$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa File: 88c3b85d-80cb-3648-8429-3a6687384ef5.roa (raw, json) Hash identifier: FerKXAf50FluIdIEdVH3BK5hss/pnNm5dTyTqfI/Vk8= Subject key identifier: 3F:94:A2:FA:3D:36:B2:B5:40:38:52:94:DE:F7:0E:8C:02:3D:A9:77 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1DE495B8F71D9B22AC330C50 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 213971 IP address blocks: 38.67.22.0/24 maxlen: 24 38.68.44.0/24 maxlen: 24 38.68.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:95:b8:f7:1d:9b:22:ac:33:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=5c233488-4405-49f8-a002-c9dd59b91742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:b5:3e:62:81:af:4c:90:c0:d5:8c:c4:a2: f9:60:08:de:9b:c7:dc:ef:98:fe:02:fa:db:b1:14: ee:c2:5e:81:b7:c3:c6:e0:a2:db:d3:db:92:04:86: 4a:ea:7c:17:1b:db:f4:29:ba:34:c2:db:27:00:4e: 2e:e6:52:15:54:00:71:c6:5a:67:6e:97:e5:0c:de: 77:82:c8:1e:52:f7:f7:b1:7c:53:16:40:e0:b7:b6: 00:2d:86:eb:0d:5d:ea:bd:06:ff:0c:a8:24:07:e8: 08:8d:f1:b3:fe:d3:b3:71:1c:80:2d:11:63:2e:56: 17:e7:58:70:be:1c:be:ed:62:0b:c0:11:a1:49:09: 79:2c:40:9b:c5:2a:bf:ad:d4:ee:3f:42:28:79:b5: c3:e9:3d:14:b0:cc:49:cb:18:85:b7:28:e5:70:ea: b0:49:3b:60:8d:68:6c:8b:c8:8f:d6:ae:83:e1:c6: 79:f3:d6:7c:81:0d:d1:81:c8:eb:80:c1:f7:41:e4: c1:8a:39:ff:5f:9c:99:f7:5d:75:a8:a4:d2:b5:40: 0e:6d:4a:34:78:fd:93:a0:56:5f:72:88:c0:ee:55: 60:4c:9b:02:00:cf:73:0f:a9:c0:c9:94:bb:74:cf: d5:3f:a6:4a:f6:8d:ad:c1:84:e2:44:35:d8:76:3e: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:94:A2:FA:3D:36:B2:B5:40:38:52:94:DE:F7:0E:8C:02:3D:A9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.67.22.0/24 38.68.44.0/24 38.68.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d5:6f:eb:ba:59:5a:f4:6d:4e:cd:1f:36:f5:c3:d3:58:75: 36:be:68:d8:d9:ad:a9:8d:c2:46:57:d6:70:0b:6c:7b:b5:45: 19:c6:ce:74:43:4d:95:4e:78:71:d5:dd:1b:72:ee:c4:4a:3f: 5a:68:45:ba:0f:34:ed:63:39:fc:ff:71:20:ee:66:36:79:fd: 93:3c:62:07:b0:50:6b:08:76:f1:0e:91:02:e5:37:5d:83:02: de:6c:c1:c6:c7:dc:5c:30:43:f1:0e:20:1b:fb:9f:e3:11:39: cf:f2:04:2c:b9:34:17:1e:0b:5c:a6:0c:c9:a8:12:36:b0:e2: 73:34:4a:d5:a0:c2:5f:36:0c:69:b8:da:e5:67:86:a4:25:4e: 27:07:7f:fa:85:72:60:8e:81:97:41:42:91:d0:8a:a7:9c:78: b3:9e:a5:17:84:d5:43:d0:ff:40:a3:2f:cc:aa:6e:f6:94:10: 5e:44:6b:b6:54:ea:2b:dc:96:c0:63:92:dd:a8:b4:65:19:54: 57:3b:7c:55:11:b2:f7:19:f7:43:1f:11:f8:e4:84:54:76:b2: c8:d7:a4:85:02:91:7d:27:31:e7:27:d3:7f:36:64:02:97:3f: f5:bb:10:a2:a7:00:2b:00:8f:93:4d:af:fb:08:e9:c4:a1:50: 53:d9:fb:fa -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0d5JW49x2bIqwzDFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk NWMyMzM0ODgtNDQwNS00OWY4LWEwMDItYzlkZDU5YjkxNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JS1PmKBr0yQwNWMxKL5YAjem8fc75j+Avrb sRTuwl6Bt8PG4KLb09uSBIZK6nwXG9v0Kbo0wtsnAE4u5lIVVABxxlpnbpflDN53 gsgeUvf3sXxTFkDgt7YALYbrDV3qvQb/DKgkB+gIjfGz/tOzcRyALRFjLlYX51hw vhy+7WILwBGhSQl5LECbxSq/rdTuP0IoebXD6T0UsMxJyxiFtyjlcOqwSTtgjWhs i8iP1q6D4cZ589Z8gQ3RgcjrgMH3QeTBijn/X5yZ9111qKTStUAObUo0eP2ToFZf cojA7lVgTJsCAM9zD6nAyZS7dM/VP6ZK9o2twYTiRDXYdj6ldQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD+Uovo9NrK1QDhSlN73DowCPal3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODhjM2I4NWQtODBjYi0z NjQ4LTg0MjktM2E2Njg3Mzg0ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJkMWAwQA JkQsAwQAJkQ4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC/Vb+u6WVr0bU7NHzb1w9NYdTa+aNjZramNwkZX 1nALbHu1RRnGznRDTZVOeHHV3Rty7sRKP1poRboPNO1jOfz/cSDuZjZ5/ZM8Ygew UGsIdvEOkQLlN12DAt5swcbH3FwwQ/EOIBv7n+MROc/yBCy5NBceC1ymDMmoEjaw 4nM0StWgwl82DGm42uVnhqQlTicHf/qFcmCOgZdBQpHQiqeceLOepReE1UPQ/0Cj L8yqbvaUEF5Ea7ZU6ivclsBjkt2otGUZVFc7fFURsvcZ90MfEfjkhFR2ssjXpIUC kX0nMecn0382ZAKXP/W7EKKnACsAj5NNr/sI6cShUFPZ+/o= -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:22 2026 by rpki-client