$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce321364-9811-3b6a-83a0-69343e067a14.roa File: ce321364-9811-3b6a-83a0-69343e067a14.roa (raw, json) Hash identifier: YvWq0V7DGdf9+4O4rEiF8TqnoYVBWWR4JU//DZPpgXw= Subject key identifier: 38:AD:2A:37:05:A1:B0:C3:A3:46:01:64:9A:AC:C9:89:08:14:5F:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D316F7C615BBC6278595B9B40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce321364-9811-3b6a-83a0-69343e067a14.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 272366 IP address blocks: 38.44.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7c:61:5b:bc:62:78:59:5b:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=b1fe9f74-566a-4604-8c72-c9bc09a22e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:9f:8b:34:e9:44:ee:dc:89:01:f0:de:0d: cb:02:ad:09:42:d4:86:7b:f4:70:9b:21:b3:92:ca: e9:a3:33:a0:53:4f:f4:11:76:e5:35:88:91:68:33: 98:7c:d4:da:ef:10:f5:74:ea:3f:d3:0c:03:e0:7a: fc:c3:25:3e:f1:8d:5b:79:70:65:c4:d8:5c:d2:23: 6e:2f:f1:37:dd:34:2f:37:d2:a6:85:7f:52:49:16: 41:57:c7:0a:51:bc:aa:b0:17:b9:d6:98:36:5e:da: 26:0e:af:de:10:d8:97:c6:3c:19:d4:e3:d5:3b:7d: ba:ec:a0:7d:46:dc:e5:d5:f5:83:98:f2:45:ca:a2: 46:28:35:27:d3:2e:52:b0:2c:0a:8f:6c:97:e0:53: 6a:65:2e:08:7a:37:9e:7a:10:20:8f:13:80:b6:22: ac:90:d3:ec:0e:aa:9f:45:9c:06:e3:ca:bc:f7:5e: bc:39:85:0b:86:73:4c:88:70:3c:93:aa:93:6b:ad: c0:67:80:c8:32:80:b4:40:be:12:38:84:cd:9b:53: 65:de:0f:c2:55:53:c0:73:2d:3f:a9:19:9b:26:35: 6c:b8:cb:18:2b:0a:09:6f:0f:2e:ce:b6:a0:fb:06: 03:85:e9:bf:7c:45:71:b6:e7:1d:d1:f3:92:70:95: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:2A:37:05:A1:B0:C3:A3:46:01:64:9A:AC:C9:89:08:14:5F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce321364-9811-3b6a-83a0-69343e067a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.44.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:21:c8:3b:33:d2:bb:ab:5d:84:cc:1e:2f:78:2b:31:f6:66: 5d:23:2c:11:b5:93:d6:ce:c6:ff:28:33:06:62:41:0e:ef:f3: 94:ab:38:71:54:14:86:da:8d:8e:77:44:28:ed:9a:84:fe:a3: cd:25:8f:a7:87:45:cb:fd:78:53:c5:13:ad:35:c1:1d:79:3a: e8:3a:68:9f:dd:bb:e7:a2:06:62:58:fb:49:2f:3d:db:03:1e: 9f:28:a6:ec:4c:44:5c:30:ef:d7:f7:02:b6:23:b9:49:90:e1: 80:20:15:d9:2b:3e:6e:67:3a:41:32:95:10:3c:e0:e1:75:86: 5b:75:95:ab:af:12:0a:ee:6d:37:01:f5:a1:ea:a0:29:af:c5: 6a:b3:8b:77:ec:08:05:1a:5a:6e:bb:4c:8e:e2:5d:a6:cd:69: 47:dd:bc:db:59:0e:08:d9:39:82:42:57:aa:e0:c3:16:9b:89: 75:41:c6:7b:ad:1a:5b:75:3a:85:30:d2:f2:b7:40:8c:46:7c: 47:ee:6e:68:e1:6f:5c:d7:e0:59:8e:f0:e2:b3:5a:df:7a:3d: 23:9b:52:b7:fa:9b:f5:dc:34:bc:62:a1:56:e6:2a:ed:4e:88: ea:26:1b:23:57:97:7f:b8:a0:b7:2e:3a:f4:02:65:37:d1:01: 14:65:f9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3xhW7xieFlbm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk YjFmZTlmNzQtNTY2YS00NjA0LThjNzItYzliYzA5YTIyZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBSfizTpRO7ciQHw3g3LAq0JQtSGe/RwmyGz ksrpozOgU0/0EXblNYiRaDOYfNTa7xD1dOo/0wwD4Hr8wyU+8Y1beXBlxNhc0iNu L/E33TQvN9KmhX9SSRZBV8cKUbyqsBe51pg2XtomDq/eENiXxjwZ1OPVO3267KB9 Rtzl1fWDmPJFyqJGKDUn0y5SsCwKj2yX4FNqZS4IejeeehAgjxOAtiKskNPsDqqf RZwG48q89168OYULhnNMiHA8k6qTa63AZ4DIMoC0QL4SOITNm1Nl3g/CVVPAcy0/ qRmbJjVsuMsYKwoJbw8uzrag+wYDhem/fEVxtucd0fOScJWyPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDitKjcFobDDo0YBZJqsyYkIFF/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2UzMjEzNjQtOTgxMS0z YjZhLTgzYTAtNjkzNDNlMDY3YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJixjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUhyDsz0rurXYTMHi94KzH2Zl0jLBG1k9bOxv8oMwZiQQ7v85SrOHFU FIbajY53RCjtmoT+o80lj6eHRcv9eFPFE601wR15Oug6aJ/du+eiBmJY+0kvPdsD Hp8opuxMRFww79f3ArYjuUmQ4YAgFdkrPm5nOkEylRA84OF1hlt1lauvEgrubTcB 9aHqoCmvxWqzi3fsCAUaWm67TI7iXabNaUfdvNtZDgjZOYJCV6rgwxabiXVBxnut Glt1OoUw0vK3QIxGfEfubmjhb1zX4FmO8OKzWt96PSObUrf6m/XcNLxioVbmKu1O iOomGyNXl3+4oLcuOvQCZTfRARRl+f8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:00 2026 by rpki-client