$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa File: c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa (raw, json) Hash identifier: Iqr2ro2AgzFOen8Tjm8J4W9oz/TjwTRQH8BwervPUeI= Subject key identifier: CD:5E:A5:DA:66:D9:9F:9F:0D:12:71:8B:DB:50:10:0B:74:21:FB:80 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D186CF8CD3B2CEC1690FA7D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 13335 IP address blocks: 38.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:f8:cd:3b:2c:ec:16:90:fa:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=b6033792-3528-4ecb-83a6-3406661e562f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:63:9f:d7:5b:c9:3b:26:2c:f5:ab:d8:b0: fc:06:32:dc:c4:31:c3:2b:cd:74:a4:f3:d6:ac:4e: 39:cb:33:70:ed:dd:99:b6:22:05:0b:bd:97:0f:6e: cf:5e:67:ec:b4:82:8a:be:75:13:73:cc:5f:18:6b: a9:85:81:b5:bc:13:5b:6f:ce:c9:ed:f6:69:75:3d: b3:7b:63:f5:99:3a:04:1d:8d:89:a2:de:50:2a:ab: 1d:b3:ab:7a:b7:fd:c2:cc:ba:0c:af:bc:8a:ce:76: 2e:79:94:83:bc:f8:bd:5c:30:ef:8a:02:af:1e:95: 81:0a:34:3c:f4:32:0d:bf:47:1c:a8:2d:6f:cf:38: a0:4c:e1:39:b6:5b:4b:b8:a0:40:d3:7f:44:be:fe: 5b:ef:ca:06:2a:4a:a0:92:ed:5b:fd:83:07:9b:71: 6a:0a:8b:7d:ba:81:f3:20:f7:cb:5c:07:70:38:4c: 78:c1:9d:c0:d6:2c:c1:88:94:31:a0:8d:d6:5f:a5: 4f:8c:32:03:a4:6c:e7:73:26:f8:7a:30:77:94:65: 10:7d:17:b3:63:77:44:42:59:b3:95:7d:46:8b:31: e4:de:cc:a0:bc:e1:55:40:f6:10:ce:93:1d:85:23: 46:fa:50:2b:97:73:68:49:7e:51:7f:e2:d2:91:61: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:A5:DA:66:D9:9F:9F:0D:12:71:8B:DB:50:10:0B:74:21:FB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.96.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ec:04:48:77:0d:59:ea:bf:6c:71:a2:2a:d6:57:e0:e1:df: 39:30:a0:2e:06:a7:4c:ce:e7:5a:84:c1:48:ac:46:07:11:c5: ee:47:0c:9e:47:ac:68:ff:5d:06:d2:19:08:05:7d:fd:91:9f: a7:d7:a3:a9:52:b6:ce:ef:0d:f8:51:84:4d:b4:17:7e:02:5b: 38:83:40:1b:21:11:a3:bf:2b:7f:0e:2b:dd:de:29:53:0f:0b: 02:81:d8:e9:4f:a2:9f:12:10:08:b5:76:42:f4:cc:26:51:45: 41:bd:8a:1d:80:7c:04:15:b8:e4:8d:df:1e:62:53:23:37:ab: c1:f0:4e:e8:74:df:84:4b:3c:04:fb:86:5f:b2:39:5e:db:d3: c1:bc:7f:cb:38:fb:d3:88:61:23:11:d7:b7:6b:94:02:03:b0: 0a:d0:5f:6e:6c:09:00:67:01:4d:b5:10:8f:d0:98:b8:32:62: 07:55:85:3d:cc:e7:80:70:7a:ca:8e:ef:20:48:4f:ac:59:72: bc:02:2e:3b:3e:53:8d:62:f4:a3:81:40:58:dc:30:08:5d:87: 7c:e8:ae:40:de:1b:4f:03:81:33:05:a9:7e:ef:b9:ce:9a:dd: f5:a4:78:53:4a:e2:5e:aa:ca:7c:05:7f:35:6b:22:06:41:27: dc:43:f2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0YbPjNOyzsFpD6fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk YjYwMzM3OTItMzUyOC00ZWNiLTgzYTYtMzQwNjY2MWU1NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhhjn9dbyTsmLPWr2LD8BjLcxDHDK810pPPW rE45yzNw7d2ZtiIFC72XD27PXmfstIKKvnUTc8xfGGuphYG1vBNbb87J7fZpdT2z e2P1mToEHY2Jot5QKqsds6t6t/3CzLoMr7yKznYueZSDvPi9XDDvigKvHpWBCjQ8 9DINv0ccqC1vzzigTOE5tltLuKBA039Evv5b78oGKkqgku1b/YMHm3FqCot9uoHz IPfLXAdwOEx4wZ3A1izBiJQxoI3WX6VPjDIDpGzncyb4ejB3lGUQfRezY3dEQlmz lX1GizHk3sygvOFVQPYQzpMdhSNG+lArl3NoSX5Rf+LSkWF9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1epdpm2Z+fDRJxi9tQEAt0IfuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzVjZGRhMWEtNzNhMC0z ZWI3LWI4N2ItZTg5NzgwZWFhNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjsBEh3DVnqv2xxoirWV+Dh3zkwoC4Gp0zO51qEwUisRgcRxe5HDJ5H rGj/XQbSGQgFff2Rn6fXo6lSts7vDfhRhE20F34CWziDQBshEaO/K38OK93eKVMP CwKB2OlPop8SEAi1dkL0zCZRRUG9ih2AfAQVuOSN3x5iUyM3q8HwTuh034RLPAT7 hl+yOV7b08G8f8s4+9OIYSMR17drlAIDsArQX25sCQBnAU21EI/QmLgyYgdVhT3M 54BwesqO7yBIT6xZcrwCLjs+U41i9KOBQFjcMAhdh3zorkDeG08DgTMFqX7vuc6a 3fWkeFNK4l6qynwFfzVrIgZBJ9xD8nw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:17:39 2026 by rpki-client