$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9e91560-fdc1-354b-8e2f-337a2cf5406e.roa File: e9e91560-fdc1-354b-8e2f-337a2cf5406e.roa (raw, json) Hash identifier: tKz4J2pDtlA348bmDgVDUDo0mKaA+jWqqJtqXawplOI= Subject key identifier: 67:B6:B9:CF:53:68:11:EB:7A:45:99:24:4D:7B:92:11:CF:99:6B:2A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4683BF955AC0785B6F593200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9e91560-fdc1-354b-8e2f-337a2cf5406e.roa Signing time: Tue 24 Mar 2026 14:13:37 +0000 ROA not before: Tue 24 Mar 2026 14:13:37 +0000 ROA not after: Mon 22 Jun 2026 14:13:37 +0000 asID: 273304 IP address blocks: 38.58.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:83:bf:95:5a:c0:78:5b:6f:59:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 14:13:37 2026 GMT Not After : Jun 22 14:13:37 2026 GMT Subject: CN=be61ea82-20f3-40ab-b57e-628e003f87df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:bd:42:ed:8e:ae:35:b4:64:81:6b:87:58: fb:4d:f5:c0:f3:d7:23:78:63:5e:e8:0b:ed:83:9a: 05:b4:9a:51:15:64:41:2d:3f:89:fa:8d:50:c3:d3: 3b:e4:09:c0:9d:fb:9e:3e:a6:d2:85:ab:a5:d8:36: d7:70:3b:1c:7d:d8:da:2a:ca:2d:fa:24:64:a4:60: cc:81:ec:d9:60:ea:f5:6b:eb:a9:63:3f:29:2d:25: fd:b0:88:c9:b6:85:e3:7b:c4:27:ae:2c:58:0e:b2: fc:8a:06:96:9e:64:48:2c:ca:ed:61:b1:f0:99:9a: 00:2b:f3:f6:0b:a3:32:62:ad:6c:cd:fe:0c:d3:68: 0d:30:b8:c4:a7:54:05:72:33:0c:40:8e:8c:5a:1c: 68:c0:74:05:17:33:04:c3:c0:48:1c:24:01:25:19: 3d:08:bd:e5:7f:56:a4:b0:1e:ae:cf:d3:d7:87:a2: a8:f0:7d:cc:d2:bf:a8:2a:6d:47:a9:2f:5d:2c:ab: c2:23:c4:cd:b1:2f:10:03:00:a6:28:4b:e5:c6:8f: 09:bd:72:91:49:96:18:33:8e:45:34:8d:be:ec:2a: 9c:2d:8f:a4:26:63:09:25:04:15:f5:cf:27:1f:90: 59:3b:10:f9:f6:43:0d:58:94:5c:68:e0:27:21:fe: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:B9:CF:53:68:11:EB:7A:45:99:24:4D:7B:92:11:CF:99:6B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9e91560-fdc1-354b-8e2f-337a2cf5406e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:52:70:54:63:1f:2c:fb:cc:93:f2:4d:3f:a1:ee:52:b1:16: f7:24:68:22:23:42:49:47:8e:86:3f:87:d1:b3:c7:94:50:98: bf:d5:3b:14:c1:87:0a:b8:c6:1a:3a:d0:35:c6:f9:6a:bf:2d: f7:40:0f:aa:30:7b:be:27:8f:8a:ed:f3:0e:15:90:e1:cb:3f: b5:c8:db:af:2d:1d:e8:c3:7a:3c:22:c6:4b:7f:82:70:0a:e4: 2c:98:7b:23:71:a3:6f:d7:b5:9c:d2:56:53:76:69:56:f9:bb: 22:3c:d7:80:c0:5c:79:75:22:8d:bb:f1:5c:03:96:1b:40:65: ab:de:90:98:9c:db:51:d2:0c:1e:88:6a:05:54:e2:c5:31:38: f1:65:32:66:73:53:1c:a4:46:8f:e8:2f:bf:af:de:35:4d:ff: 5d:f7:84:eb:ac:5a:7d:48:cf:d7:cb:c1:29:88:2e:cc:36:7a: d5:9b:91:7d:6a:97:3c:6a:95:5f:af:56:e1:d5:a8:93:b1:f7: 5c:d6:b0:d3:81:f2:9f:d0:5f:93:f1:24:fd:60:32:fd:52:43: c5:f1:0d:55:b2:97:ad:a8:40:7d:1e:ce:4c:51:e8:5f:0c:c9: 06:87:ea:76:41:a9:d7:28:19:54:8a:5c:6e:c3:8d:87:fd:74: 84:66:10:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Gg7+VWsB4W29ZMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDE0MTMzN1oXDTI2MDYyMjE0MTMzN1owLzEtMCsGA1UEAxMk YmU2MWVhODItMjBmMy00MGFiLWI1N2UtNjI4ZTAwM2Y4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8C9Qu2OrjW0ZIFrh1j7TfXA89cjeGNe6Avt g5oFtJpRFWRBLT+J+o1Qw9M75AnAnfuePqbShaul2DbXcDscfdjaKsot+iRkpGDM gezZYOr1a+upYz8pLSX9sIjJtoXje8QnrixYDrL8igaWnmRILMrtYbHwmZoAK/P2 C6MyYq1szf4M02gNMLjEp1QFcjMMQI6MWhxowHQFFzMEw8BIHCQBJRk9CL3lf1ak sB6uz9PXh6Ko8H3M0r+oKm1HqS9dLKvCI8TNsS8QAwCmKEvlxo8JvXKRSZYYM45F NI2+7CqcLY+kJmMJJQQV9c8nH5BZOxD59kMNWJRcaOAnIf5shwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe2uc9TaBHrekWZJE17khHPmWsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTllOTE1NjAtZmRjMS0z NTRiLThlMmYtMzM3YTJjZjU0MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtScFRjHyz7zJPyTT+h7lKxFvckaCIjQklHjoY/h9Gzx5RQmL/VOxTB hwq4xho60DXG+Wq/LfdAD6owe74nj4rt8w4VkOHLP7XI268tHejDejwixkt/gnAK 5CyYeyNxo2/XtZzSVlN2aVb5uyI814DAXHl1Io278VwDlhtAZavekJic21HSDB6I agVU4sUxOPFlMmZzUxykRo/oL7+v3jVN/133hOusWn1Iz9fLwSmILsw2etWbkX1q lzxqlV+vVuHVqJOx91zWsNOB8p/QX5PxJP1gMv1SQ8XxDVWyl62oQH0ezkxR6F8M yQaH6nZBqdcoGVSKXG7DjYf9dIRmEN0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:23 2026 by rpki-client