:21:a1:c2: 9a:59:f6:ad:ee:a3:af:d1:5f:f2:9a:53:cd:31:f6:cd:05:bd: f2:0e:f8:26:9a:97:cc:cb:5a:e1:a8:f0:df:0f:32:7d:ea:af: 35:ac:21:64:4c:67:a1:73:e1:84:48:03:09:ff:80:22:19:bf: b9:9e:ee:fd:32:fd:1a:b2:40:a1:7a:80:a0:86:bd:5b:7b:e9: d6:0f:c4:b9:3a:96:11:55:59:27:6f:aa:9f:b6:ac:64:5e:ea: e2:37:a1:bd:0d:7a:3f:49:23:86:b2:5d:3b:db:15:26:ca:1a: 42:8d:94:e4:72:cd:c3:92:a1:97:35:8b:93:b7:31:7a:5d:2a: 6a:20:58:6a:1e:1c:8e:0a:a9:2f:9b:78:ed:68:c0:9b:a2:06: af:64:2b:bc:4a:d7:28:b0:90:0a:c7:d4:b2:8b:93:76:29:e8: 7c:9a:20:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN0jjP98QUGu3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NWY5NWM4MmEtZWUyZi00MDMxLWIyY2YtZjY3NmVmNGU4OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsSySlArf27Gf0swZekBD6+oaP5h6f26IejL IbziKc6bQs2Vj4d4D9xiTWlfwnyt3L88XZFo+Jn0Ts0F5G2a3Ohl6JvSMojDtE/v oD9hGBVAUG+1aRtukeebrM7Q9tSUpKAliyp38xWIYexM059Unf16pxsBpA2XpWyp WUJGVblI6GpN77cGExpmqQ/2MaPaZMYDw9H8pJHu58UrRpHUxiQtAUwfiWnWPVJe NJndAUM5RX+fvi85nggWnrj1ycTeBfYw294jgEsTZ/GeefhFryYhIDjTlixtTOuE k6AzgmBUA4zrllJKZ/00sGc/0EpxigCKBB6sKdYa5PEwlotffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuymCGzNMDaR5luVW4m+0U7AUx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFhNmVmNzItMjM3ZS0z YWZiLTg4YjYtMTJmZGU0NjlkYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT6ijfXVTzr8Ad3RwV3v8ueLT45lhqC/dJHkYTcnTTRJOMB5rO5tGGz ocivkZFEAXEslAewSSKAY3UAow/d5f4CQFhxacgDEFl69oIuyG6sgulE4rN98CGh wppZ9q3uo6/RX/KaU80x9s0FvfIO+Caal8zLWuGo8N8PMn3qrzWsIWRMZ6Fz4YRI Awn/gCIZv7me7v0y/RqyQKF6gKCGvVt76dYPxLk6lhFVWSdvqp+2rGRe6uI3ob0N ej9JI4ayXTvbFSbKGkKNlORyzcOSoZc1i5O3MXpdKmogWGoeHI4KqS+beO1owJui Bq9kK7xK1yiwkArH1LKLk3Yp6HyaIAo= -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:23 2026 by rpki-client