$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24be5598-fb16-328a-97b7-b2ca05a357f7.roa File: 24be5598-fb16-328a-97b7-b2ca05a357f7.roa (raw, json) Hash identifier: bRf/KdY5HvGoPdp8XJjlrv20vq+q8nZJEW3QWsaprYo= Subject key identifier: C6:B3:85:57:5A:5D:7A:8A:75:BA:75:3E:F0:D5:01:47:B5:81:AB:41 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB2EB2336E6615F12FC4E7900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24be5598-fb16-328a-97b7-b2ca05a357f7.roa Signing time: Fri 30 Jan 2026 17:22:18 +0000 ROA not before: Fri 30 Jan 2026 17:22:18 +0000 ROA not after: Thu 30 Apr 2026 16:22:18 +0000 asID: 274515 IP address blocks: 38.236.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:eb:23:36:e6:61:5f:12:fc:4e:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 30 17:22:18 2026 GMT Not After : Apr 30 16:22:18 2026 GMT Subject: CN=b5584f9f-0dda-409b-8504-70334d5a5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:dd:8b:b0:30:83:1f:ba:05:06:d5:43:20: e3:68:35:54:09:02:21:78:38:df:e7:06:e5:28:04: 21:32:24:6d:78:5a:a9:80:d4:5f:b9:70:67:4b:35: 39:20:f1:29:9d:03:0a:73:cd:78:15:54:fd:f6:c0: b9:10:68:15:13:7c:80:e8:22:bb:0b:de:c2:e6:d7: 95:ac:3c:79:52:f2:9b:45:67:db:94:d2:5e:9c:4b: 8e:95:eb:9a:b7:9f:50:dc:e1:d8:56:f5:40:03:e8: 82:9d:9c:8c:c8:e8:f7:8a:0b:c5:60:dd:34:17:e9: f3:21:32:1c:0b:ff:59:d4:a8:cb:d8:3c:a7:b1:27: 15:0d:0f:27:61:fd:46:9c:65:92:8f:52:1d:5a:92: 37:43:72:8f:bd:07:a3:c3:3d:1f:82:e7:4a:4b:14: 84:e0:7d:ee:0b:4b:47:56:ee:5c:b0:7c:19:f2:27: c8:30:31:2e:a6:8f:99:c8:5a:c5:d0:87:f1:35:51: 36:54:22:ad:ee:ef:f0:92:bc:ca:67:76:7e:29:8b: 78:c5:ad:9d:90:f5:ea:b5:dd:47:42:22:84:e2:32: 5b:24:5a:ac:9e:d2:7f:1d:a0:0c:f0:01:0a:0a:d4: 1a:8f:8a:c6:ff:ca:65:2d:e1:40:95:7e:4e:3b:d2: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B3:85:57:5A:5D:7A:8A:75:BA:75:3E:F0:D5:01:47:B5:81:AB:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24be5598-fb16-328a-97b7-b2ca05a357f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:c1:ee:cf:31:d1:6d:64:66:db:78:04:28:dc:ee:a5:54:b5: 49:1a:5b:96:14:e9:ef:a8:ff:4d:61:62:f5:08:23:ad:cc:68: 82:0f:61:bb:38:cf:70:42:9f:a5:5a:ad:5a:aa:a7:73:bc:c4: 1d:a2:51:a6:cf:39:b9:3e:f5:b0:af:7a:5c:19:f0:06:bc:a3: 0e:1f:bc:fd:af:7b:17:29:07:02:b9:4d:1d:9d:3d:9f:c3:0d: be:f8:14:57:54:2a:a8:e1:58:bc:28:0d:ef:35:86:b3:05:7c: cb:96:58:6b:7c:22:de:0c:33:89:cc:ce:73:37:ec:d7:11:6a: 6e:74:39:41:ed:d9:5d:f2:63:98:02:c1:dc:57:ce:68:2f:b3: d2:df:9b:28:09:ad:e9:0f:ac:c8:ed:40:5d:0a:c2:40:b4:17: e7:4c:91:e4:11:57:2e:52:df:b9:f2:f3:74:62:76:4f:2b:3a: 7c:76:70:15:c0:ed:73:d3:90:49:41:27:17:13:bb:08:a3:bf: 3e:e4:ab:3f:0b:a9:5a:c1:6f:8b:dd:72:cb:f2:90:ec:25:51: 69:dc:ff:ab:e1:9c:da:bf:3e:e8:f2:de:f0:b4:68:fb:17:2c: c7:cd:01:2b:53:23:eb:c4:53:44:f0:09:5d:c4:80:1b:d8:3a: f0:12:84:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyy6yM25mFfEvxOeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEzMDE3MjIxOFoXDTI2MDQzMDE2MjIxOFowLzEtMCsGA1UEAxMk YjU1ODRmOWYtMGRkYS00MDliLTg1MDQtNzAzMzRkNWE1ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEHdi7Awgx+6BQbVQyDjaDVUCQIheDjf5wbl KAQhMiRteFqpgNRfuXBnSzU5IPEpnQMKc814FVT99sC5EGgVE3yA6CK7C97C5teV rDx5UvKbRWfblNJenEuOleuat59Q3OHYVvVAA+iCnZyMyOj3igvFYN00F+nzITIc C/9Z1KjL2DynsScVDQ8nYf1GnGWSj1IdWpI3Q3KPvQejwz0fgudKSxSE4H3uC0tH Vu5csHwZ8ifIMDEupo+ZyFrF0IfxNVE2VCKt7u/wkrzKZ3Z+KYt4xa2dkPXqtd1H QiKE4jJbJFqsntJ/HaAM8AEKCtQaj4rG/8plLeFAlX5OO9JMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMazhVdaXXqKdbp1PvDVAUe1gatBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjRiZTU1OTgtZmIxNi0z MjhhLTk3YjctYjJjYTA1YTM1N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLB7s8x0W1kZtt4BCjc7qVUtUkaW5YU6e+o/01hYvUII63MaIIPYbs4 z3BCn6VarVqqp3O8xB2iUabPObk+9bCvelwZ8Aa8ow4fvP2vexcpBwK5TR2dPZ/D Db74FFdUKqjhWLwoDe81hrMFfMuWWGt8It4MM4nMznM37NcRam50OUHt2V3yY5gC wdxXzmgvs9LfmygJrekPrMjtQF0KwkC0F+dMkeQRVy5S37ny83Ridk8rOnx2cBXA 7XPTkElBJxcTuwijvz7kqz8LqVrBb4vdcsvykOwlUWnc/6vhnNq/Pujy3vC0aPsX LMfNAStTI+vEU0TwCV3EgBvYOvAShK8= -----END CERTIFICATE-----Generated at Sun Mar 1 18:32:47 2026 by rpki-client