$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00af381d-53b3-3df0-bd99-b0069ee7ae99.roa File: 00af381d-53b3-3df0-bd99-b0069ee7ae99.roa (raw, json) Hash identifier: piRktu/WQw4Cfvj6fTj84A5igdtkdlyZU2CbkTkoiFE= Subject key identifier: 6D:A2:99:B0:B1:25:F6:2B:40:54:3E:85:45:00:7B:F1:8A:07:B3:D4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5884E8AE496734F389510FE0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00af381d-53b3-3df0-bd99-b0069ee7ae99.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 51722 IP address blocks: 38.107.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e8:ae:49:67:34:f3:89:51:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=b631a7cb-6766-4f03-976f-2439009af190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:07:c2:7d:a4:53:bc:a2:f5:ed:7b:dd:cd: 06:68:d2:a5:ee:9d:c4:87:89:17:6d:fc:89:e9:ba: 91:10:49:77:3e:a4:00:56:d9:5d:06:20:cd:08:35: 92:07:7a:6b:d4:bd:5d:b9:e9:25:00:6f:87:33:c8: 27:8c:5d:31:b6:0e:5c:30:4c:91:cf:c0:42:56:1e: 5b:32:d8:4a:1e:43:e5:50:8d:fd:6d:78:34:bd:13: 69:c2:69:0f:ad:2c:3b:3f:d5:c2:9d:1d:19:ce:22: 0e:b8:bb:30:1c:45:f8:f7:7c:c3:8a:2f:bc:b4:ee: 38:3e:5f:03:73:bb:4c:8f:46:27:56:75:51:a0:36: 34:17:d1:88:73:d2:f5:71:9b:35:58:ac:18:50:ed: 09:2f:37:48:09:e8:04:b9:ff:dd:38:36:97:0d:0f: d2:35:83:67:f8:5c:bc:1f:a1:ff:59:8f:6a:2b:25: 53:95:64:d3:79:62:55:bc:65:70:97:17:58:f0:ee: 42:ab:60:02:06:0d:2f:f6:31:bd:0a:1b:a3:39:74: 94:c1:7c:52:b7:f1:0c:41:e8:62:be:54:00:0e:32: 21:55:29:45:3c:f1:c3:e6:1e:15:f7:fa:3d:2d:02: 82:10:a5:71:4b:06:13:12:c2:4f:3e:b7:d0:b8:d1: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A2:99:B0:B1:25:F6:2B:40:54:3E:85:45:00:7B:F1:8A:07:B3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00af381d-53b3-3df0-bd99-b0069ee7ae99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.107.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:63:f3:5f:70:5f:c8:c7:f7:99:34:6a:c4:02:ef:88:78:6b: ee:20:77:b4:33:cf:fd:21:a4:05:d8:92:68:35:a7:ae:93:8b: 18:36:f6:1c:05:bf:ac:c0:6b:df:f2:59:42:98:d5:1a:51:75: 36:05:cb:2b:f3:20:c9:ae:b6:f9:52:90:bb:37:ae:e3:a1:00: 55:7a:d7:33:d2:38:d3:e9:df:71:a2:9c:e0:66:96:94:d5:2e: 2f:eb:b3:1b:ce:d5:c3:a3:f4:2e:c2:f1:a7:25:32:b1:68:8b: 6c:3b:a9:34:bf:dc:32:34:ca:27:7e:28:14:2c:05:3c:8f:c9: 60:c3:09:0d:8e:e5:aa:8e:1f:d2:30:ac:ce:98:af:b6:10:14: 53:0a:60:15:64:5b:7b:7a:7e:8c:49:59:91:27:11:87:29:47: bd:0a:70:81:0e:92:69:ad:70:65:00:89:81:d2:58:97:62:ec: 19:79:3e:ba:28:86:87:d9:22:b9:b2:90:25:e2:ff:99:dd:60: 13:24:8b:f9:74:cd:09:bc:c4:66:fd:d8:97:94:70:99:1d:6c: 7d:6e:02:5b:fc:57:bb:ba:31:28:c7:6f:c9:7b:8a:82:33:67: 76:94:bc:dd:2e:2f:07:4a:5a:f5:5f:1e:fa:2a:ca:d9:0b:a4: e5:45:13:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOiuSWc084lRD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk YjYzMWE3Y2ItNjc2Ni00ZjAzLTk3NmYtMjQzOTAwOWFmMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy0Hwn2kU7yi9e173c0GaNKl7p3Eh4kXbfyJ 6bqREEl3PqQAVtldBiDNCDWSB3pr1L1dueklAG+HM8gnjF0xtg5cMEyRz8BCVh5b MthKHkPlUI39bXg0vRNpwmkPrSw7P9XCnR0ZziIOuLswHEX493zDii+8tO44Pl8D c7tMj0YnVnVRoDY0F9GIc9L1cZs1WKwYUO0JLzdICegEuf/dODaXDQ/SNYNn+Fy8 H6H/WY9qKyVTlWTTeWJVvGVwlxdY8O5Cq2ACBg0v9jG9ChujOXSUwXxSt/EMQehi vlQADjIhVSlFPPHD5h4V9/o9LQKCEKVxSwYTEsJPPrfQuNFhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2imbCxJfYrQFQ+hUUAe/GKB7PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDBhZjM4MWQtNTNiMy0z ZGYwLWJkOTktYjAwNjllZTdhZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJmt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhj819wX8jH95k0asQC74h4a+4gd7Qzz/0hpAXYkmg1p66Tixg29hwF v6zAa9/yWUKY1RpRdTYFyyvzIMmutvlSkLs3ruOhAFV61zPSONPp33GinOBmlpTV Li/rsxvO1cOj9C7C8aclMrFoi2w7qTS/3DI0yid+KBQsBTyPyWDDCQ2O5aqOH9Iw rM6Yr7YQFFMKYBVkW3t6foxJWZEnEYcpR70KcIEOkmmtcGUAiYHSWJdi7Bl5Proo hofZIrmykCXi/5ndYBMki/l0zQm8xGb92JeUcJkdbH1uAlv8V7u6MSjHb8l7ioIz Z3aUvN0uLwdKWvVfHvoqytkLpOVFE/U= -----END CERTIFICATE-----Generated at Fri Apr 17 01:34:50 2026 by rpki-client