$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc284837-a4a2-3b8a-96b4-d2a950409836.roa File: bc284837-a4a2-3b8a-96b4-d2a950409836.roa (raw, json) Hash identifier: xaEzWuBn9FjBE4NSVZs5LJ0SLtt6oRsqDV/7Swljko8= Subject key identifier: A1:56:74:78:6C:3D:5C:C3:CC:9E:EA:A1:3B:C2:6A:5E:B0:D0:FE:8B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D343A385939103240DDF0FC00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc284837-a4a2-3b8a-96b4-d2a950409836.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 58369 IP address blocks: 38.210.84.0/22 maxlen: 24 38.225.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:38:59:39:10:32:40:dd:f0:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=603b51eb-a94f-4117-8c73-0ddb75e99543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:e6:29:d8:41:6f:b9:f6:7f:1a:0d:cb:f6: e2:9e:7c:35:2c:62:3d:16:a4:8f:43:65:f7:82:8e: 0d:35:47:a5:f2:18:6b:9b:ba:00:8e:61:69:9c:4d: 70:3e:c7:69:28:ff:1b:27:7c:1b:cd:c1:cd:7f:3b: a8:01:b6:d6:6a:0e:09:3f:43:3d:c1:6b:ea:9e:7b: 31:15:8b:05:18:dc:b6:9a:94:54:48:ef:1e:bb:94: 64:71:3e:a3:9d:e1:65:a2:e5:52:2c:6d:81:fe:20: f7:ab:f7:6d:5e:42:49:e2:63:e3:25:b2:87:2e:67: 2c:4a:33:22:c7:36:be:29:0b:7e:3d:18:82:34:a1: 4c:9a:8a:45:48:65:30:94:3c:4d:a6:54:1a:84:a1: 56:96:f3:17:57:6a:97:c6:37:14:84:09:c1:64:32: 6c:cf:26:f1:2d:af:92:0c:60:3e:77:cb:0c:1e:f3: 1a:08:95:ee:69:35:e5:33:d7:09:07:4c:30:da:10: 2b:e4:31:64:62:d4:5b:81:ae:0e:07:65:8f:c8:d2: 26:b5:95:5d:f0:92:4a:33:45:4f:25:fd:73:a7:2e: 75:fc:b1:96:09:ff:0b:ce:23:be:fb:7c:dd:ba:f4: a1:a4:c1:62:4e:3e:6b:e8:bc:a6:4f:90:e0:2b:a0: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:74:78:6C:3D:5C:C3:CC:9E:EA:A1:3B:C2:6A:5E:B0:D0:FE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc284837-a4a2-3b8a-96b4-d2a950409836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.84.0/22 38.225.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:52:2e:02:dc:b4:fe:58:fa:5c:22:62:9c:1c:24:b5:82:ed: c6:db:71:95:4a:d3:45:a2:64:f8:ef:25:ba:db:49:c6:a5:36: b0:ec:18:c3:99:ac:4d:ab:55:bd:4c:6f:2a:69:2f:16:99:a6: 8f:95:cc:92:36:09:b8:31:be:da:5c:e2:9e:f6:ae:6d:94:22: 1a:a6:c8:3d:55:5a:a6:91:94:24:26:d1:7c:68:fe:10:6a:f1: ca:a3:01:68:23:ec:44:57:a8:2b:6c:3d:37:f6:9c:a0:c3:9f: 15:a1:62:6b:5d:57:bd:24:a3:ad:6d:40:b6:b4:cd:8f:ba:9a: 9d:3b:9e:68:20:8c:a9:bf:5b:4e:61:26:da:25:c0:cc:4c:58: eb:83:32:a3:92:a3:25:33:53:f9:b9:ac:6a:40:b0:1d:e7:3e: aa:28:2a:46:01:d6:a6:11:01:c8:a4:39:6b:df:01:57:88:d4: d4:e0:65:26:af:36:fa:e4:0e:02:cd:4d:81:59:78:89:ba:14: 00:be:3e:8d:67:2d:b8:cb:70:f2:c2:df:15:99:a7:94:71:f6: 77:88:3a:e0:ad:78:ac:cc:eb:a9:fc:11:ea:20:fc:57:2f:56: 2d:cb:65:a1:37:68:2f:cf:a7:ff:6b:85:f3:1b:2a:aa:91:e3: d0:33:18:e7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE00OjhZORAyQN3w/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NjAzYjUxZWItYTk0Zi00MTE3LThjNzMtMGRkYjc1ZTk5NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU/mKdhBb7n2fxoNy/binnw1LGI9FqSPQ2X3 go4NNUel8hhrm7oAjmFpnE1wPsdpKP8bJ3wbzcHNfzuoAbbWag4JP0M9wWvqnnsx FYsFGNy2mpRUSO8eu5RkcT6jneFlouVSLG2B/iD3q/dtXkJJ4mPjJbKHLmcsSjMi xza+KQt+PRiCNKFMmopFSGUwlDxNplQahKFWlvMXV2qXxjcUhAnBZDJszybxLa+S DGA+d8sMHvMaCJXuaTXlM9cJB0ww2hAr5DFkYtRbga4OB2WPyNImtZVd8JJKM0VP Jf1zpy51/LGWCf8LziO++3zduvShpMFiTj5r6LymT5DgK6CD1QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKFWdHhsPVzDzJ7qoTvCal6w0P6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmMyODQ4MzctYTRhMi0z YjhhLTk2YjQtZDJhOTUwNDA5ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJtJUAwQC JuF4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACRSLgLctP5Y+lwiYpwcJLWC7cbbcZVK00WiZPjvJbrbScal NrDsGMOZrE2rVb1MbyppLxaZpo+VzJI2Cbgxvtpc4p72rm2UIhqmyD1VWqaRlCQm 0Xxo/hBq8cqjAWgj7ERXqCtsPTf2nKDDnxWhYmtdV70ko61tQLa0zY+6mp07nmgg jKm/W05hJtolwMxMWOuDMqOSoyUzU/m5rGpAsB3nPqooKkYB1qYRAcikOWvfAVeI 1NTgZSavNvrkDgLNTYFZeIm6FAC+Po1nLbjLcPLC3xWZp5Rx9neIOuCteKzM66n8 Eeog/FcvVi3LZaE3aC/Pp/9rhfMbKqqR49AzGOc= -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:12 2026 by rpki-client