$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa File: dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa (raw, json) Hash identifier: oq5v/qPr7nvzsVL3XrCpQ2w2PzMkNmnfLlluvFiStgo= Subject key identifier: 9E:88:86:EF:0F:06:C7:76:04:B5:E7:14:29:4A:8B:35:8A:E5:38:8C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D44FA6A728EA52034A770F6C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 273263 IP address blocks: 38.58.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6a:72:8e:a5:20:34:a7:70:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=440da621-4b0e-4023-b96d-8a5ece1529d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5e:ba:f5:3c:a7:8a:f0:b3:96:70:df:5b:b2: ab:03:03:62:ff:6a:64:c2:d5:18:1f:30:d3:5b:35: 92:b4:97:5b:53:dc:39:09:ae:a8:5c:e2:d4:32:a6: 67:45:6d:19:7c:ef:82:76:50:88:e3:f3:a4:a5:de: 61:ca:a9:27:04:8e:0b:5c:0e:bf:7f:e8:4f:20:14: b7:df:21:46:62:18:9c:44:48:28:15:1b:de:f5:3b: 45:e4:f7:e3:c1:ce:da:f9:ed:d7:c9:33:b6:b7:30: ce:ec:44:f5:3d:f5:57:e2:5f:e0:d1:10:58:cc:5f: 10:ad:14:46:64:c5:5e:b5:8b:6c:f5:08:0a:3d:a5: f0:59:17:7c:aa:db:e8:d0:aa:c0:ff:e6:af:18:26: be:10:48:b0:8c:d0:02:bc:2a:dc:92:41:61:d6:96: f5:c0:cd:6c:b3:cb:75:cd:65:b1:eb:a8:a0:67:0c: b5:cd:e2:ed:15:73:4a:d3:15:ea:3a:8c:6b:52:a5: 28:5a:fb:1a:3a:c6:38:88:85:25:c7:75:d3:b5:2a: 23:06:29:8b:87:c2:27:e6:7d:03:ad:f9:93:b4:a9: 2b:f5:fd:76:50:64:7b:9b:f3:43:2c:e9:60:20:9d: b2:0c:07:f4:a9:01:4f:95:3a:9b:80:1a:8f:65:25: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:86:EF:0F:06:C7:76:04:B5:E7:14:29:4A:8B:35:8A:E5:38:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9e:78:2a:bf:d3:55:18:14:9b:e5:50:e1:c5:f4:9b:a3:a4: a6:25:d0:2f:4d:06:e3:52:03:50:2d:ee:41:a9:29:ff:a8:6d: cf:27:1f:37:7b:1b:9f:c6:5f:27:8e:01:eb:20:c3:d2:cc:9e: fb:dc:ba:26:21:0c:57:f2:65:ca:93:cd:1f:59:2a:50:41:49: 5e:f4:7a:af:09:2c:bf:d4:83:27:1d:a6:2f:72:ef:3e:01:39: 15:86:62:1d:2f:70:1f:50:92:89:88:be:97:60:db:f8:59:04: b2:c7:b8:ec:8e:bb:b6:03:a5:86:8a:f1:ad:e0:bb:4b:bb:ae: 77:bd:78:41:e8:d7:bb:a2:82:62:68:02:47:68:85:89:56:5e: c7:0b:73:df:d9:ad:4c:f0:bc:6a:92:82:c7:82:1f:3f:3e:e9: 86:d3:25:7c:26:68:91:41:59:86:2e:0e:3f:87:6d:36:ec:dd: d3:4e:f5:d5:73:36:3a:00:ee:93:e1:1a:27:81:aa:0e:cb:93: e9:a3:60:6c:2f:5f:ee:4a:17:90:5f:7a:c6:06:ea:d4:3c:4d: 11:b7:b9:8c:64:42:2a:79:19:31:52:83:c9:77:61:66:a5:49: d7:82:ab:03:5d:0c:8e:fc:27:d9:a1:48:96:f4:36:79:5e:8f: a6:46:ad:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mpyjqUgNKdw9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDQwZGE2MjEtNGIwZS00MDIzLWI5NmQtOGE1ZWNlMTUyOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV669TynivCzlnDfW7KrAwNi/2pkwtUYHzDT WzWStJdbU9w5Ca6oXOLUMqZnRW0ZfO+CdlCI4/Okpd5hyqknBI4LXA6/f+hPIBS3 3yFGYhicREgoFRve9TtF5Pfjwc7a+e3XyTO2tzDO7ET1PfVX4l/g0RBYzF8QrRRG ZMVetYts9QgKPaXwWRd8qtvo0KrA/+avGCa+EEiwjNACvCrckkFh1pb1wM1ss8t1 zWWx66igZwy1zeLtFXNK0xXqOoxrUqUoWvsaOsY4iIUlx3XTtSojBimLh8In5n0D rfmTtKkr9f12UGR7m/NDLOlgIJ2yDAf0qQFPlTqbgBqPZSV1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6Ihu8PBsd2BLXnFClKizWK5TiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGM3M2M5MGUtMjYzYS0z Yzk2LTk4YjktNjE4ZGQ5ZjRhYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGeeCq/01UYFJvlUOHF9JujpKYl0C9NBuNSA1At7kGpKf+obc8nHzd7 G5/GXyeOAesgw9LMnvvcuiYhDFfyZcqTzR9ZKlBBSV70eq8JLL/Ugycdpi9y7z4B ORWGYh0vcB9QkomIvpdg2/hZBLLHuOyOu7YDpYaK8a3gu0u7rne9eEHo17uigmJo AkdohYlWXscLc9/ZrUzwvGqSgseCHz8+6YbTJXwmaJFBWYYuDj+HbTbs3dNO9dVz NjoA7pPhGieBqg7Lk+mjYGwvX+5KF5BfesYG6tQ8TRG3uYxkQip5GTFSg8l3YWal SdeCqwNdDI78J9mhSJb0Nnlej6ZGrds= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:49 2026 by rpki-client