$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21e3a72f-a534-3aad-93cf-310e92f025b6.roa File: 21e3a72f-a534-3aad-93cf-310e92f025b6.roa (raw, json) Hash identifier: GhiC5LkDMmekzBitIZKK0HrvqASMVcXdrHC8ZTeHW9U= Subject key identifier: B0:CB:FA:6D:93:21:62:DC:7D:6C:91:92:BE:B5:76:AD:3D:AE:D9:AD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CFB35119A525B2B09FFFB98B8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21e3a72f-a534-3aad-93cf-310e92f025b6.roa Signing time: Fri 26 Dec 2025 15:00:11 +0000 ROA not before: Fri 26 Dec 2025 15:00:11 +0000 ROA not after: Thu 26 Mar 2026 14:00:11 +0000 asID: 273280 IP address blocks: 38.236.174.0/23 maxlen: 23 204.157.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:35:11:9a:52:5b:2b:09:ff:fb:98:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 26 15:00:11 2025 GMT Not After : Mar 26 14:00:11 2026 GMT Subject: CN=da185f46-dea3-40d5-95e2-bda63abcc369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:fb:b0:bd:13:36:99:fe:c3:4a:b4:22:6c: 99:dd:62:dd:5c:bb:a0:1e:e1:3f:ab:70:a0:44:ec: e5:f5:64:a6:25:00:62:be:4c:9b:6c:8f:11:3d:07: 61:c3:23:57:44:9c:d1:45:6f:51:dc:56:16:63:79: b2:5c:3d:9e:41:10:b3:22:d4:83:4b:07:18:c7:a9: 23:ed:f7:83:4a:b4:79:e9:7a:70:78:6f:46:90:90: 63:95:b8:22:60:f0:8d:91:39:4c:9b:38:65:cf:b8: 32:88:1c:aa:e2:c1:b8:b8:7a:6d:f6:07:3a:7e:7d: 63:46:4d:9e:31:92:84:88:77:57:4f:26:c4:b0:5f: 50:d6:79:82:99:b7:0a:a3:e9:9f:d1:70:2e:1c:a9: 0a:01:13:74:96:18:d6:6b:dd:fc:33:0e:73:df:c1: 27:6f:e6:8e:d6:3d:62:dc:e9:21:7e:73:e1:62:86: f7:54:a2:e3:59:36:0d:e4:17:0d:bf:b3:3c:b8:f8: 80:08:ea:0d:55:48:c6:f8:c0:4b:d3:6d:5a:84:2e: ce:ed:5a:cc:a6:e1:42:7e:c4:28:90:88:e9:5b:8c: 06:06:6b:4b:78:c0:7a:3a:f8:62:c5:c5:bf:e9:c3: fa:6f:13:77:f2:80:46:c0:0e:1a:67:52:c6:d5:69: ee:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CB:FA:6D:93:21:62:DC:7D:6C:91:92:BE:B5:76:AD:3D:AE:D9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21e3a72f-a534-3aad-93cf-310e92f025b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.174.0/23 204.157.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:30:15:00:7a:1a:ff:67:9d:15:40:a7:61:fc:cb:59:2c:88: 46:22:e4:9f:75:13:80:29:30:df:ba:84:8c:d2:5c:4f:63:36: b0:dc:cf:cf:19:66:0b:3b:eb:51:06:d7:1e:5f:9c:ed:fc:fc: 69:7a:0e:83:31:ca:16:5a:78:66:17:49:16:1f:b4:60:e9:59: 4b:07:67:a2:96:fc:fd:18:cf:34:58:a9:d0:54:32:47:76:dc: cc:ef:4e:57:59:b5:66:b0:67:b6:26:47:14:aa:61:47:39:f9: 1b:08:87:2a:ab:a8:5f:2b:26:91:26:0c:61:8d:15:d0:47:79: de:6d:56:e1:57:0c:88:45:c9:7f:de:73:6e:12:f4:b7:d6:28: d2:ee:c0:a8:10:92:8c:74:2e:ce:8b:8d:95:f5:da:bd:4d:62: f7:cb:d4:04:af:22:ea:42:e8:c5:6d:72:58:93:ab:27:8e:74: 6f:45:7e:29:58:35:e3:ff:70:e4:2a:e3:0d:8d:e1:9d:ae:68: 8b:aa:63:2f:f1:fc:6c:ca:09:a8:49:28:a2:6f:b2:fa:08:99: c7:7a:08:fc:fc:bb:b4:06:a9:ad:3d:2a:70:cc:91:54:4b:22: 76:ef:73:88:a1:04:3d:22:85:b0:33:70:64:e7:13:b9:06:34: e3:83:ec:60 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz7NRGaUlsrCf/7mLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyNjE1MDAxMVoXDTI2MDMyNjE0MDAxMVowLzEtMCsGA1UEAxMk ZGExODVmNDYtZGVhMy00MGQ1LTk1ZTItYmRhNjNhYmNjMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj/7sL0TNpn+w0q0ImyZ3WLdXLugHuE/q3Cg ROzl9WSmJQBivkybbI8RPQdhwyNXRJzRRW9R3FYWY3myXD2eQRCzItSDSwcYx6kj 7feDSrR56XpweG9GkJBjlbgiYPCNkTlMmzhlz7gyiByq4sG4uHpt9gc6fn1jRk2e MZKEiHdXTybEsF9Q1nmCmbcKo+mf0XAuHKkKARN0lhjWa938Mw5z38Enb+aO1j1i 3OkhfnPhYob3VKLjWTYN5BcNv7M8uPiACOoNVUjG+MBL021ahC7O7VrMpuFCfsQo kIjpW4wGBmtLeMB6OvhixcW/6cP6bxN38oBGwA4aZ1LG1Wnu/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLDL+m2TIWLcfWyRkr61dq09rtmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjFlM2E3MmYtYTUzNC0z YWFkLTkzY2YtMzEwZTkyZjAyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJuyuAwQB zJ1EMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACswFQB6Gv9nnRVAp2H8y1ksiEYi5J91E4ApMN+6hIzSXE9j NrDcz88ZZgs761EG1x5fnO38/Gl6DoMxyhZaeGYXSRYftGDpWUsHZ6KW/P0YzzRY qdBUMkd23MzvTldZtWawZ7YmRxSqYUc5+RsIhyqrqF8rJpEmDGGNFdBHed5tVuFX DIhFyX/ec24S9LfWKNLuwKgQkox0Ls6LjZX12r1NYvfL1ASvIupC6MVtcliTqyeO dG9FfilYNeP/cOQq4w2N4Z2uaIuqYy/x/GzKCahJKKJvsvoImcd6CPz8u7QGqa09 KnDMkVRLInbvc4ihBD0ihbAzcGTnE7kGNOOD7GA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:32:48 2026 by rpki-client