$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa File: c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa (raw, json) Hash identifier: UgXGU3H0TKHcMA7d8RSCjXMU7CDjElGSXP6vsH9m8Mw= Subject key identifier: 88:51:B3:7D:17:BC:86:DF:6B:4D:2F:B4:8E:29:17:EC:82:EE:99:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D39CF71567249F98899F86980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 38.152.0.0/17 maxlen: 17 38.152.128.0/17 maxlen: 17 38.153.0.0/17 maxlen: 17 38.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:71:56:72:49:f9:88:99:f8:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=08d156fd-cdc8-4e67-bf9b-b0cced7fe724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fd:10:41:5f:d8:1b:3b:cb:57:b4:c4:66:13: f9:22:e4:ab:55:5c:cc:38:2b:d3:d3:1c:47:46:77: 7e:c2:40:d8:42:6a:bd:3f:d2:b4:cc:95:80:31:18: 5e:ef:a3:d4:e4:60:45:95:34:66:4e:6b:75:9c:1d: 00:cc:73:64:bb:21:03:89:01:0d:f3:54:8e:bb:c2: c6:ac:43:e2:9c:82:f6:95:80:32:2a:10:9e:b6:8e: 33:f6:4d:c1:ed:8a:1e:89:b8:b7:28:7b:fb:ab:d5: b8:2f:05:a0:8d:62:73:3b:a4:e4:51:7f:0d:1d:c8: d8:18:44:93:b9:9c:09:97:0b:4a:a5:e4:03:56:af: 02:1e:95:13:d3:fc:41:5c:16:47:d3:1d:3a:0e:9b: ec:bc:66:c7:19:39:41:4c:5c:71:8f:2b:80:93:14: 24:79:5b:29:4c:8f:16:b6:85:be:b0:66:2f:a6:d2: c1:b1:3a:21:c2:11:bd:e0:a9:3b:d2:d3:ce:59:28: 2b:95:de:fa:16:3f:e6:13:16:d4:d9:fc:96:2f:c0: 17:82:dd:48:ed:95:0e:ac:36:f0:b8:e4:5a:b7:67: db:88:f8:39:96:ad:b7:fa:4f:52:d4:af:f4:23:35: ff:22:c4:fa:b0:e3:8e:f1:d1:7b:fa:e5:ad:7d:c6: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:B3:7D:17:BC:86:DF:6B:4D:2F:B4:8E:29:17:EC:82:EE:99:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2f33b3f-4f71-30f1-9f5c-65f11374b191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.152.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5d:61:67:c9:2f:b2:56:20:ce:c6:ee:df:e1:26:e9:1c:ab: 45:2f:13:a4:5f:0f:22:75:fa:f0:bf:9d:40:44:04:5b:1d:40: 2e:f1:5a:85:79:1e:3d:47:36:21:a6:76:d4:b3:10:68:c5:00: a7:cc:6d:e3:dd:dd:01:2c:bc:e6:80:b4:7d:38:0e:c8:c6:5b: 10:7c:db:23:9c:5f:c0:81:71:84:24:41:72:d7:e0:cc:63:d5: 34:3a:bf:14:28:b1:2b:a9:97:ca:b0:37:be:bc:ee:3c:f1:91: 21:37:6e:67:35:d7:f8:8c:20:09:8b:50:f3:5f:b3:d4:64:b9: 28:0c:88:55:85:de:d9:7a:99:3b:c9:73:59:08:ff:30:af:96: 2a:b4:4a:bb:4b:89:d6:fc:67:6c:90:44:13:c1:37:90:2e:20: 6b:06:6d:3f:7f:5b:70:37:99:a1:32:f5:b2:8f:e1:ed:d2:fb: 79:4c:13:ea:e7:c4:05:6d:b0:96:d9:a9:87:c6:ee:63:28:f3: d2:ee:b0:e4:87:71:ee:a2:2b:87:1a:7d:03:80:f1:00:dd:59: 0e:e8:78:51:88:32:ae:59:06:80:ea:e5:ca:e5:66:70:d7:91: 42:8d:7f:db:2f:25:72:52:d9:a1:58:7d:80:53:e6:b7:39:7a: 9a:f4:61:8d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE05z3FWckn5iJn4aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MDhkMTU2ZmQtY2RjOC00ZTY3LWJmOWItYjBjY2VkN2ZlNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv0QQV/YGzvLV7TEZhP5IuSrVVzMOCvT0xxH Rnd+wkDYQmq9P9K0zJWAMRhe76PU5GBFlTRmTmt1nB0AzHNkuyEDiQEN81SOu8LG rEPinIL2lYAyKhCeto4z9k3B7Yoeibi3KHv7q9W4LwWgjWJzO6TkUX8NHcjYGEST uZwJlwtKpeQDVq8CHpUT0/xBXBZH0x06DpvsvGbHGTlBTFxxjyuAkxQkeVspTI8W toW+sGYvptLBsTohwhG94Kk70tPOWSgrld76Fj/mExbU2fyWL8AXgt1I7ZUOrDbw uORat2fbiPg5lq23+k9S1K/0IzX/IsT6sOOO8dF7+uWtfcYODwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIhRs30XvIbfa00vtI4pF+yC7pkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzJmMzNiM2YtNGY3MS0z MGYxLTlmNWMtNjVmMTEzNzRiMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBJpgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAll1hZ8kvslYgzsbu3+Em6RyrRS8TpF8PInX68L+dQEQEWx1ALvFahXke PUc2IaZ21LMQaMUAp8xt493dASy85oC0fTgOyMZbEHzbI5xfwIFxhCRBctfgzGPV NDq/FCixK6mXyrA3vrzuPPGRITduZzXX+IwgCYtQ81+z1GS5KAyIVYXe2XqZO8lz WQj/MK+WKrRKu0uJ1vxnbJBEE8E3kC4gawZtP39bcDeZoTL1so/h7dL7eUwT6ufE BW2wltmph8buYyjz0u6w5Idx7qIrhxp9A4DxAN1ZDuh4UYgyrlkGgOrlyuVmcNeR Qo1/2y8lclLZoVh9gFPmtzl6mvRhjQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:00 2026 by rpki-client