$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7cec4fc-55c4-3d34-8004-01a650b4c3c5.roa File: b7cec4fc-55c4-3d34-8004-01a650b4c3c5.roa (raw, json) Hash identifier: V5j40go7IB0C3n+JiG2v6KNoolw+l09i1vCeA6BkPZA= Subject key identifier: 2E:28:99:46:DC:FB:DB:37:CD:DD:A6:B4:DA:58:1B:BC:08:13:1E:45 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4933B881F9D7D0376F1C0A40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7cec4fc-55c4-3d34-8004-01a650b4c3c5.roa Signing time: Wed 25 Mar 2026 13:19:48 +0000 ROA not before: Wed 25 Mar 2026 13:19:48 +0000 ROA not after: Tue 23 Jun 2026 13:19:48 +0000 asID: 274244 IP address blocks: 38.9.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:33:b8:81:f9:d7:d0:37:6f:1c:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 13:19:48 2026 GMT Not After : Jun 23 13:19:48 2026 GMT Subject: CN=8291fdfd-eab4-40e3-8503-ffbcb83d7bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:44:ba:1a:bc:57:db:d0:42:df:6f:e7:fe: 97:d4:e6:31:fb:3e:b9:91:63:15:e4:b6:0d:5a:cf: f8:a8:57:3a:10:3c:73:8b:74:79:b9:8d:63:21:b3: 82:a8:e6:57:4e:f8:b5:16:ae:14:32:54:28:d4:91: 29:64:b7:af:d0:7b:23:c0:3f:a9:b0:3e:1a:05:52: db:16:0b:6d:22:98:80:b7:d5:0f:a1:45:88:ca:40: 65:f2:34:bc:b2:a2:5f:dd:a2:b0:5a:44:ca:55:45: 97:55:8e:75:e4:cb:87:f8:08:1e:65:08:f1:7e:fa: 45:5e:ab:4f:21:eb:e4:ec:ad:91:22:f9:2f:57:14: 21:53:f9:57:0d:d6:24:24:de:8e:d7:0c:4f:f3:ba: b9:d4:b9:86:5d:69:46:97:05:24:85:ce:2b:1d:86: a9:31:b7:8b:8c:3f:a8:e5:a0:fe:74:6a:97:b5:d1: 21:89:e2:97:d8:0f:ea:c2:0f:9e:68:7c:a8:7b:ac: 20:10:a0:93:31:fd:63:5c:af:63:98:92:95:d3:7a: d3:41:67:27:a5:07:90:9f:ed:7e:ef:80:cb:0d:6e: 6e:f3:e7:d7:de:c8:78:f0:06:a1:9e:f1:8a:3d:dd: d6:56:f5:38:c5:88:82:0c:f8:6f:c7:3f:63:65:a8: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:28:99:46:DC:FB:DB:37:CD:DD:A6:B4:DA:58:1B:BC:08:13:1E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7cec4fc-55c4-3d34-8004-01a650b4c3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.9.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:aa:04:33:ae:32:0a:ab:26:0a:54:b6:1c:b2:62:bd:02:4e: 0a:a7:41:36:11:a4:e1:68:36:39:d7:dc:02:71:6e:fd:1c:c2: 10:6e:2e:d4:e4:69:08:a1:52:52:c3:68:c7:35:87:41:5b:7e: 54:bd:98:62:50:1b:ca:bb:e7:da:29:a7:99:0e:42:26:8d:13: 17:54:30:13:59:39:f8:45:36:db:2d:df:74:7c:87:a2:6b:e3: 4d:73:00:8c:e8:1d:b6:42:2b:cc:c5:69:65:02:eb:12:e5:5c: 05:4f:32:47:f5:c4:da:3e:1d:4a:88:6c:61:e3:d2:60:59:0d: 4a:5e:d1:32:07:90:98:25:f0:f2:65:a5:b0:fc:ff:41:cc:45: 1e:72:1a:a2:84:38:09:2a:23:8c:d8:97:c7:8b:60:9d:56:45: 5d:ae:dd:37:2d:ff:06:09:c3:24:e1:01:01:a2:94:fe:86:84: c5:85:38:a1:31:f8:de:d5:c4:2d:0c:cf:b8:8d:93:87:37:b0: ab:16:db:08:b8:6c:91:55:05:15:77:15:31:86:bb:87:c0:09: ea:ef:d4:bd:1d:e5:22:43:78:51:c1:96:30:1b:4d:91:c7:58: aa:38:38:99:b0:6f:ba:49:2c:a4:29:02:27:0a:5a:a1:80:76: 69:5c:7b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JM7iB+dfQN28cCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTEzMTk0OFoXDTI2MDYyMzEzMTk0OFowLzEtMCsGA1UEAxMk ODI5MWZkZmQtZWFiNC00MGUzLTg1MDMtZmZiY2I4M2Q3YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06VEuhq8V9vQQt9v5/6X1OYx+z65kWMV5LYN Ws/4qFc6EDxzi3R5uY1jIbOCqOZXTvi1Fq4UMlQo1JEpZLev0HsjwD+psD4aBVLb FgttIpiAt9UPoUWIykBl8jS8sqJf3aKwWkTKVUWXVY515MuH+AgeZQjxfvpFXqtP Ievk7K2RIvkvVxQhU/lXDdYkJN6O1wxP87q51LmGXWlGlwUkhc4rHYapMbeLjD+o 5aD+dGqXtdEhieKX2A/qwg+eaHyoe6wgEKCTMf1jXK9jmJKV03rTQWcnpQeQn+1+ 74DLDW5u8+fX3sh48AahnvGKPd3WVvU4xYiCDPhvxz9jZajvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4omUbc+9s3zd2mtNpYG7wIEx5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjdjZWM0ZmMtNTVjNC0z ZDM0LTgwMDQtMDFhNjUwYjRjM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKqBDOuMgqrJgpUthyyYr0CTgqnQTYRpOFoNjnX3AJxbv0cwhBuLtTk aQihUlLDaMc1h0FbflS9mGJQG8q759opp5kOQiaNExdUMBNZOfhFNtst33R8h6Jr 401zAIzoHbZCK8zFaWUC6xLlXAVPMkf1xNo+HUqIbGHj0mBZDUpe0TIHkJgl8PJl pbD8/0HMRR5yGqKEOAkqI4zYl8eLYJ1WRV2u3Tct/wYJwyThAQGilP6GhMWFOKEx +N7VxC0Mz7iNk4c3sKsW2wi4bJFVBRV3FTGGu4fACerv1L0d5SJDeFHBljAbTZHH WKo4OJmwb7pJLKQpAicKWqGAdmlce+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 09:35:48 2026 by rpki-client