$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/933404d2-2703-3ee9-ae53-473077d61790.roa File: 933404d2-2703-3ee9-ae53-473077d61790.roa (raw, json) Hash identifier: 5+wrEPrvNXaIbkBOq68UwdjEn4WQ9E/sUtDJe1+EMbs= Subject key identifier: 5B:25:4C:39:B5:CF:76:D3:96:04:59:95:44:28:27:3E:B8:28:D3:F3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C4DFE5E3CD3070B4FABC20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/933404d2-2703-3ee9-ae53-473077d61790.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 394957 IP address blocks: 38.100.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:df:e5:e3:cd:30:70:b4:fa:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=9ad6f66a-82fa-4e50-87a1-a1d815995fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:fe:4e:3c:41:33:cb:d6:9b:7d:f7:03:fd: 90:c6:a9:92:a1:cb:1f:49:89:90:8c:bd:60:5a:86: 31:54:47:36:92:a9:ed:0e:db:a3:8e:41:ed:d0:b8: 0c:11:5c:8b:ff:81:02:2e:90:e3:1a:4a:a2:6a:c1: af:62:90:20:b0:d1:46:34:91:68:1d:94:f2:e1:31: cb:97:6b:8e:4d:f8:7c:87:80:4b:8f:13:ef:aa:da: 74:39:cc:03:59:89:8d:09:0c:37:a9:7a:a1:85:74: 17:6b:db:15:04:66:6e:ae:ec:04:e9:b5:9b:c6:ee: 01:f3:ce:5e:8b:ae:68:e3:c6:b5:e8:8d:0d:5f:d2: a7:f4:2a:e8:ed:b3:dc:50:2b:17:2e:4c:71:6d:53: a4:32:d7:c7:ef:53:a3:50:fd:c5:98:ac:6b:12:59: 40:43:4f:dd:e4:35:df:39:02:ae:c5:ca:66:b1:81: ec:83:9a:f2:e9:96:6a:6e:28:e8:5b:df:46:a2:c0: d3:f4:ca:be:23:4c:3b:85:26:f7:71:ce:2e:86:1c: cb:fd:95:cd:7d:5c:9c:80:82:ed:50:fd:50:5b:57: dd:74:c8:fb:bb:a1:4b:18:25:12:e4:ea:e2:6f:0e: 94:4b:f5:17:2d:ad:a7:ea:d7:8a:ad:0f:95:3d:67: aa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:4C:39:B5:CF:76:D3:96:04:59:95:44:28:27:3E:B8:28:D3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/933404d2-2703-3ee9-ae53-473077d61790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.100.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:85:9c:bc:e7:51:ae:87:b0:6a:59:b1:45:7e:bd:97:2d:f8: 2d:35:3e:e2:35:78:2d:5e:37:7d:9c:11:1d:52:2f:48:41:98: 00:96:bd:7e:c0:19:3c:9a:19:37:87:c9:6d:b2:d3:4a:5a:8a: 0d:0c:27:5c:14:ef:80:f2:32:2c:61:f3:b6:25:99:86:c4:dd: 0f:37:cc:ef:58:32:0d:8d:15:ac:24:ee:7d:1d:ef:20:29:f1: 08:60:09:61:62:14:dc:5a:84:27:8b:84:27:aa:8b:b7:9a:e1: b7:c9:cf:8c:15:3c:bd:72:80:ce:fb:3e:dc:e2:dd:f6:4f:f0: 78:36:31:09:1f:53:d6:2c:8d:14:28:1e:47:de:62:bb:37:90: f4:36:e3:cb:11:41:ba:24:a6:1b:82:46:80:dc:1d:10:c1:09: f1:c0:be:5f:de:03:95:af:fb:e7:61:d0:bd:ad:08:10:e7:69: 91:13:22:d5:ce:12:06:08:bd:c1:f3:a6:6e:cb:ce:64:8e:43: 85:7a:47:2d:31:50:1b:b0:88:b2:14:f9:e9:b7:35:04:14:ac: 0e:a3:68:75:fb:41:50:70:85:a1:8a:eb:83:b4:32:23:9a:42: 49:9b:be:4c:00:bf:33:57:e5:36:57:9a:02:a3:04:7c:15:44: 1d:b2:61:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN/l480wcLT6vCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OWFkNmY2NmEtODJmYS00ZTUwLTg3YTEtYTFkODE1OTk1ZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCr+TjxBM8vWm333A/2QxqmSocsfSYmQjL1g WoYxVEc2kqntDtujjkHt0LgMEVyL/4ECLpDjGkqiasGvYpAgsNFGNJFoHZTy4THL l2uOTfh8h4BLjxPvqtp0OcwDWYmNCQw3qXqhhXQXa9sVBGZuruwE6bWbxu4B885e i65o48a16I0NX9Kn9Cro7bPcUCsXLkxxbVOkMtfH71OjUP3FmKxrEllAQ0/d5DXf OQKuxcpmsYHsg5ry6ZZqbijoW99GosDT9Mq+I0w7hSb3cc4uhhzL/ZXNfVycgILt UP1QW1fddMj7u6FLGCUS5Oribw6US/UXLa2n6teKrQ+VPWeqtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFslTDm1z3bTlgRZlUQoJz64KNPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTMzNDA0ZDItMjcwMy0z ZWU5LWFlNTMtNDczMDc3ZDYxNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuFnLznUa6HsGpZsUV+vZct+C01PuI1eC1eN32cER1SL0hBmACWvX7A GTyaGTeHyW2y00paig0MJ1wU74DyMixh87YlmYbE3Q83zO9YMg2NFawk7n0d7yAp 8QhgCWFiFNxahCeLhCeqi7ea4bfJz4wVPL1ygM77Ptzi3fZP8Hg2MQkfU9YsjRQo HkfeYrs3kPQ248sRQbokphuCRoDcHRDBCfHAvl/eA5Wv++dh0L2tCBDnaZETItXO EgYIvcHzpm7LzmSOQ4V6Ry0xUBuwiLIU+em3NQQUrA6jaHX7QVBwhaGK64O0MiOa QkmbvkwAvzNX5TZXmgKjBHwVRB2yYcw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:20:55 2026 by rpki-client