$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9792ce4-b6e2-33c6-a7de-1f6e0b3b568e.roa File: d9792ce4-b6e2-33c6-a7de-1f6e0b3b568e.roa (raw, json) Hash identifier: Qf5Vt2J9HKJodZ7ZGF2yMzax+xWiefZoJcXPAOHePQU= Subject key identifier: 42:F2:FA:FB:08:21:B2:18:74:BE:98:E9:8B:FE:D6:33:22:5D:4B:E4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4737666F9249348619FD7B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9792ce4-b6e2-33c6-a7de-1f6e0b3b568e.roa Signing time: Tue 24 Mar 2026 20:15:36 +0000 ROA not before: Tue 24 Mar 2026 20:15:36 +0000 ROA not after: Mon 22 Jun 2026 20:15:36 +0000 asID: 40336 IP address blocks: 38.172.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:37:66:6f:92:49:34:86:19:fd:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 20:15:36 2026 GMT Not After : Jun 22 20:15:36 2026 GMT Subject: CN=d0d129d1-4d45-4f88-91f9-0b43faaa44b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:1b:72:44:25:d4:ec:fe:b7:19:8c:e4:5b: c2:3e:59:d7:eb:a6:70:ee:82:a2:93:66:b4:ae:18: 8b:b1:7b:83:5b:9d:1e:b1:0d:d8:e9:2d:7d:2b:d2: ca:af:4e:e6:3f:b2:bf:89:db:60:5f:8d:9d:5c:f1: 78:d2:2e:63:62:c5:dd:eb:4e:9c:8b:5c:73:8b:e4: d8:54:b9:e0:a6:48:99:89:72:9e:9d:ab:41:a8:29: 84:0f:b6:ab:a7:38:e7:55:23:34:ac:b2:93:81:2f: a3:4f:65:8c:9b:c3:c0:e1:29:cd:dd:30:ed:ba:83: 58:9a:9a:b7:22:de:4e:9e:b6:36:3b:aa:95:67:e1: e4:15:eb:50:36:ac:7c:68:d1:aa:66:a2:5e:49:46: d6:5e:a0:d2:14:e3:62:b3:3d:18:b4:32:8b:1e:0e: bd:06:dd:c3:63:20:30:03:aa:5d:67:e2:c4:5f:f8: 86:81:4a:11:1b:e6:6e:04:23:96:48:db:11:0b:fb: 4f:31:87:fd:3b:36:f3:f9:53:c9:8f:d0:bf:92:bd: 7a:59:62:33:a4:c3:67:95:e7:00:9d:52:4a:75:05: 2f:06:85:79:56:1d:51:4c:5f:da:38:ed:63:12:34: 2a:88:54:c5:16:83:29:3d:a9:51:fb:18:e8:0f:b0: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F2:FA:FB:08:21:B2:18:74:BE:98:E9:8B:FE:D6:33:22:5D:4B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9792ce4-b6e2-33c6-a7de-1f6e0b3b568e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9a:f1:10:75:ee:3c:ba:63:85:fb:3d:ff:c8:4f:aa:13:67: 96:c5:8a:ee:ca:d0:95:e5:84:0b:62:f5:9c:a1:6e:3b:39:63: 5a:25:9b:a8:55:27:f3:80:64:ad:86:d0:7f:d8:f5:72:d1:58: 83:56:e1:10:1c:93:a8:ea:50:59:f6:9b:b2:2c:b1:ce:7d:c0: ab:e4:66:b9:ba:5e:00:5e:d6:1b:d5:63:e7:be:13:74:73:22: bf:13:d3:da:f8:04:df:43:e9:18:48:03:87:80:ee:c3:ec:36: 32:73:eb:c2:5c:53:ee:09:30:09:df:5f:25:2b:44:32:fc:09: ab:ef:0f:43:50:0c:9c:1c:5e:06:ef:4e:12:ee:a4:48:9f:1e: e8:e8:29:e9:7e:63:da:a2:70:55:8b:34:cc:05:a3:17:a3:2a: cd:58:75:90:80:e7:68:8a:17:1f:4c:e5:db:ea:7a:33:8d:00: 54:53:92:05:56:5d:98:63:9e:0d:fc:e8:5e:4d:49:a5:a4:af: b9:86:0d:87:67:77:03:7a:48:b8:39:1e:5c:46:d0:68:54:db: b4:80:2a:55:d9:db:c5:38:25:a5:53:8f:7f:c1:a2:5b:d8:da: 22:3d:d9:eb:b9:d5:61:be:30:7f:04:d7:32:51:44:ae:73:28: 51:0c:5f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HN2Zvkkk0hhn9ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDIwMTUzNloXDTI2MDYyMjIwMTUzNlowLzEtMCsGA1UEAxMk ZDBkMTI5ZDEtNGQ0NS00Zjg4LTkxZjktMGI0M2ZhYWE0NGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTcbckQl1Oz+txmM5FvCPlnX66Zw7oKik2a0 rhiLsXuDW50esQ3Y6S19K9LKr07mP7K/idtgX42dXPF40i5jYsXd606ci1xzi+TY VLngpkiZiXKenatBqCmED7arpzjnVSM0rLKTgS+jT2WMm8PA4SnN3TDtuoNYmpq3 It5OnrY2O6qVZ+HkFetQNqx8aNGqZqJeSUbWXqDSFONisz0YtDKLHg69Bt3DYyAw A6pdZ+LEX/iGgUoRG+ZuBCOWSNsRC/tPMYf9Ozbz+VPJj9C/kr16WWIzpMNnlecA nVJKdQUvBoV5Vh1RTF/aOO1jEjQqiFTFFoMpPalR+xjoD7BYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELy+vsIIbIYdL6Y6Yv+1jMiXUvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDk3OTJjZTQtYjZlMi0z M2M2LWE3ZGUtMWY2ZTBiM2I1NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJqzVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFea8RB17jy6Y4X7Pf/IT6oTZ5bFiu7K0JXlhAti9Zyhbjs5Y1olm6hV J/OAZK2G0H/Y9XLRWINW4RAck6jqUFn2m7Issc59wKvkZrm6XgBe1hvVY+e+E3Rz Ir8T09r4BN9D6RhIA4eA7sPsNjJz68JcU+4JMAnfXyUrRDL8CavvD0NQDJwcXgbv ThLupEifHujoKel+Y9qicFWLNMwFoxejKs1YdZCA52iKFx9M5dvqejONAFRTkgVW XZhjng386F5NSaWkr7mGDYdndwN6SLg5HlxG0GhU27SAKlXZ28U4JaVTj3/BolvY 2iI92eu51WG+MH8E1zJRRK5zKFEMX6k= -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:00 2026 by rpki-client