$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a823835-8df9-3a40-b821-bf283314c0f4.roa File: 2a823835-8df9-3a40-b821-bf283314c0f4.roa (raw, json) Hash identifier: IAAkR/uvrYnAPE1CbXYVtk7lP5Y43DD+EIwzNKlrFJw= Subject key identifier: 0C:AC:B1:B0:A6:68:A1:16:FD:CD:3E:46:A8:28:14:4D:D3:10:75:F6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D624A5DD6D724C0B79C6FB3B0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a823835-8df9-3a40-b821-bf283314c0f4.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 0 IP address blocks: 38.225.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5d:d6:d7:24:c0:b7:9c:6f:b3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=501d8e75-b964-479d-88c2-e7ac406ef021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:9e:6f:06:41:70:b0:4b:bb:91:6a:34:18: 3b:d9:9b:f8:f5:fa:49:a7:ea:83:f9:3e:e0:c9:d8: 10:64:0b:e4:29:9b:d5:61:7d:9d:89:1a:db:67:c3: 94:32:08:d6:e3:e6:0d:7a:eb:7f:b3:5e:a1:c0:c9: e1:1c:83:2c:1c:9d:a2:34:1e:43:e7:56:a1:34:4a: f9:54:95:69:df:ed:3c:81:de:e7:d7:b7:24:8c:88: 25:c2:5c:ba:6b:76:4d:95:2c:8b:c5:31:12:0b:94: 26:a1:94:ca:ac:e5:e1:e2:03:f9:ba:84:fd:2d:d9: 8f:e6:27:b8:77:40:ee:83:84:1e:28:f3:20:49:97: 5f:e7:ea:be:bf:ae:86:fb:68:b2:0e:6e:28:62:71: b6:b6:1d:69:01:de:ac:05:21:bd:9e:4c:9b:0d:b1: f3:5f:76:e0:ac:be:5d:e7:88:52:32:e0:5d:7b:76: fd:c5:39:6a:06:e6:88:24:57:7e:c2:88:38:09:52: 5b:c6:db:08:83:69:57:31:c2:b8:c9:c8:e3:1e:a5: 3f:16:99:03:7e:b7:90:fc:be:7f:c7:69:40:7d:b9: f3:a9:1e:e2:72:c0:3e:c8:24:55:38:c6:15:82:31: 74:da:07:0b:b8:cb:7a:d7:c9:58:64:1b:50:d8:48: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AC:B1:B0:A6:68:A1:16:FD:CD:3E:46:A8:28:14:4D:D3:10:75:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a823835-8df9-3a40-b821-bf283314c0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:3f:5d:20:c2:c1:a9:29:ac:46:db:23:61:24:68:67:7d:fd: c2:0e:da:ca:f1:6f:6b:ba:2b:a2:5d:29:23:18:77:7b:1d:05: b3:fc:1c:be:c9:85:26:bb:44:5d:bc:36:ec:5b:a8:61:ca:11: 6e:f5:01:30:18:90:18:16:7a:ec:db:2a:d7:fc:cb:75:0b:6b: 1b:c8:6b:be:3c:23:b8:c1:09:32:0c:44:7d:d5:21:74:44:ea: 15:c9:22:0b:6b:70:6f:ae:70:80:d7:1b:d7:2a:c1:c9:63:94: 95:92:c2:1f:61:7b:8b:51:28:b4:b4:ba:3b:04:6b:a6:25:51: 0c:e9:82:7c:39:65:59:f2:c6:77:37:de:05:47:11:70:96:68: 2d:c1:55:76:c6:74:ea:53:c4:74:6d:4f:20:67:40:66:bb:db: 3c:f1:01:41:a3:42:3c:70:d0:5c:71:8d:39:7d:df:ed:26:16: 81:66:7b:ef:83:08:8d:5a:bb:8a:11:6f:6a:0a:c5:d6:5f:2a: 7f:9e:42:60:93:92:ee:16:eb:6d:d1:00:eb:99:2f:1c:ff:17: b4:21:b1:11:fe:5c:53:58:85:e8:ff:73:6d:a5:74:48:23:cd: e1:89:b4:09:b5:10:01:91:09:12:ec:ff:65:b1:b1:69:ef:a3: b7:0c:fa:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSl3W1yTAt5xvs7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk NTAxZDhlNzUtYjk2NC00NzlkLTg4YzItZTdhYzQwNmVmMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SaebwZBcLBLu5FqNBg72Zv49fpJp+qD+T7g ydgQZAvkKZvVYX2diRrbZ8OUMgjW4+YNeut/s16hwMnhHIMsHJ2iNB5D51ahNEr5 VJVp3+08gd7n17ckjIglwly6a3ZNlSyLxTESC5QmoZTKrOXh4gP5uoT9LdmP5ie4 d0Dug4QeKPMgSZdf5+q+v66G+2iyDm4oYnG2th1pAd6sBSG9nkybDbHzX3bgrL5d 54hSMuBde3b9xTlqBuaIJFd+wog4CVJbxtsIg2lXMcK4ycjjHqU/FpkDfreQ/L5/ x2lAfbnzqR7icsA+yCRVOMYVgjF02gcLuMt618lYZBtQ2EglTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyssbCmaKEW/c0+RqgoFE3TEHX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmE4MjM4MzUtOGRmOS0z YTQwLWI4MjEtYmYyODMzMTRjMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuF3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY/XSDCwakprEbbI2EkaGd9/cIO2srxb2u6K6JdKSMYd3sdBbP8HL7J hSa7RF28NuxbqGHKEW71ATAYkBgWeuzbKtf8y3ULaxvIa748I7jBCTIMRH3VIXRE 6hXJIgtrcG+ucIDXG9cqwcljlJWSwh9he4tRKLS0ujsEa6YlUQzpgnw5ZVnyxnc3 3gVHEXCWaC3BVXbGdOpTxHRtTyBnQGa72zzxAUGjQjxw0FxxjTl93+0mFoFme++D CI1au4oRb2oKxdZfKn+eQmCTku4W623RAOuZLxz/F7QhsRH+XFNYhej/c22ldEgj zeGJtAm1EAGRCRLs/2WxsWnvo7cM+q8= -----END CERTIFICATE-----Generated at Thu Apr 16 22:38:42 2026 by rpki-client