$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86265be1-30ba-31aa-992f-37518feccdb6.roa File: 86265be1-30ba-31aa-992f-37518feccdb6.roa (raw, json) Hash identifier: TGdDbJYxCePu4I3Y1kBH9ZKNNCuk5jcUF+yg7OSWtQw= Subject key identifier: B5:EE:7D:4C:47:5B:2F:90:13:B0:D9:53:AE:E0:4E:99:44:4D:2D:16 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D3081E5672B8DCC432CD6D300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86265be1-30ba-31aa-992f-37518feccdb6.roa Signing time: Mon 16 Mar 2026 17:02:06 +0000 ROA not before: Mon 16 Mar 2026 17:02:06 +0000 ROA not after: Sun 14 Jun 2026 17:02:06 +0000 asID: 209753 IP address blocks: 38.27.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:81:e5:67:2b:8d:cc:43:2c:d6:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 16 17:02:06 2026 GMT Not After : Jun 14 17:02:06 2026 GMT Subject: CN=ee55d391-62f6-41f1-b22a-b3a65d4394dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:aa:d1:28:8f:1e:05:af:d2:ca:80:83:81: e2:fb:25:66:b4:6d:1e:74:42:dc:ae:a1:86:c6:62: 31:7b:24:b8:4a:f8:8a:e1:bc:83:69:fb:7c:e2:a3: 08:c3:01:38:14:ff:3c:df:b9:cd:85:91:c3:85:de: 0c:0d:76:56:ba:6e:ad:1f:94:c1:1d:fa:c1:4d:5e: 7e:58:45:e3:91:92:17:8e:f7:27:ca:66:d4:98:d1: e1:9d:e8:50:37:31:b1:1e:89:18:1a:f7:82:3d:88: 93:c4:76:d8:65:40:b6:42:03:57:18:b5:dd:ed:88: 0b:5d:0a:eb:ab:7d:c6:ff:70:da:bf:73:38:6f:7a: 5d:ce:6d:5f:d9:82:bc:df:fd:cd:6b:56:60:dd:f8: 44:8b:e8:cc:6b:e6:7c:0e:19:7c:2c:df:dd:d0:0c: 85:02:fd:59:c3:98:0a:76:d3:d3:6a:be:63:22:d8: b2:42:da:9b:e8:1f:b7:ab:c5:34:e4:1c:b2:9a:e6: fc:85:70:40:c5:1d:8f:b1:4d:5d:1c:b2:69:e3:80: 3e:6b:88:16:b5:a5:0b:96:6f:81:d2:ed:7e:9b:7d: 00:9a:be:50:2f:54:7d:55:48:e7:77:2d:30:3d:fa: 41:b2:7d:cf:85:fe:da:1f:0f:a2:76:85:a0:8a:ec: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EE:7D:4C:47:5B:2F:90:13:B0:D9:53:AE:E0:4E:99:44:4D:2D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86265be1-30ba-31aa-992f-37518feccdb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.27.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5a:c5:d0:c5:35:87:de:ef:cc:a0:0b:4e:27:ac:83:db:38: 77:04:ab:03:73:69:74:6a:0b:dc:36:c2:e0:c4:c5:d3:68:b1: b1:73:c6:a8:51:c5:ad:78:cb:8a:fa:b7:f6:02:3d:d1:3b:f1: 3a:c0:ec:73:c2:d1:f6:4a:29:f3:ed:a2:7e:ef:72:12:fb:af: 95:67:96:bd:70:b5:94:c1:fc:96:50:8e:09:b1:9a:3d:e6:21: 2c:c3:9d:5a:f1:d9:37:b5:82:94:ee:4c:ef:62:ce:f3:ff:cf: b6:f8:4c:cc:2d:d3:fa:9c:76:96:ec:7a:63:3b:dd:c8:3f:23: 62:9b:af:6c:35:2e:df:a2:cf:5f:85:c7:d5:d1:5a:d0:e7:7b: 4d:80:3b:4d:63:85:ae:94:39:1c:c8:bb:7c:78:bd:fd:54:f6: 30:32:82:94:f4:40:5b:2a:48:18:b3:b0:9f:90:58:61:3b:43: ba:ed:7c:eb:74:98:57:ed:56:5b:72:8e:51:96:64:4e:20:19: c1:fe:72:e4:24:f6:37:7b:77:d9:9a:91:dd:29:50:59:8f:5a: 5c:19:52:20:54:2e:3c:5c:43:1b:e6:35:3a:e5:2a:e6:e7:98: 44:d8:88:d3:8e:62:a2:e4:8f:ab:da:97:b2:13:af:bc:7f:da: f0:b9:c5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wgeVnK43MQyzW0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNjE3MDIwNloXDTI2MDYxNDE3MDIwNlowLzEtMCsGA1UEAxMk ZWU1NWQzOTEtNjJmNi00MWYxLWIyMmEtYjNhNjVkNDM5NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGWq0SiPHgWv0sqAg4Hi+yVmtG0edELcrqGG xmIxeyS4SviK4byDaft84qMIwwE4FP8837nNhZHDhd4MDXZWum6tH5TBHfrBTV5+ WEXjkZIXjvcnymbUmNHhnehQNzGxHokYGveCPYiTxHbYZUC2QgNXGLXd7YgLXQrr q33G/3Dav3M4b3pdzm1f2YK83/3Na1Zg3fhEi+jMa+Z8Dhl8LN/d0AyFAv1Zw5gK dtPTar5jItiyQtqb6B+3q8U05Byymub8hXBAxR2PsU1dHLJp44A+a4gWtaULlm+B 0u1+m30Amr5QL1R9VUjndy0wPfpBsn3Phf7aHw+idoWgiux1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXufUxHWy+QE7DZU67gTplETS0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODYyNjViZTEtMzBiYS0z MWFhLTk5MmYtMzc1MThmZWNjZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVaxdDFNYfe78ygC04nrIPbOHcEqwNzaXRqC9w2wuDExdNosbFzxqhR xa14y4r6t/YCPdE78TrA7HPC0fZKKfPton7vchL7r5Vnlr1wtZTB/JZQjgmxmj3m ISzDnVrx2Te1gpTuTO9izvP/z7b4TMwt0/qcdpbsemM73cg/I2Kbr2w1Lt+iz1+F x9XRWtDne02AO01jha6UORzIu3x4vf1U9jAygpT0QFsqSBizsJ+QWGE7Q7rtfOt0 mFftVltyjlGWZE4gGcH+cuQk9jd7d9makd0pUFmPWlwZUiBULjxcQxvmNTrlKubn mETYiNOOYqLkj6val7ITr7x/2vC5xXE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:55 2026 by rpki-client