$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa File: 89ca7cd7-8624-3016-b967-e20d9bd36b70.roa (raw, json) Hash identifier: YfaiTHAlrqHe2FNAd6lYuMPoRI0YffdEjHnmUujpg+k= Subject key identifier: 9A:B1:1B:11:EB:AA:BC:A8:73:8B:F4:F8:A8:DD:03:98:F0:53:62:39 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D39CF73C3B32C2FC90E0F0780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 274128 IP address blocks: 38.19.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:73:c3:b3:2c:2f:c9:0e:0f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3b3bc76c-8543-4f54-8bde-46067b8579f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:73:13:68:c6:7c:d6:e3:dc:ee:eb:2e:56: 88:bb:77:c9:d0:97:da:54:cf:90:ec:06:eb:93:b1: 93:68:bb:54:0a:c1:09:68:45:20:dd:4c:d7:c6:35: 8c:f9:81:1f:27:5f:5b:13:b1:e7:b9:07:df:9f:63: bd:ed:73:36:e1:2e:87:c2:71:c3:59:29:35:f5:90: 6b:0f:6c:cb:8b:08:c9:be:4c:fc:ea:43:9f:64:d7: 8d:8a:0b:82:4a:c8:65:6a:c3:ab:37:d0:ff:fd:4e: 1c:89:cb:83:f6:1c:7c:85:3d:68:c2:d4:31:98:9b: d2:03:22:4d:f5:9f:1a:f9:5b:de:ca:6c:c1:dc:7a: 12:7d:57:26:6f:7c:fb:7f:40:11:42:eb:ff:ef:1b: a5:15:f4:1b:cc:b9:2c:30:6b:0f:94:38:5a:74:2a: 72:b9:e5:6c:52:62:a2:46:f5:22:97:38:60:df:7b: 8c:a8:e4:76:f8:91:0c:1b:ab:fc:91:db:da:f5:fb: c0:c3:3f:2f:f3:dc:4e:73:21:ea:39:70:a6:1c:fc: cc:5a:0c:49:3e:a8:df:61:5f:1a:84:fe:04:ae:e9: a5:61:2a:87:9a:f5:98:25:da:e5:5d:df:52:21:13: 89:aa:59:7d:5a:d2:fa:69:b1:59:46:f2:b7:e2:8b: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B1:1B:11:EB:AA:BC:A8:73:8B:F4:F8:A8:DD:03:98:F0:53:62:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:aa:2b:08:c3:99:32:92:b9:32:e4:ea:77:75:59:ab:26:48: d8:0d:71:4c:8e:4b:c2:21:7d:47:cf:45:a4:bd:c6:ac:5b:dd: c2:b7:a6:52:10:44:db:3e:8d:e7:33:4e:a5:36:32:63:8b:90: 04:ab:7a:02:2c:f5:8e:e6:a2:44:fe:bb:95:c5:53:66:9e:69: 05:ef:4d:1a:b4:69:ed:1a:7c:d4:ac:d7:af:bc:a6:fc:10:6c: 3f:56:9a:31:5e:14:f3:d5:5c:60:9c:2b:56:ed:06:f0:61:e6: 01:08:13:7f:9d:df:cd:82:da:a3:cd:f4:1c:9a:da:08:01:0f: f2:d6:f1:c7:0d:f4:cb:e9:76:67:3e:54:c7:39:7e:18:7b:87: a6:11:70:80:fb:a7:16:6a:19:cf:ae:fa:19:d8:49:39:c1:c1: 85:fa:a6:59:84:64:42:33:8b:e5:49:35:f4:a3:4b:dd:4c:0a: bb:b3:dd:95:5c:69:14:96:23:cf:91:77:ac:a5:1d:e4:56:2e: 3b:9b:01:04:da:a0:b5:2f:5c:b9:1c:e3:e3:3f:cc:4e:a8:0b: 24:28:b4:84:5f:09:72:c5:02:b3:f5:5e:62:5d:69:e4:f4:0d: 14:83:24:61:0d:19:c9:14:44:28:3a:a7:8c:b7:a8:3e:d7:ad: 6a:e2:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3PDsywvyQ4PB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk M2IzYmM3NmMtODU0My00ZjU0LThiZGUtNDYwNjdiODU3OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBzE2jGfNbj3O7rLlaIu3fJ0JfaVM+Q7Abr k7GTaLtUCsEJaEUg3UzXxjWM+YEfJ19bE7HnuQffn2O97XM24S6HwnHDWSk19ZBr D2zLiwjJvkz86kOfZNeNiguCSshlasOrN9D//U4cicuD9hx8hT1owtQxmJvSAyJN 9Z8a+VveymzB3HoSfVcmb3z7f0ARQuv/7xulFfQbzLksMGsPlDhadCpyueVsUmKi RvUilzhg33uMqOR2+JEMG6v8kdva9fvAwz8v89xOcyHqOXCmHPzMWgxJPqjfYV8a hP4ErumlYSqHmvWYJdrlXd9SIROJqll9WtL6abFZRvK34osaQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqxGxHrqryoc4v0+KjdA5jwU2I5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODljYTdjZDctODYyNC0z MDE2LWI5NjctZTIwZDliZDM2YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6qKwjDmTKSuTLk6nd1WasmSNgNcUyOS8IhfUfPRaS9xqxb3cK3plIQ RNs+jeczTqU2MmOLkASregIs9Y7mokT+u5XFU2aeaQXvTRq0ae0afNSs16+8pvwQ bD9WmjFeFPPVXGCcK1btBvBh5gEIE3+d382C2qPN9Bya2ggBD/LW8ccN9Mvpdmc+ VMc5fhh7h6YRcID7pxZqGc+u+hnYSTnBwYX6plmEZEIzi+VJNfSjS91MCruz3ZVc aRSWI8+Rd6ylHeRWLjubAQTaoLUvXLkc4+M/zE6oCyQotIRfCXLFArP1XmJdaeT0 DRSDJGENGckURCg6p4y3qD7XrWri+24= -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:24 2026 by rpki-client