$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c256502d-0ea5-39a5-814f-abe49429529e.roa File: c256502d-0ea5-39a5-814f-abe49429529e.roa (raw, json) Hash identifier: 0DQreNREHC1MFh1Xph7uRNAuFcPxK9yrKlf7OUhT8+o= Subject key identifier: 21:F0:D7:5B:90:C3:1C:3E:C4:D7:FC:3B:8E:D9:12:0F:E4:46:80:D0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D316F7BB8C5A522841F7C13C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c256502d-0ea5-39a5-814f-abe49429529e.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 265525 IP address blocks: 38.255.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7b:b8:c5:a5:22:84:1f:7c:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=7a11eb84-7ca3-48ef-a69b-8f6a66291b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:6c:c8:07:b5:8e:8b:a8:a1:85:9a:c7:b4: 92:65:44:ed:92:e7:6b:09:66:6b:25:4c:12:e0:d0: 3d:d9:75:1d:cd:77:3b:38:54:7a:e0:2f:bd:f4:dc: 36:fe:39:b0:2e:f8:7f:89:d9:5c:73:30:5d:42:cc: 0e:29:d8:da:2a:de:6b:28:2c:de:ca:c1:20:1e:d9: 05:6b:b8:c9:9f:e3:5f:7f:73:90:27:71:37:94:d7: 41:bc:af:cc:03:66:ea:d6:b2:b2:5a:5b:98:93:81: ad:dd:51:e0:e5:b5:74:ca:1a:1f:43:2a:ea:7d:6a: cc:44:22:8c:73:6d:a1:dd:91:0c:bc:1d:ee:85:78: 56:d7:72:1f:2d:0e:5c:7c:ba:05:ca:bb:30:cf:97: fd:5c:0b:bc:66:e2:48:1a:10:10:d0:75:93:f9:fd: e2:2a:9d:fe:0a:55:2a:9d:fa:54:89:a0:9a:b4:47: 37:9b:18:fa:b3:50:40:8c:97:13:53:0c:06:ca:1d: 18:b1:ca:17:d9:c6:b1:6e:fa:89:26:55:ac:5f:8e: ff:fc:06:53:a5:92:a1:5e:13:11:eb:2b:67:bc:d0: 28:7c:90:48:81:a3:52:9b:ec:f3:41:92:9b:d3:0b: fe:dc:bf:8e:49:6f:f2:67:9f:04:9b:60:e7:ef:67: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:D7:5B:90:C3:1C:3E:C4:D7:FC:3B:8E:D9:12:0F:E4:46:80:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c256502d-0ea5-39a5-814f-abe49429529e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e4:48:50:d1:c1:36:23:06:63:9a:55:06:65:6c:a2:a6:1c: 8c:cd:ad:b3:e7:f1:e6:1d:26:74:c5:55:d8:b0:7e:4a:77:c8: 9a:68:dc:03:47:cb:e0:90:8a:2e:d4:c4:2d:6c:5d:e5:fb:0e: 75:40:cc:b7:ba:bd:09:36:fe:99:7a:0c:1b:d9:dd:04:25:1e: f0:7d:81:af:e1:07:5b:e1:c6:e7:02:2b:b5:75:7f:b4:60:6d: 0b:50:0a:cb:07:8b:e0:97:71:1b:94:30:88:64:7a:33:d6:8c: c3:01:dd:0c:cc:45:a6:61:51:ca:18:ed:41:54:8e:9f:d0:3e: 66:d5:96:c9:4a:a0:73:67:11:3e:1a:d7:96:4c:72:11:39:b4: e4:58:2d:26:50:7b:4b:ab:77:0a:a8:40:30:1b:d8:f6:73:77: 10:57:1b:db:9c:56:91:48:61:da:30:ce:d1:44:02:6e:ac:b4: 63:d0:c7:8e:51:7d:01:e6:b4:8a:cd:3c:f4:50:16:c6:c4:c9: 6e:62:bf:19:3d:7d:aa:44:b6:2d:eb:b3:81:08:43:90:42:ed: 04:f9:68:54:3f:76:d1:4d:a8:10:98:2f:2a:4f:4c:69:d8:64: e8:19:2d:38:c6:b7:44:f4:0e:39:ec:07:3f:ac:80:d4:1e:ad: 1a:2a:36:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3u4xaUihB98E8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk N2ExMWViODQtN2NhMy00OGVmLWE2OWItOGY2YTY2MjkxYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl05syAe1jouooYWax7SSZUTtkudrCWZrJUwS 4NA92XUdzXc7OFR64C+99Nw2/jmwLvh/idlcczBdQswOKdjaKt5rKCzeysEgHtkF a7jJn+Nff3OQJ3E3lNdBvK/MA2bq1rKyWluYk4Gt3VHg5bV0yhofQyrqfWrMRCKM c22h3ZEMvB3uhXhW13IfLQ5cfLoFyrswz5f9XAu8ZuJIGhAQ0HWT+f3iKp3+ClUq nfpUiaCatEc3mxj6s1BAjJcTUwwGyh0YscoX2caxbvqJJlWsX47//AZTpZKhXhMR 6ytnvNAofJBIgaNSm+zzQZKb0wv+3L+OSW/yZ58Em2Dn72e9tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHw11uQwxw+xNf8O47ZEg/kRoDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzI1NjUwMmQtMGVhNS0z OWE1LTgxNGYtYWJlNDk0Mjk1MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjkSFDRwTYjBmOaVQZlbKKmHIzNrbPn8eYdJnTFVdiwfkp3yJpo3ANH y+CQii7UxC1sXeX7DnVAzLe6vQk2/pl6DBvZ3QQlHvB9ga/hB1vhxucCK7V1f7Rg bQtQCssHi+CXcRuUMIhkejPWjMMB3QzMRaZhUcoY7UFUjp/QPmbVlslKoHNnET4a 15ZMchE5tORYLSZQe0urdwqoQDAb2PZzdxBXG9ucVpFIYdowztFEAm6stGPQx45R fQHmtIrNPPRQFsbEyW5ivxk9fapEti3rs4EIQ5BC7QT5aFQ/dtFNqBCYLypPTGnY ZOgZLTjGt0T0DjnsBz+sgNQerRoqNgI= -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:15 2026 by rpki-client