$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa File: 69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa (raw, json) Hash identifier: DEmD0/99XlrcQYssS59KJ0q1u0WWkhgpsz2tiU/YRMA= Subject key identifier: EC:D2:0C:B6:7D:40:9A:A5:4A:DB:A6:80:57:7D:0A:D9:CD:28:84:A9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D422F7C93860F89EDF85B51E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 138296 IP address blocks: 38.20.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:7c:93:86:0f:89:ed:f8:5b:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=f7d22a1c-b973-4ecb-bcf0-468f77e1ace1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:92:4d:a1:27:52:49:93:bd:61:c9:97:4b: 9a:60:2b:60:ec:9f:dc:88:6c:00:a3:ea:85:b8:9a: ab:03:c0:ed:ea:93:cf:c3:bf:4f:92:14:cf:af:83: fa:43:c9:90:0e:cb:a4:65:74:1d:11:76:e4:25:18: 08:e9:69:f4:98:a9:57:d3:0a:1f:97:0b:68:03:02: 89:30:4e:17:45:dc:48:55:4b:18:25:eb:25:cc:01: 3e:95:10:e1:76:5e:ac:10:a3:a7:ff:e9:e4:51:9d: 70:63:36:99:2b:64:0f:49:bd:6e:ce:c7:42:e3:11: 23:0e:bf:dc:3d:fd:10:7d:be:20:f3:60:63:c5:91: 6e:02:ed:47:03:9a:2b:14:db:5c:13:de:94:d3:af: 4c:0f:e3:99:4c:e2:8f:77:f0:e4:e9:5f:c0:dd:e9: fc:ab:f0:b1:4b:38:dd:26:e8:ba:1c:ce:74:e3:f0: 7e:ae:b1:a3:76:16:09:2a:c9:71:99:8e:90:56:e6: e8:74:3c:d1:89:3b:2c:6d:92:c9:46:5b:c0:93:59: 61:fb:d0:1c:ad:9b:95:8c:93:8a:8f:97:11:78:e0: 52:2c:1e:6f:cb:25:5d:47:ba:05:30:16:40:63:a7: 00:04:a0:3a:d6:8f:13:d8:90:5b:9a:b0:42:51:ce: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D2:0C:B6:7D:40:9A:A5:4A:DB:A6:80:57:7D:0A:D9:CD:28:84:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3b:a5:8c:47:31:53:10:69:c7:d8:62:65:7c:95:73:c4:5f: 2c:2c:65:53:e7:10:c5:52:24:52:9e:2d:b8:1b:77:c2:09:2f: 29:aa:a3:55:45:21:5a:16:af:1d:ad:bd:0f:dc:be:41:7a:6a: 0e:6a:57:5d:2d:91:80:3d:87:e4:b7:69:ca:58:e8:68:95:de: 50:13:21:07:64:f0:07:f8:bd:72:b7:29:b6:44:80:f2:b8:a0: 9f:8b:6a:88:b2:55:fa:72:2a:77:be:5c:ef:a6:45:6e:96:fe: b0:63:7d:74:05:9a:62:e0:a2:7c:50:75:d3:3a:55:8f:c7:5d: 12:10:fb:31:67:92:41:4d:06:3f:29:3d:b5:46:02:ba:1e:b1: 1f:12:90:50:a6:48:62:8e:6e:10:7b:ad:32:06:9f:1a:ec:08: 59:5a:65:a9:e9:cb:37:13:dc:b8:e3:c8:a3:f2:83:7e:45:cb: b0:9f:3c:83:d7:dd:57:36:74:71:1c:e4:6f:a0:88:20:57:05: fa:ee:ea:ad:70:a4:b4:b6:e9:08:d6:59:94:79:41:cd:74:03: 28:06:8e:d6:11:ea:82:03:93:9b:60:b2:ad:a7:34:34:e9:2a: b3:61:e2:74:7b:49:3a:8e:c9:14:52:64:97:66:f2:cc:b0:2c: 24:46:f4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL3yThg+J7fhbUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjdkMjJhMWMtYjk3My00ZWNiLWJjZjAtNDY4Zjc3ZTFhY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutiSTaEnUkmTvWHJl0uaYCtg7J/ciGwAo+qF uJqrA8Dt6pPPw79PkhTPr4P6Q8mQDsukZXQdEXbkJRgI6Wn0mKlX0woflwtoAwKJ ME4XRdxIVUsYJeslzAE+lRDhdl6sEKOn/+nkUZ1wYzaZK2QPSb1uzsdC4xEjDr/c Pf0Qfb4g82BjxZFuAu1HA5orFNtcE96U069MD+OZTOKPd/Dk6V/A3en8q/CxSzjd Jui6HM504/B+rrGjdhYJKslxmY6QVubodDzRiTssbZLJRlvAk1lh+9AcrZuVjJOK j5cReOBSLB5vyyVdR7oFMBZAY6cABKA61o8T2JBbmrBCUc4XpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzSDLZ9QJqlStumgFd9CtnNKISpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjk4NTBkZDktNzRiMC0z YWUxLTg5ZmItN2RkN2JkNTlmNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU7pYxHMVMQacfYYmV8lXPEXywsZVPnEMVSJFKeLbgbd8IJLymqo1VF IVoWrx2tvQ/cvkF6ag5qV10tkYA9h+S3acpY6GiV3lATIQdk8Af4vXK3KbZEgPK4 oJ+LaoiyVfpyKne+XO+mRW6W/rBjfXQFmmLgonxQddM6VY/HXRIQ+zFnkkFNBj8p PbVGAroesR8SkFCmSGKObhB7rTIGnxrsCFlaZanpyzcT3LjjyKPyg35Fy7CfPIPX 3Vc2dHEc5G+giCBXBfru6q1wpLS26QjWWZR5Qc10AygGjtYR6oIDk5tgsq2nNDTp KrNh4nR7STqOyRRSZJdm8sywLCRG9Fk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:35 2026 by rpki-client