$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa File: aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa (raw, json) Hash identifier: gg2OAy9XW9vXUS681RqVG3atUUzZYNotOWNn/K+vTL0= Subject key identifier: 76:BA:80:1E:D6:3F:94:CD:66:D1:71:FB:34:79:88:75:44:11:D7:3F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D15A252A477AC63709413E880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 272823 IP address blocks: 38.10.102.0/24 maxlen: 24 38.77.199.0/24 maxlen: 24 38.191.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:52:a4:77:ac:63:70:94:13:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=9541184e-9f10-4813-81fd-508d44ab074d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:67:a0:27:87:b1:a4:8e:b1:b1:47:f5:32: 04:3c:b3:93:f7:e8:87:23:84:ea:f8:37:e8:04:93: fb:15:f1:90:56:81:33:5a:74:ab:31:ac:cb:d7:91: 31:ae:3a:37:02:78:90:fa:fc:b3:3a:f8:1f:24:7c: e4:a7:fa:91:f6:c7:9f:cf:46:46:63:a3:26:73:96: fc:72:08:dc:0c:35:f8:19:10:c5:91:99:e9:03:73: d7:6d:10:c9:54:b3:64:15:04:ed:08:a7:f3:05:e4: 09:98:36:b9:23:85:a9:42:39:4b:5e:f4:68:a7:c5: 48:90:88:d8:b9:75:2e:0e:1d:f1:ea:5a:9c:58:c1: 95:3c:07:a4:54:72:5d:6c:30:bb:9f:94:73:29:2f: 79:a8:5e:99:04:ac:ff:cd:42:f9:42:ef:f3:ba:7d: fc:0a:63:4a:a1:67:5d:bf:22:ae:30:6a:66:69:c4: e3:18:ff:89:22:17:5b:9e:27:85:eb:a8:ee:ce:b4: 1e:3a:ff:04:81:8c:09:e1:4d:5f:d4:46:7d:d4:0d: 63:0e:62:96:ad:05:5b:8a:94:07:d7:2f:2d:22:cd: 20:19:13:35:97:3b:6f:68:f5:8a:61:0f:bf:7a:01: ad:a5:87:0c:81:fb:33:c1:99:44:35:68:2e:1d:dc: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BA:80:1E:D6:3F:94:CD:66:D1:71:FB:34:79:88:75:44:11:D7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.10.102.0/24 38.77.199.0/24 38.191.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ba:f3:40:8c:2c:78:02:e7:ec:b2:b5:4d:ba:3c:58:0e:c0: dd:91:69:1b:d5:75:f3:26:51:e6:df:b8:1e:9a:0d:64:94:1c: 39:1e:f1:cb:f1:a8:9f:ef:7f:61:86:21:00:e0:6b:f9:06:a4: a1:e3:72:fb:c4:4d:0b:58:42:ef:4d:76:e1:fa:df:51:07:fd: 35:f0:53:62:f3:82:cf:a2:78:d3:e7:fe:a9:0a:3c:5d:53:39: 0c:ca:b8:57:ca:94:60:19:46:e1:d6:b2:65:8a:57:2e:2a:e4: 62:49:11:37:a0:a5:23:7c:e1:dd:75:0d:63:7a:4d:ce:5a:ef: 41:8d:0c:7f:7f:13:30:ff:12:ad:b2:22:b7:c8:84:cc:d4:3e: b7:8d:ce:b7:66:64:47:59:f8:b2:3a:9b:3a:3b:81:35:7e:6b: d3:62:a8:56:a7:21:8c:87:5d:e6:42:14:e0:67:2e:d4:dc:be: 73:61:bb:74:81:2f:ba:83:7a:54:4f:32:69:7b:05:a2:af:3c: 96:8d:89:74:48:52:57:1e:60:4a:15:f5:bc:04:0c:bf:52:bc: 34:21:9b:7d:04:71:a8:2b:9e:b8:bd:2a:92:76:bd:bd:d2:f0: db:ac:ab:75:9f:dd:bf:1a:59:68:07:7e:7f:5e:0a:94:b3:63: 21:b1:d3:9e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0VolKkd6xjcJQT6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk OTU0MTE4NGUtOWYxMC00ODEzLTgxZmQtNTA4ZDQ0YWIwNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW5noCeHsaSOsbFH9TIEPLOT9+iHI4Tq+Dfo BJP7FfGQVoEzWnSrMazL15Exrjo3AniQ+vyzOvgfJHzkp/qR9sefz0ZGY6Mmc5b8 cgjcDDX4GRDFkZnpA3PXbRDJVLNkFQTtCKfzBeQJmDa5I4WpQjlLXvRop8VIkIjY uXUuDh3x6lqcWMGVPAekVHJdbDC7n5RzKS95qF6ZBKz/zUL5Qu/zun38CmNKoWdd vyKuMGpmacTjGP+JIhdbnieF66juzrQeOv8EgYwJ4U1f1EZ91A1jDmKWrQVbipQH 1y8tIs0gGRM1lztvaPWKYQ+/egGtpYcMgfszwZlENWguHdx6OQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFHa6gB7WP5TNZtFx+zR5iHVEEdc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWEwZTgzOTYtNDdhZC0z NGEwLWE0NDktNjRhOWZjZDE4YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJgpmAwQA Jk3HAwQBJr/8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIa680CMLHgC5+yytU26PFgOwN2RaRvVdfMmUebf uB6aDWSUHDke8cvxqJ/vf2GGIQDga/kGpKHjcvvETQtYQu9NduH631EH/TXwU2Lz gs+ieNPn/qkKPF1TOQzKuFfKlGAZRuHWsmWKVy4q5GJJETegpSN84d11DWN6Tc5a 70GNDH9/EzD/Eq2yIrfIhMzUPreNzrdmZEdZ+LI6mzo7gTV+a9NiqFanIYyHXeZC FOBnLtTcvnNhu3SBL7qDelRPMml7BaKvPJaNiXRIUlceYEoV9bwEDL9SvDQhm30E cagrnri9KpJ2vb3S8Nusq3Wf3b8aWWgHfn9eCpSzYyGx054= -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:26 2026 by rpki-client