$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa File: bc1032ea-80f0-339d-be84-47508dc06301.roa (raw, json) Hash identifier: Ex55yMlL8iWRT57L8Av+ztawC6yfqthagAXNpMPfMnk= Subject key identifier: E2:88:07:02:EC:4A:6E:5C:11:73:D7:79:1D:88:B1:7D:93:EA:0C:4C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C4DB04607E25F4F5DC5180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 272106 IP address blocks: 38.253.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:db:04:60:7e:25:f4:f5:dc:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=999b676c-f914-4274-a66e-d25087dc6165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:5a:94:56:e0:da:bb:61:f1:7a:8e:56:ea: bf:54:a2:46:47:9f:c1:27:06:ae:5e:95:c0:8c:24: c5:0b:85:9f:5e:91:6f:88:44:74:1a:33:ec:73:e0: 1d:ba:cf:d3:fd:ce:12:d5:c3:16:20:79:9b:b7:33: 75:a6:39:62:c4:b5:8a:2d:99:f7:74:fb:18:0c:90: 91:9b:88:76:a2:e6:75:99:71:f8:42:69:b2:cc:4c: 92:98:c8:29:8e:4a:c8:a4:73:62:a9:ab:9c:55:00: ea:af:1a:1f:b1:13:31:f8:79:29:b3:bf:d6:3f:d7: db:d0:36:01:0e:dc:c5:e5:f6:cb:3e:0e:14:f6:be: cb:50:b3:52:ed:2e:60:ab:80:53:6b:b3:34:2a:b4: 0d:32:1a:14:f0:2f:1c:70:a8:36:6c:c3:54:5f:f5: 9a:ee:e7:d1:97:bd:7b:ee:76:a3:73:ec:e8:92:e2: 20:82:88:ce:9b:f3:b3:48:11:01:5a:91:01:de:53: da:4c:a4:52:a6:e0:e2:26:b3:fb:c9:2d:cb:b8:a2: 3b:0a:1e:f7:03:4b:50:75:68:af:72:42:d0:48:a6: 52:ba:ae:dd:18:cc:64:4b:a5:f1:03:81:44:4e:ae: d6:e9:bb:c1:1c:0d:ae:f7:9b:c0:97:3a:0a:e1:45: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:88:07:02:EC:4A:6E:5C:11:73:D7:79:1D:88:B1:7D:93:EA:0C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:e0:31:61:cb:29:b9:0e:8c:6d:0d:00:a2:8f:d4:40:14:88: 4e:73:b5:68:bc:8f:da:61:fb:0d:5e:03:d2:dd:77:4a:34:c8: 03:5f:94:51:7d:68:77:76:4b:92:0a:4e:9b:90:55:fe:fa:92: b7:7f:87:06:5d:22:a0:e0:2b:7a:dc:b4:6e:6e:35:08:db:67: c3:d2:e2:cb:fd:1b:59:2f:ac:62:e0:f6:3b:a5:e6:9b:c9:d7: 86:9a:29:b8:d0:2a:c0:2a:63:b9:f4:fe:8d:93:96:c2:37:21: 38:7c:16:cf:a3:b8:41:c7:b3:8d:b7:bf:0c:26:e2:3f:0f:c2: af:28:ac:6a:70:0a:17:2c:71:0c:5a:53:56:5e:b3:7a:98:e6: c8:fd:ee:89:c8:08:b0:98:bf:cf:9b:81:8f:af:db:0b:45:e1: 90:d4:29:d8:bb:69:1c:4d:12:f4:56:ff:58:cc:dc:99:4f:37: c0:24:a3:8c:73:a4:ad:0b:90:23:f5:13:74:d0:61:f6:36:91: 1f:76:8e:ad:93:ba:47:4f:de:72:23:8b:e4:e5:5e:58:65:18: 05:69:bb:80:2f:fe:da:9b:88:af:a0:fd:00:a4:35:15:92:fd: 8f:02:5a:5b:79:68:48:c3:a4:e9:cb:0d:02:f7:07:41:23:e6: 4e:e5:2f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxNsEYH4l9PXcUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OTk5YjY3NmMtZjkxNC00Mjc0LWE2NmUtZDI1MDg3ZGM2MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZalFbg2rth8XqOVuq/VKJGR5/BJwauXpXA jCTFC4WfXpFviER0GjPsc+Adus/T/c4S1cMWIHmbtzN1pjlixLWKLZn3dPsYDJCR m4h2ouZ1mXH4QmmyzEySmMgpjkrIpHNiqaucVQDqrxofsRMx+Hkps7/WP9fb0DYB DtzF5fbLPg4U9r7LULNS7S5gq4BTa7M0KrQNMhoU8C8ccKg2bMNUX/Wa7ufRl717 7najc+zokuIggojOm/OzSBEBWpEB3lPaTKRSpuDiJrP7yS3LuKI7Ch73A0tQdWiv ckLQSKZSuq7dGMxkS6XxA4FETq7W6bvBHA2u95vAlzoK4UXaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKIBwLsSm5cEXPXeR2IsX2T6gxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmMxMDMyZWEtODBmMC0z MzlkLWJlODQtNDc1MDhkYzA2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjgMWHLKbkOjG0NAKKP1EAUiE5ztWi8j9ph+w1eA9Ldd0o0yANflFF9 aHd2S5IKTpuQVf76krd/hwZdIqDgK3rctG5uNQjbZ8PS4sv9G1kvrGLg9jul5pvJ 14aaKbjQKsAqY7n0/o2TlsI3ITh8Fs+juEHHs423vwwm4j8Pwq8orGpwChcscQxa U1Zes3qY5sj97onICLCYv8+bgY+v2wtF4ZDUKdi7aRxNEvRW/1jM3JlPN8Ako4xz pK0LkCP1E3TQYfY2kR92jq2TukdP3nIji+TlXlhlGAVpu4Av/tqbiK+g/QCkNRWS /Y8CWlt5aEjDpOnLDQL3B0Ej5k7lL70= -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:33 2026 by rpki-client