$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa File: 8a4a6d73-86b2-374e-9586-7f1f094d9649.roa (raw, json) Hash identifier: 2sc8yeRRhz+hJ+aZgYSd935XNg/qOVjW4WbkGvTa8vI= Subject key identifier: C2:25:BB:75:28:0D:FA:BB:8B:25:6F:9C:8A:45:B7:39:48:C1:DC:C0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D44FA74725AC48B735FF9C500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 203217 IP address blocks: 38.3.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:74:72:5a:c4:8b:73:5f:f9:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=926051f3-8ed1-4e93-abb2-5bcc85972dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:c9:0e:70:4a:06:c3:1d:80:c5:e6:07:4d: 2b:ac:a0:47:8f:6f:a9:c5:d9:84:6f:3e:f7:48:3b: 77:7f:02:17:35:6d:f6:70:39:be:fa:4d:c5:15:20: 1e:09:b4:b9:17:3d:c3:b8:cd:5e:59:6f:36:58:ce: 03:1a:12:1b:76:18:b3:18:d5:ba:77:ee:16:94:75: 4c:4d:cc:c3:bf:d5:70:bf:d0:d3:5f:dd:65:75:b9: dc:e6:fd:ac:f1:1e:03:1b:86:32:72:50:57:70:a8: 18:ee:37:1a:ed:3a:07:cd:21:33:3c:50:d6:d4:c8: c7:be:40:75:07:81:ed:43:3a:52:b8:c6:d1:21:56: 74:d8:cd:4e:81:33:e2:e6:c1:31:04:ce:3b:ff:13: f7:62:3f:eb:dc:1f:8d:81:7f:42:c3:e6:99:33:1a: 30:99:63:ca:e2:6c:f5:b2:44:e2:45:ad:76:e7:7a: 96:2c:3c:0f:13:b8:dc:00:97:a3:65:82:db:2c:8e: c7:e1:08:66:b1:88:bf:3c:ca:5f:3b:99:aa:2a:af: aa:93:82:37:b1:a4:ec:48:31:a5:54:9c:88:98:28: 5d:11:63:de:ca:90:a0:01:6b:55:36:5d:27:51:33: fa:f4:b5:60:a4:6a:a7:5c:10:f5:42:42:c3:9b:f6: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:25:BB:75:28:0D:FA:BB:8B:25:6F:9C:8A:45:B7:39:48:C1:DC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:33:7d:da:89:3d:0b:e1:2b:85:13:a6:f2:1a:27:c6:e9:4b: 15:13:2f:f3:fe:49:7a:ca:ca:d0:ab:6b:00:b3:6b:e3:9a:7c: 63:c2:03:14:b1:0b:ed:c3:00:99:b9:fb:a8:6e:78:9d:9f:67: 6b:66:2d:0b:e3:3c:54:9e:b7:8d:9c:f1:ef:f6:fd:61:fc:d8: 7b:bd:2c:ba:e7:99:a8:90:0f:8f:26:9c:ef:2a:0f:d1:26:4f: f7:08:7e:6e:a3:75:5d:34:ac:a3:97:45:55:f0:b2:9b:33:17: b4:58:ad:f2:1d:92:22:5c:dc:d0:5c:e2:56:57:55:2c:35:94: 13:0d:7b:9c:96:59:74:b4:fb:e1:0f:a0:f8:6b:81:23:db:e1: 92:b5:fb:51:aa:86:43:e5:c9:0a:e9:8a:bf:07:7e:99:02:15: a2:f1:45:7c:6a:d2:37:ae:59:0f:e1:6f:f6:e5:43:5b:a8:4f: 02:0d:99:6f:9b:73:40:0e:03:7f:ef:3e:55:aa:97:38:f5:d1: d5:dd:7d:91:34:ca:67:5e:fa:4c:4d:82:1c:bf:f3:8a:b2:ea: 20:fb:8a:7a:c2:8c:b4:05:74:a1:75:d6:c5:07:be:ba:e5:8c: 1d:7c:b2:31:fe:d4:e2:17:56:59:00:d1:d1:42:1e:01:c5:8f: 38:f5:cc:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nRyWsSLc1/5xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTI2MDUxZjMtOGVkMS00ZTkzLWFiYjItNWJjYzg1OTcyZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0rJDnBKBsMdgMXmB00rrKBHj2+pxdmEbz73 SDt3fwIXNW32cDm++k3FFSAeCbS5Fz3DuM1eWW82WM4DGhIbdhizGNW6d+4WlHVM TczDv9Vwv9DTX91ldbnc5v2s8R4DG4YyclBXcKgY7jca7ToHzSEzPFDW1MjHvkB1 B4HtQzpSuMbRIVZ02M1OgTPi5sExBM47/xP3Yj/r3B+NgX9Cw+aZMxowmWPK4mz1 skTiRa1253qWLDwPE7jcAJejZYLbLI7H4QhmsYi/PMpfO5mqKq+qk4I3saTsSDGl VJyImChdEWPeypCgAWtVNl0nUTP69LVgpGqnXBD1QkLDm/ZFJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIlu3UoDfq7iyVvnIpFtzlIwdzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGE0YTZkNzMtODZiMi0z NzRlLTk1ODYtN2YxZjA5NGQ5NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYzfdqJPQvhK4UTpvIaJ8bpSxUTL/P+SXrKytCrawCza+OafGPCAxSx C+3DAJm5+6hueJ2fZ2tmLQvjPFSet42c8e/2/WH82Hu9LLrnmaiQD48mnO8qD9Em T/cIfm6jdV00rKOXRVXwspszF7RYrfIdkiJc3NBc4lZXVSw1lBMNe5yWWXS0++EP oPhrgSPb4ZK1+1GqhkPlyQrpir8HfpkCFaLxRXxq0jeuWQ/hb/blQ1uoTwINmW+b c0AOA3/vPlWqlzj10dXdfZE0ymde+kxNghy/84qy6iD7inrCjLQFdKF11sUHvrrl jB18sjH+1OIXVlkA0dFCHgHFjzj1zJw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:21 2026 by rpki-client