$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5fc81ee-cef8-394c-aced-571403f6b317.roa File: c5fc81ee-cef8-394c-aced-571403f6b317.roa (raw, json) Hash identifier: FEjFz4+si1S87xlxNQdsaq8w/LEIJsbx1DWcEc3CcGw= Subject key identifier: 79:FB:97:03:8F:F6:63:32:9D:72:7D:10:87:40:43:6C:EB:6B:36:EA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D12D79A7FA5C6BC87AC9D5600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5fc81ee-cef8-394c-aced-571403f6b317.roa Signing time: Fri 06 Mar 2026 02:00:31 +0000 ROA not before: Fri 06 Mar 2026 02:00:31 +0000 ROA not after: Thu 04 Jun 2026 01:00:31 +0000 asID: 132156 IP address blocks: 38.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:d7:9a:7f:a5:c6:bc:87:ac:9d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 6 02:00:31 2026 GMT Not After : Jun 4 01:00:31 2026 GMT Subject: CN=4cdb8f9a-c909-4802-af94-601a07544710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:19:6b:17:a9:e7:fe:b1:b5:3f:32:50:bf: f0:fe:9a:a8:b4:53:5b:18:a7:f8:4f:29:c3:4b:f3: 69:b4:f4:e2:59:c2:5d:d9:90:f1:1f:cc:cd:17:76: 87:6e:e8:73:a7:4f:27:4d:3d:84:f7:1f:4b:03:ad: 95:e4:3b:83:d1:e0:55:c4:89:13:87:a9:ef:3f:17: 3b:18:05:d1:d5:a9:6a:43:12:ca:f3:91:26:44:4a: 93:ed:6c:bf:bb:9c:86:28:b2:6d:b2:12:69:32:69: 03:e6:b6:11:51:35:25:1e:6e:0e:de:10:eb:a6:e5: 1a:2e:57:77:78:92:72:0a:d0:b5:a4:cf:18:8f:21: 3a:67:1c:8b:4c:77:9e:c9:28:a3:8a:7b:8c:e3:4c: 44:7e:17:a0:20:bc:da:b9:ea:c5:94:2c:8d:67:1f: c1:35:21:49:04:1d:bd:48:14:99:b6:b2:29:bf:81: bc:cb:5e:f8:a6:1b:18:b3:3b:ff:1c:b7:f3:c1:cd: 3a:47:78:65:0f:5f:b5:80:bb:00:96:0a:05:66:3a: 8e:c5:cc:df:dd:d4:7e:be:47:3b:8f:af:f5:f7:d8: 8a:21:d8:e2:7e:b0:2f:21:24:59:01:98:70:5d:0b: 13:25:96:8e:1e:17:12:9d:5f:56:4a:26:72:55:b1: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FB:97:03:8F:F6:63:32:9D:72:7D:10:87:40:43:6C:EB:6B:36:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5fc81ee-cef8-394c-aced-571403f6b317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:15:4d:65:26:ed:e1:6a:7b:3e:08:a5:b4:64:b4:26:8d:5d: da:fd:e1:52:8d:98:9a:c4:0a:20:9d:ac:4c:65:db:12:2b:6f: 07:e1:bb:5b:5a:db:36:48:4d:32:ed:2e:25:4f:4b:4b:61:31: 6f:e3:11:ff:19:14:e7:bd:00:a3:d9:4a:f8:8b:ec:34:ea:f9: ee:f2:31:87:cb:ed:66:b5:10:60:b0:33:fa:ba:34:fe:25:d0: 06:94:2d:0c:a0:bf:3c:33:59:99:d2:71:c5:9a:8e:d6:23:54: 9e:77:a8:92:41:5a:25:ec:20:7c:f8:4b:30:0a:01:fc:4b:4c: bf:a4:ec:ed:75:e8:5c:35:39:a3:39:66:76:67:6d:02:64:8f: 6f:2d:f0:64:ab:ed:67:f4:da:ad:68:0e:ee:6d:d0:3d:97:11: 2e:28:41:b5:76:3d:0e:1d:eb:08:12:65:89:38:3e:59:bf:88: 1e:b6:9c:3e:63:44:f7:6c:66:be:8d:e1:14:41:ca:c5:fe:cc: 53:77:55:11:e6:cc:25:e5:48:4d:7a:20:e7:a9:71:c5:44:d4: e9:6f:85:fa:de:e0:a8:4c:0c:b8:8f:ec:47:12:1a:cf:f4:e4: 8c:1a:18:8b:8c:b2:a1:b8:d8:23:fa:ef:69:1b:86:aa:08:15: c4:2b:d9:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0S15p/pca8h6ydVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNjAyMDAzMVoXDTI2MDYwNDAxMDAzMVowLzEtMCsGA1UEAxMk NGNkYjhmOWEtYzkwOS00ODAyLWFmOTQtNjAxYTA3NTQ0NzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIwZaxep5/6xtT8yUL/w/pqotFNbGKf4TynD S/NptPTiWcJd2ZDxH8zNF3aHbuhzp08nTT2E9x9LA62V5DuD0eBVxIkTh6nvPxc7 GAXR1alqQxLK85EmREqT7Wy/u5yGKLJtshJpMmkD5rYRUTUlHm4O3hDrpuUaLld3 eJJyCtC1pM8YjyE6ZxyLTHeeySijinuM40xEfhegILzauerFlCyNZx/BNSFJBB29 SBSZtrIpv4G8y174phsYszv/HLfzwc06R3hlD1+1gLsAlgoFZjqOxczf3dR+vkc7 j6/199iKIdjifrAvISRZAZhwXQsTJZaOHhcSnV9WSiZyVbFNaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn7lwOP9mMynXJ9EIdAQ2zrazbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzVmYzgxZWUtY2VmOC0z OTRjLWFjZWQtNTcxNDAzZjZiMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoVTWUm7eFqez4IpbRktCaNXdr94VKNmJrECiCdrExl2xIrbwfhu1ta 2zZITTLtLiVPS0thMW/jEf8ZFOe9AKPZSviL7DTq+e7yMYfL7Wa1EGCwM/q6NP4l 0AaULQygvzwzWZnSccWajtYjVJ53qJJBWiXsIHz4SzAKAfxLTL+k7O116Fw1OaM5 ZnZnbQJkj28t8GSr7Wf02q1oDu5t0D2XES4oQbV2PQ4d6wgSZYk4Plm/iB62nD5j RPdsZr6N4RRBysX+zFN3VRHmzCXlSE16IOepccVE1Olvhfre4KhMDLiP7EcSGs/0 5IwaGIuMsqG42CP672kbhqoIFcQr2UM= -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:42 2026 by rpki-client