$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819b42a5-05dc-37b0-b3b8-ce850217123f.roa File: 819b42a5-05dc-37b0-b3b8-ce850217123f.roa (raw, json) Hash identifier: Iy9pAbV5289OPm9zyGvgF1C+Wzf1+nkLa+LAxJFJRDo= Subject key identifier: 0D:11:98:D7:3E:F5:4F:6C:42:CA:8F:74:8F:2D:FD:D7:95:C8:F4:2B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C50787DBE1A95F51789860 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819b42a5-05dc-37b0-b3b8-ce850217123f.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 32699 IP address blocks: 38.76.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:07:87:db:e1:a9:5f:51:78:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=5cbac4c6-d90e-41e6-a3e7-ad288c8cb87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:8a:9b:39:e0:3a:24:ba:14:ab:68:60:7d: ac:cb:12:c4:e2:02:56:12:79:3a:c3:15:4d:76:ad: c0:fe:d0:1e:9e:c8:2b:61:6f:06:4f:c1:89:6e:88: 3c:4a:6c:38:f9:20:f3:3d:1e:13:9f:d3:7d:59:26: 65:e6:bf:49:51:c3:2b:aa:8c:34:e2:b2:de:51:1c: e4:fa:70:83:1c:97:80:25:b8:45:e1:c3:b4:94:1c: 6a:ae:82:42:10:08:32:75:b0:7a:29:3b:a0:67:fa: 10:e1:28:d4:4f:93:09:42:71:ff:f0:d8:7d:91:12: 3e:7f:d0:cc:00:a8:40:b1:b5:00:6f:d2:e9:6e:50: 1c:d6:26:a9:cd:22:2f:fc:6c:72:56:83:d7:5c:44: 43:57:44:3c:c9:01:15:4a:6b:2c:87:3c:98:36:4b: 08:3b:95:fc:16:b0:91:bc:81:09:1e:c2:da:f8:d6: 28:4a:9a:a3:bb:49:1a:43:83:ea:95:5e:b4:fc:63: e6:b6:4e:72:85:8f:fe:4c:68:d3:c3:b3:64:cc:5b: 04:4f:4e:e6:08:c4:c0:e5:7a:51:6c:a6:2a:12:4f: 72:e1:20:18:4d:ab:4d:56:e4:4d:a0:2c:18:cf:01: 22:41:2b:24:ea:ea:7c:99:7d:50:02:b0:25:73:23: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:11:98:D7:3E:F5:4F:6C:42:CA:8F:74:8F:2D:FD:D7:95:C8:F4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819b42a5-05dc-37b0-b3b8-ce850217123f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.76.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:16:50:c7:13:36:fb:0a:4f:66:e8:67:99:17:a1:77:80:54: cb:d0:5d:da:b5:be:d2:1e:82:04:4d:76:f0:07:c3:9f:62:11: 6e:17:a3:0d:f2:0e:63:80:45:82:01:c9:39:ef:67:c0:ba:5e: af:38:69:f4:26:11:5b:3e:f3:1b:93:7c:67:fa:53:a3:22:b4: f2:63:8c:50:0b:e7:55:07:69:7e:7b:77:d6:f8:47:02:29:1a: d8:ea:31:48:dd:8d:c3:2b:72:72:3c:38:73:4d:12:07:a1:22: 18:0f:4f:37:63:df:d0:67:f1:7b:01:0a:3f:d3:c9:36:a9:f3: c5:cc:0b:9d:ee:84:f7:84:93:8a:80:f8:54:9c:81:d5:53:d0: 7c:10:42:31:7c:b3:71:5c:ed:c0:5d:44:c9:2b:ff:72:1d:22: 77:95:47:82:bc:f4:90:ca:39:2f:48:f3:97:f6:92:e9:b5:33: a1:76:c7:c2:eb:2e:ac:c2:15:61:d3:8d:9b:de:7b:e8:5a:44: 3e:d4:ee:83:45:83:44:79:47:da:ad:3f:c2:d3:c0:d3:f7:70: af:44:04:58:45:09:ce:7d:6f:46:48:45:4a:ef:7a:1b:64:7f: 1c:a4:2b:9d:a8:f1:27:3a:eb:fd:37:61:57:88:38:a0:59:6e: 8e:fb:9b:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQeH2+GpX1F4mGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NWNiYWM0YzYtZDkwZS00MWU2LWEzZTctYWQyODhjOGNiODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX+KmzngOiS6FKtoYH2syxLE4gJWEnk6wxVN dq3A/tAensgrYW8GT8GJbog8Smw4+SDzPR4Tn9N9WSZl5r9JUcMrqow04rLeURzk +nCDHJeAJbhF4cO0lBxqroJCEAgydbB6KTugZ/oQ4SjUT5MJQnH/8Nh9kRI+f9DM AKhAsbUAb9LpblAc1iapzSIv/GxyVoPXXERDV0Q8yQEVSmsshzyYNksIO5X8FrCR vIEJHsLa+NYoSpqju0kaQ4PqlV60/GPmtk5yhY/+TGjTw7NkzFsET07mCMTA5XpR bKYqEk9y4SAYTatNVuRNoCwYzwEiQSsk6up8mX1QArAlcyPtmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0RmNc+9U9sQsqPdI8t/deVyPQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODE5YjQyYTUtMDVkYy0z N2IwLWIzYjgtY2U4NTAyMTcxMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkz/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgWUMcTNvsKT2boZ5kXoXeAVMvQXdq1vtIeggRNdvAHw59iEW4Xow3y DmOARYIByTnvZ8C6Xq84afQmEVs+8xuTfGf6U6MitPJjjFAL51UHaX57d9b4RwIp GtjqMUjdjcMrcnI8OHNNEgehIhgPTzdj39Bn8XsBCj/TyTap88XMC53uhPeEk4qA +FScgdVT0HwQQjF8s3Fc7cBdRMkr/3IdIneVR4K89JDKOS9I85f2kum1M6F2x8Lr LqzCFWHTjZvee+haRD7U7oNFg0R5R9qtP8LTwNP3cK9EBFhFCc59b0ZIRUrvehtk fxykK52o8Sc66/03YVeIOKBZbo77my4= -----END CERTIFICATE-----Generated at Thu Mar 26 02:20:53 2026 by rpki-client