$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c8978ae-fb4a-39df-83c1-95b0cd610565.roa File: 9c8978ae-fb4a-39df-83c1-95b0cd610565.roa (raw, json) Hash identifier: fKMV2N4LSYdpTJQWWO6UWfQ4w7mN68NUg13tXCATDeg= Subject key identifier: 42:CE:9A:69:FE:51:D2:75:EC:BB:42:68:4C:B9:E5:7A:78:FB:42:BB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D43BAD1F7D9CEB9B280580A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c8978ae-fb4a-39df-83c1-95b0cd610565.roa Signing time: Mon 23 Mar 2026 14:17:09 +0000 ROA not before: Mon 23 Mar 2026 14:17:09 +0000 ROA not after: Sun 21 Jun 2026 14:17:09 +0000 asID: 33335 IP address blocks: 38.224.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:ba:d1:f7:d9:ce:b9:b2:80:58:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 23 14:17:09 2026 GMT Not After : Jun 21 14:17:09 2026 GMT Subject: CN=e941df0c-0411-4ea8-9f95-9e157d24ed0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:8b:3d:d2:83:62:03:fb:8d:fe:95:29:1f: ad:6e:9c:fb:e7:83:47:58:ff:ab:8d:8e:6a:4d:e8: 94:f7:64:e5:70:0b:42:a2:d0:c0:a9:3e:6a:41:6a: 35:7b:92:36:e1:41:96:9b:9e:51:d7:63:02:08:e0: 59:11:1a:1a:3e:97:ac:a3:12:0e:f2:3f:f2:33:a3: ce:88:81:70:50:68:e0:5f:94:19:66:9e:8f:a0:63: f2:06:24:a5:ee:f2:d7:e2:35:8b:f2:ac:ca:00:27: 0d:b9:a1:57:00:ec:db:18:00:49:06:7b:35:a0:ba: 15:95:2d:38:89:c5:2f:80:34:42:eb:96:71:ee:11: 2b:b9:c8:38:b6:f2:7e:d4:bd:55:eb:3e:ba:c1:6a: 6e:79:e6:fe:a0:cf:b0:0f:e5:08:c0:4d:66:b8:06: b4:13:aa:97:29:29:87:c2:a0:e2:f5:e6:9b:c5:c7: f0:10:88:50:e1:18:11:88:d4:ab:fd:39:62:21:21: 0c:97:24:aa:de:48:2c:95:a6:17:fd:9e:62:61:28: 5e:91:4d:61:e5:cf:3a:e8:ed:1a:ed:23:19:0f:f5: df:10:ef:f2:36:a0:77:a1:12:d1:1d:ba:9d:ed:f0: 6b:0b:08:12:55:c0:2a:a9:bc:65:91:e2:36:d2:2a: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:9A:69:FE:51:D2:75:EC:BB:42:68:4C:B9:E5:7A:78:FB:42:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c8978ae-fb4a-39df-83c1-95b0cd610565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7d:02:92:a8:5c:aa:9c:fd:1b:af:a5:c8:a0:5b:86:8e:78: 60:25:ee:46:bc:d8:9a:a3:08:09:53:5d:14:ef:29:c6:60:83: ad:7e:aa:26:ee:83:1b:10:7e:32:e8:d7:37:65:85:03:39:c9: b6:76:89:ed:59:d3:14:4e:f2:e3:de:08:fb:11:9b:e0:8a:b8: 8b:10:90:bf:1c:80:16:ec:a2:63:e5:49:d7:71:1f:54:5c:d5: 51:99:01:1e:d7:f5:c2:16:8a:47:06:65:85:4f:50:8e:01:b4: 5e:de:25:cf:59:91:a9:c7:d9:c5:a7:ee:4b:e3:38:1d:e5:c4: 12:ce:ca:ee:ce:2a:fd:99:6c:01:0c:a0:06:92:bd:d1:49:9a: 71:6d:a7:96:93:17:d5:10:5b:d9:93:2a:2c:57:e4:83:af:63: 54:1b:38:c0:dd:a7:05:10:18:9e:ea:45:9b:62:80:0e:41:dd: 87:5b:35:17:ec:b8:c0:47:7c:7e:5e:a9:07:46:08:e6:d0:f5: ac:cd:e0:28:e0:fd:f3:30:d5:e5:bf:3d:6b:35:cc:f3:c1:d1: c2:4d:a0:c2:e0:b2:7d:a7:6f:4b:3d:e8:fd:61:97:ab:84:7a: 09:9c:e9:1d:39:24:95:6b:4c:4e:68:76:28:e7:e7:39:f9:1d: e1:e1:c9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1DutH32c65soBYCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMzE0MTcwOVoXDTI2MDYyMTE0MTcwOVowLzEtMCsGA1UEAxMk ZTk0MWRmMGMtMDQxMS00ZWE4LTlmOTUtOWUxNTdkMjRlZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxCLPdKDYgP7jf6VKR+tbpz754NHWP+rjY5q TeiU92TlcAtCotDAqT5qQWo1e5I24UGWm55R12MCCOBZERoaPpesoxIO8j/yM6PO iIFwUGjgX5QZZp6PoGPyBiSl7vLX4jWL8qzKACcNuaFXAOzbGABJBns1oLoVlS04 icUvgDRC65Zx7hErucg4tvJ+1L1V6z66wWpueeb+oM+wD+UIwE1muAa0E6qXKSmH wqDi9eabxcfwEIhQ4RgRiNSr/TliISEMlySq3kgslaYX/Z5iYShekU1h5c866O0a 7SMZD/XfEO/yNqB3oRLRHbqd7fBrCwgSVcAqqbxlkeI20ioquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELOmmn+UdJ17LtCaEy55Xp4+0K7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWM4OTc4YWUtZmI0YS0z OWRmLTgzYzEtOTViMGNkNjEwNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuD9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR9ApKoXKqc/RuvpcigW4aOeGAl7ka82JqjCAlTXRTvKcZgg61+qibu gxsQfjLo1zdlhQM5ybZ2ie1Z0xRO8uPeCPsRm+CKuIsQkL8cgBbsomPlSddxH1Rc 1VGZAR7X9cIWikcGZYVPUI4BtF7eJc9ZkanH2cWn7kvjOB3lxBLOyu7OKv2ZbAEM oAaSvdFJmnFtp5aTF9UQW9mTKixX5IOvY1QbOMDdpwUQGJ7qRZtigA5B3YdbNRfs uMBHfH5eqQdGCObQ9azN4Cjg/fMw1eW/PWs1zPPB0cJNoMLgsn2nb0s96P1hl6uE egmc6R05JJVrTE5odijn5zn5HeHhyYM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:02:44 2026 by rpki-client