$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa File: db717c4d-e5e9-3340-ad9a-893770267318.roa (raw, json) Hash identifier: XdqKE0Ww1pqqLCQqdsUpTwIBfuEcSJhj5lvevb6NQNg= Subject key identifier: A9:D9:3E:65:43:A5:9F:66:65:FB:EB:79:3C:73:49:4B:5C:C5:70:22 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D33E295F82638FC2D73632284 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa Signing time: Tue 17 Mar 2026 22:04:21 +0000 ROA not before: Tue 17 Mar 2026 22:04:21 +0000 ROA not after: Mon 15 Jun 2026 22:04:21 +0000 asID: 56376 IP address blocks: 38.88.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:e2:95:f8:26:38:fc:2d:73:63:22:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 17 22:04:21 2026 GMT Not After : Jun 15 22:04:21 2026 GMT Subject: CN=76371a51-fe62-4279-a626-fb35a94a2538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:a3:21:ec:27:c6:91:8c:86:8b:f9:bd:a7: 1a:ff:4a:52:14:c0:7a:d9:28:9e:00:e3:60:53:69: 51:cd:8f:3d:29:ee:10:c0:b0:cb:b7:af:fe:9e:ea: bf:63:3a:90:8c:3b:6f:c2:3e:e1:f4:e2:85:e3:5f: 60:65:74:4f:ca:26:a7:b6:11:48:9d:dd:f0:f7:39: 2e:ce:e0:a5:68:11:24:d3:57:d3:2c:b6:07:49:5c: f6:d3:17:2f:5c:9e:a6:ee:ed:02:5a:b4:44:e4:e5: 9b:f4:1a:5d:75:4f:5b:e7:40:ae:b9:ab:96:e8:c9: e9:83:6f:cf:76:9c:5b:4b:8d:20:fa:b8:cc:c1:a6: 3a:86:c0:6c:db:b1:e8:f0:8c:64:18:4a:62:d5:df: 68:09:bc:4a:ec:d6:36:15:bb:40:d9:1b:f0:1a:da: 7d:e7:8a:49:6b:c2:53:5f:eb:6c:77:79:3b:07:f5: a9:4f:d7:4b:f5:bc:aa:b0:68:59:99:eb:89:f3:e2: de:c3:fa:e0:25:a8:45:b6:cf:bb:95:5a:46:48:e6: db:9a:2e:0e:78:04:45:04:01:f9:f7:12:65:51:68: 32:62:3a:ea:87:c1:fa:8e:9e:a8:aa:83:b4:0a:63: da:fe:d7:bd:9a:44:d3:b5:0b:63:3b:22:1d:7c:f0: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D9:3E:65:43:A5:9F:66:65:FB:EB:79:3C:73:49:4B:5C:C5:70:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.88.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:07:9c:09:b0:68:cc:60:6a:c8:1e:c5:8c:4d:6a:1a:cd:17: 75:32:0f:d2:31:cc:9b:47:b2:5e:6f:50:c6:a9:b9:d3:f5:ef: 37:87:d9:53:e2:8e:15:12:b8:c9:af:1e:af:65:3f:79:ab:ce: 7c:21:dd:c5:c6:33:f6:95:00:49:48:c2:9e:c4:3f:1c:c7:f9: 35:8e:9b:71:9d:b5:01:7e:8f:31:ce:9a:af:6d:f3:29:a3:89: cc:cf:b9:c2:37:93:c9:4a:fc:eb:92:3e:80:dc:15:5c:ed:d6: 7d:37:23:0d:48:04:39:76:f5:92:79:29:24:42:2d:76:ac:24: 75:32:fd:fd:70:69:f8:d9:f7:d6:07:e3:90:0c:f4:7f:68:84: 05:e2:58:93:39:e4:66:f5:c7:b6:35:d1:c8:93:13:c3:8e:5a: 0f:61:5a:87:10:9d:77:c1:2f:74:d2:a1:de:bc:78:9a:eb:b8: f2:da:0b:9d:5c:40:87:db:78:61:8e:97:61:87:34:01:6d:88: b0:3c:9e:32:74:03:d4:ff:5e:72:45:f8:e4:68:54:33:60:9b: c7:29:9a:9c:18:54:4d:8c:c5:8c:3c:c7:ed:eb:06:ae:fe:27: 65:75:fc:6d:43:e7:9b:6e:7b:8c:3f:ea:21:dd:34:82:14:f4: 02:bf:6f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0z4pX4Jjj8LXNjIoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNzIyMDQyMVoXDTI2MDYxNTIyMDQyMVowLzEtMCsGA1UEAxMk NzYzNzFhNTEtZmU2Mi00Mjc5LWE2MjYtZmIzNWE5NGEyNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQqjIewnxpGMhov5vaca/0pSFMB62SieAONg U2lRzY89Ke4QwLDLt6/+nuq/YzqQjDtvwj7h9OKF419gZXRPyianthFInd3w9zku zuClaBEk01fTLLYHSVz20xcvXJ6m7u0CWrRE5OWb9BpddU9b50CuuauW6Mnpg2/P dpxbS40g+rjMwaY6hsBs27Ho8IxkGEpi1d9oCbxK7NY2FbtA2RvwGtp954pJa8JT X+tsd3k7B/WpT9dL9byqsGhZmeuJ8+Lew/rgJahFts+7lVpGSObbmi4OeARFBAH5 9xJlUWgyYjrqh8H6jp6oqoO0CmPa/te9mkTTtQtjOyIdfPBItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnZPmVDpZ9mZfvreTxzSUtcxXAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGI3MTdjNGQtZTVlOS0z MzQwLWFkOWEtODkzNzcwMjY3MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJlhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0HnAmwaMxgasgexYxNahrNF3UyD9IxzJtHsl5vUMapudP17zeH2VPi jhUSuMmvHq9lP3mrznwh3cXGM/aVAElIwp7EPxzH+TWOm3GdtQF+jzHOmq9t8ymj iczPucI3k8lK/OuSPoDcFVzt1n03Iw1IBDl29ZJ5KSRCLXasJHUy/f1wafjZ99YH 45AM9H9ohAXiWJM55Gb1x7Y10ciTE8OOWg9hWocQnXfBL3TSod68eJrruPLaC51c QIfbeGGOl2GHNAFtiLA8njJ0A9T/XnJF+ORoVDNgm8cpmpwYVE2MxYw8x+3rBq7+ J2V1/G1D55tue4w/6iHdNIIU9AK/b3M= -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:32 2026 by rpki-client