$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa File: ddf260f8-0797-37de-9209-f0dc6868cbe3.roa (raw, json) Hash identifier: 68gQWVyxnJqegGyWEqwLeNO3kLYVBaKfoj8Npj7VA28= Subject key identifier: 34:EB:FE:46:C1:0C:EA:8F:9C:2D:45:72:F3:E6:21:8E:96:A6:95:91 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D47C4E106D9F07C9D38F17A40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 273013 IP address blocks: 38.43.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e1:06:d9:f0:7c:9d:38:f1:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=a859132d-2df2-44a3-82cf-e04cfec41647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:6e:71:4b:e6:4e:5d:1f:08:9b:1f:ba:ae: ad:6d:5a:64:d2:4e:70:d5:58:88:e1:a1:d0:ee:69: 97:aa:f3:d9:4f:c7:14:e8:78:56:2a:4b:2a:cf:40: d3:f5:00:23:b7:ee:f9:fa:a3:b6:e1:5d:6e:28:b0: 32:f0:b0:f2:f5:c7:b0:bf:3a:bb:a1:fc:80:fa:4b: c7:52:45:4b:42:fe:b2:5e:25:15:a5:24:4b:69:ce: f7:97:26:0c:4e:0f:2c:72:64:91:18:d9:b8:c5:40: 10:7a:91:83:c6:fe:40:34:90:f7:9c:b4:be:97:d5: cd:90:4d:19:19:35:48:86:4e:66:d0:7a:62:83:a7: 1d:5b:5a:4e:f0:1d:b9:8b:3e:bf:1c:02:59:ea:83: 99:11:0b:1a:74:79:0a:da:f0:be:ed:75:bc:06:4c: 88:81:27:5d:35:68:1e:c6:66:e2:ed:d4:d4:39:fe: 80:53:3c:ca:52:91:54:f0:41:2e:1f:8d:6b:40:78: 48:99:a0:b0:0a:f9:c1:a4:00:f5:bc:20:86:b2:d5: 75:90:8d:7a:5c:82:cb:b8:2c:35:0d:3b:d7:24:70: 46:9d:e5:56:46:0f:2b:46:53:7d:c8:ef:f0:4c:fc: 29:e6:b9:cd:37:83:4d:88:7f:65:08:18:db:32:f3: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EB:FE:46:C1:0C:EA:8F:9C:2D:45:72:F3:E6:21:8E:96:A6:95:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b2:32:43:9c:20:3c:4f:fd:c1:2b:50:bc:d4:97:9d:d7:70: ee:0b:3b:ae:ec:4e:34:a5:e3:24:7a:23:83:e9:ad:f7:04:e4: 6e:3e:4f:64:11:3f:24:a5:e4:13:ec:fa:e6:da:7c:b1:e2:ca: f8:99:90:2e:5c:8f:5f:08:b6:b7:86:d5:6d:9c:f6:8e:06:54: 46:b8:fe:6d:dd:46:2e:7d:d0:fd:7a:2f:55:f0:47:d0:7e:d1: d1:e6:6a:47:08:82:e8:ca:26:47:03:9b:81:82:3f:cc:f3:b3: 73:4f:9d:b7:6b:cb:4f:d2:99:50:77:3f:b2:7c:ad:46:5a:71: 89:be:6d:2b:77:e8:31:79:b7:9b:3c:24:66:47:26:bb:44:84: f2:9c:32:9f:4b:70:c3:fa:85:d0:4f:b0:4e:9c:e1:36:a0:f0: 9a:a9:a8:75:7b:c8:61:a0:ec:35:a1:e3:16:75:ae:bf:7e:97: a8:66:e8:82:c4:35:41:ca:3a:63:df:41:24:e9:05:2d:e7:bd: e1:ef:d5:3b:bd:c3:ee:63:93:a3:f0:b4:b6:7e:80:f8:d8:ab: 93:3a:81:2a:91:ec:da:0b:bd:74:1b:2a:7f:ff:34:87:16:af: b7:8d:0e:45:26:ad:3d:d9:08:45:89:27:5c:59:05:f3:5c:91: 5e:80:0c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOEG2fB8nTjxekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YTg1OTEzMmQtMmRmMi00NGEzLTgyY2YtZTA0Y2ZlYzQxNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnhucUvmTl0fCJsfuq6tbVpk0k5w1ViI4aHQ 7mmXqvPZT8cU6HhWKksqz0DT9QAjt+75+qO24V1uKLAy8LDy9cewvzq7ofyA+kvH UkVLQv6yXiUVpSRLac73lyYMTg8scmSRGNm4xUAQepGDxv5ANJD3nLS+l9XNkE0Z GTVIhk5m0Hpig6cdW1pO8B25iz6/HAJZ6oOZEQsadHkK2vC+7XW8BkyIgSddNWge xmbi7dTUOf6AUzzKUpFU8EEuH41rQHhImaCwCvnBpAD1vCCGstV1kI16XILLuCw1 DTvXJHBGneVWRg8rRlN9yO/wTPwp5rnNN4NNiH9lCBjbMvM3dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTr/kbBDOqPnC1FcvPmIY6WppWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGRmMjYwZjgtMDc5Ny0z N2RlLTkyMDktZjBkYzY4NjhjYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJit8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWyMkOcIDxP/cErULzUl53XcO4LO67sTjSl4yR6I4PprfcE5G4+T2QR PySl5BPs+ubafLHiyviZkC5cj18ItreG1W2c9o4GVEa4/m3dRi590P16L1XwR9B+ 0dHmakcIgujKJkcDm4GCP8zzs3NPnbdry0/SmVB3P7J8rUZacYm+bSt36DF5t5s8 JGZHJrtEhPKcMp9LcMP6hdBPsE6c4Tag8JqpqHV7yGGg7DWh4xZ1rr9+l6hm6ILE NUHKOmPfQSTpBS3nveHv1Tu9w+5jk6PwtLZ+gPjYq5M6gSqR7NoLvXQbKn//NIcW r7eNDkUmrT3ZCEWJJ1xZBfNckV6ADDc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:10 2026 by rpki-client