$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa File: cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa (raw, json) Hash identifier: NGahKqeiAgnKyYBdwhv10s3rcDH3dLfgGssyP1gAXs8= Subject key identifier: 85:C1:CB:FC:25:E4:25:9D:5C:16:F0:6C:C0:B1:8E:3F:1A:6B:CD:62 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D1DE4959AA538E6C0E11B4800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 271996 IP address blocks: 38.158.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:95:9a:a5:38:e6:c0:e1:1b:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=0602d43d-e1b9-4621-8b76-4db04e649dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fa:6e:8a:92:9d:2e:a1:bf:06:98:dd:70:37: db:6f:5a:30:d3:aa:6b:92:6a:4a:5d:57:13:1d:0e: 33:a4:08:15:04:47:c1:69:16:fd:37:e5:d4:dc:42: 8b:75:68:4c:7c:6c:fd:5c:a1:b4:ee:d6:64:48:0f: 75:6c:8d:ae:4b:35:b2:35:5e:b9:96:2b:81:f2:b4: ef:9c:24:2e:72:12:32:f9:ad:67:a5:26:78:9d:8a: 0e:24:a0:bc:c6:af:41:2f:ae:1d:d9:e3:d1:98:70: 81:ba:a8:9a:59:77:fb:48:cf:de:fa:4b:a0:ca:40: 14:17:f7:ab:92:98:b9:a3:0c:4b:2f:6d:b7:5f:45: bd:8b:9e:04:f1:37:01:9a:11:9b:db:5e:3d:fe:6c: 4e:24:31:51:1c:2a:8a:21:0f:a6:0e:9d:2d:b8:95: 3b:b2:0e:e7:c6:08:a3:f0:b1:66:d0:9a:f1:2f:28: d1:06:00:04:64:05:5b:97:40:55:93:86:2e:ae:fc: 35:45:ea:c1:44:5f:70:8b:7b:94:b6:fc:26:d0:b9: 88:51:83:52:6b:45:a2:86:e4:0d:2a:fa:52:b8:63: 4f:d6:bf:60:11:1b:5a:de:7b:a2:e2:b1:38:fe:d4: 7a:0c:27:88:20:06:47:f3:da:d0:1d:d8:79:40:26: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C1:CB:FC:25:E4:25:9D:5C:16:F0:6C:C0:B1:8E:3F:1A:6B:CD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:28:ce:fe:17:f6:29:a7:10:b5:1c:9c:d4:55:c4:4e:ea:44: dd:cd:40:91:0c:3c:fc:7e:d6:9f:86:f3:8b:6d:2e:1e:35:b7: dc:81:de:72:3c:f0:53:68:3c:1c:41:93:e3:90:72:ff:e8:31: b8:e3:81:44:c1:f7:7d:85:07:30:d3:5c:23:1b:71:97:be:1a: 94:f5:6a:25:3b:15:cb:20:14:57:85:48:9f:6f:61:93:da:37: c0:0f:75:49:0f:9b:0a:69:2f:e5:75:35:f7:82:51:f6:fd:73: c0:64:b2:fb:a3:27:7d:b3:a4:a4:e4:9e:9a:e7:d5:bb:f1:72: 76:20:92:f1:af:e5:ac:61:ae:4e:5e:92:41:2e:99:fd:3d:a9: f1:11:88:42:95:71:ac:76:01:e6:89:37:84:5e:4f:de:1f:71: 55:d3:f3:ec:5a:0c:46:f3:e4:8c:b8:b1:82:9a:8d:10:dd:d7: a7:de:30:d5:a2:1b:6c:ff:f1:79:82:15:6e:73:db:1a:61:cb: c2:84:03:f2:95:51:e8:6e:9b:a7:03:cb:e4:43:46:30:b4:dc: d6:1f:d6:0a:42:f2:c8:78:9b:0e:b5:76:8a:44:4b:f9:cd:d4: b0:6c:6a:f4:96:9c:ee:ba:7e:d5:2e:00:2c:78:a1:15:c4:47: 26:ec:c8:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JWapTjmwOEbSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk MDYwMmQ0M2QtZTFiOS00NjIxLThiNzYtNGRiMDRlNjQ5ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vpuipKdLqG/BpjdcDfbb1ow06prkmpKXVcT HQ4zpAgVBEfBaRb9N+XU3EKLdWhMfGz9XKG07tZkSA91bI2uSzWyNV65liuB8rTv nCQuchIy+a1npSZ4nYoOJKC8xq9BL64d2ePRmHCBuqiaWXf7SM/e+kugykAUF/er kpi5owxLL223X0W9i54E8TcBmhGb2149/mxOJDFRHCqKIQ+mDp0tuJU7sg7nxgij 8LFm0JrxLyjRBgAEZAVbl0BVk4Yurvw1RerBRF9wi3uUtvwm0LmIUYNSa0WihuQN KvpSuGNP1r9gERta3nui4rE4/tR6DCeIIAZH89rQHdh5QCZE2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXBy/wl5CWdXBbwbMCxjj8aa81iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2RmNDA1ZTgtNjQyNS0z YTVhLTliMWEtMmE2M2MzZjk1ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJp7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUozv4X9imnELUcnNRVxE7qRN3NQJEMPPx+1p+G84ttLh41t9yB3nI8 8FNoPBxBk+OQcv/oMbjjgUTB932FBzDTXCMbcZe+GpT1aiU7FcsgFFeFSJ9vYZPa N8APdUkPmwppL+V1NfeCUfb9c8BksvujJ32zpKTknprn1bvxcnYgkvGv5axhrk5e kkEumf09qfERiEKVcax2AeaJN4ReT94fcVXT8+xaDEbz5Iy4sYKajRDd16feMNWi G2z/8XmCFW5z2xphy8KEA/KVUehum6cDy+RDRjC03NYf1gpC8sh4mw61dopES/nN 1LBsavSWnO66ftUuACx4oRXERybsyLw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:36 2026 by rpki-client