$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16f34a57-3f20-31b3-9b11-27305f3f0876.roa File: 16f34a57-3f20-31b3-9b11-27305f3f0876.roa (raw, json) Hash identifier: LtOgGJwcQLwfYtm6Yomp+29G6zC7c8ZqxFqGirVJ97o= Subject key identifier: 0D:96:7E:66:FF:10:47:39:22:AE:64:49:34:CC:B8:B0:4F:96:E5:A3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CF592618EE00DA4147D2A3DC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16f34a57-3f20-31b3-9b11-27305f3f0876.roa Signing time: Mon 26 Jan 2026 15:13:32 +0000 ROA not before: Mon 26 Jan 2026 15:13:32 +0000 ROA not after: Sun 26 Apr 2026 14:13:32 +0000 asID: 206706 IP address blocks: 38.236.87.0/24 maxlen: 24 38.236.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:92:61:8e:e0:0d:a4:14:7d:2a:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 26 15:13:32 2026 GMT Not After : Apr 26 14:13:32 2026 GMT Subject: CN=35a97765-cecf-4b87-9670-826e59226271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:8f:30:dc:56:df:6b:f7:72:fe:0c:cd:c0: d9:b9:55:a6:ba:71:aa:1e:aa:94:ab:02:cd:78:ac: 96:6b:07:f2:38:ba:4c:1a:60:16:84:0b:08:85:cb: a6:c5:48:77:ea:fa:f3:74:8b:cb:ab:96:19:94:73: a9:8c:9a:c7:01:79:b5:48:4d:1d:47:c4:6b:0a:11: 12:ea:b9:45:96:9e:08:98:ab:19:d0:3c:a4:c5:4a: f2:a0:b8:4d:24:23:53:6e:f7:18:b8:6e:c3:c9:c6: ab:ca:bb:1f:12:b4:29:11:53:32:67:b2:b1:9d:ff: fc:c6:48:ef:d1:8b:fc:87:7e:4e:d6:74:c1:f2:17: c7:19:19:ad:eb:6b:0b:d1:1d:bf:37:bd:c2:bc:ee: 37:62:07:95:df:b7:52:d3:c4:87:e8:90:c0:92:c6: 82:54:cf:36:01:3b:47:93:2e:4b:e5:b3:37:97:c2: 04:97:0c:25:3c:84:91:ff:4f:e5:a5:f8:0b:e7:f4: 84:75:5d:e3:51:00:65:a4:7f:db:9e:44:22:4a:96: 6e:65:a2:17:97:f0:2f:d1:43:52:ed:2c:e8:90:37: b4:04:55:98:b3:ea:20:79:03:b6:5a:ab:86:7a:28: 6e:bb:29:bf:aa:4f:72:93:b1:19:f8:45:19:c4:04: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:96:7E:66:FF:10:47:39:22:AE:64:49:34:CC:B8:B0:4F:96:E5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16f34a57-3f20-31b3-9b11-27305f3f0876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.87.0/24 38.236.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:69:98:13:d6:0a:df:49:07:12:e6:6d:7b:3b:3c:1c:f2:5e: ed:ff:e1:33:9f:4d:b8:a1:ce:88:34:12:10:bc:7e:c7:a4:e9: 41:d2:0c:16:b3:bd:85:cf:96:3e:24:6f:7d:22:e6:ba:c2:98: 7a:3f:da:60:6c:7b:2d:f9:7c:82:ee:40:e8:8b:a9:bb:7e:8e: 96:31:dc:a2:b1:73:6e:b5:c1:10:dc:88:20:9c:8f:71:ce:fc: 74:ca:91:f1:9f:8f:33:e9:24:da:b4:16:47:2a:cd:17:b4:f4: 05:bc:85:52:46:5f:48:c7:fd:7b:59:2c:4d:60:5a:a4:9c:e5: 08:10:8b:72:c8:00:37:5c:81:6e:91:bb:fe:80:25:83:a0:df: bd:cc:94:1d:95:1d:b6:21:1a:04:14:52:aa:94:c3:bb:26:28: c9:a2:a3:5f:5e:6a:60:29:3a:2e:25:36:40:16:19:ef:f0:29: e8:0c:c6:d3:ea:e7:33:4e:ad:ba:d6:0a:88:1f:22:1c:c7:9f: 2c:f6:89:94:7d:69:7c:3d:ae:ed:fb:c4:59:3f:57:6a:99:f7: 3b:69:9a:d2:38:3c:c2:2d:9e:33:9c:99:31:54:71:39:bc:f7: 19:a0:bd:41:92:59:2a:f8:ee:31:02:9f:e7:2b:36:ab:bf:03: 95:e9:92:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz1kmGO4A2kFH0qPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEyNjE1MTMzMloXDTI2MDQyNjE0MTMzMlowLzEtMCsGA1UEAxMk MzVhOTc3NjUtY2VjZi00Yjg3LTk2NzAtODI2ZTU5MjI2MjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnmPMNxW32v3cv4MzcDZuVWmunGqHqqUqwLN eKyWawfyOLpMGmAWhAsIhcumxUh36vrzdIvLq5YZlHOpjJrHAXm1SE0dR8RrChES 6rlFlp4ImKsZ0DykxUryoLhNJCNTbvcYuG7DycaryrsfErQpEVMyZ7Kxnf/8xkjv 0Yv8h35O1nTB8hfHGRmt62sL0R2/N73CvO43YgeV37dS08SH6JDAksaCVM82ATtH ky5L5bM3l8IElwwlPISR/0/lpfgL5/SEdV3jUQBlpH/bnkQiSpZuZaIXl/Av0UNS 7SzokDe0BFWYs+ogeQO2WquGeihuuym/qk9yk7EZ+EUZxASUPwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA2Wfmb/EEc5Iq5kSTTMuLBPluWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTZmMzRhNTctM2YyMC0z MWIzLTliMTEtMjczMDVmM2YwODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJuxXAwQA JuyrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB1pmBPWCt9JBxLmbXs7PBzyXu3/4TOfTbihzog0EhC8fsek 6UHSDBazvYXPlj4kb30i5rrCmHo/2mBsey35fILuQOiLqbt+jpYx3KKxc261wRDc iCCcj3HO/HTKkfGfjzPpJNq0FkcqzRe09AW8hVJGX0jH/XtZLE1gWqSc5QgQi3LI ADdcgW6Ru/6AJYOg373MlB2VHbYhGgQUUqqUw7smKMmio19eamApOi4lNkAWGe/w KegMxtPq5zNOrbrWCogfIhzHnyz2iZR9aXw9ru37xFk/V2qZ9ztpmtI4PMItnjOc mTFUcTm89xmgvUGSWSr47jECn+crNqu/A5Xpktg= -----END CERTIFICATE-----Generated at Mon Mar 2 08:42:44 2026 by rpki-client