$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa File: 35828ae1-c906-38dd-815a-71a05121f2f6.roa (raw, json) Hash identifier: YafY8N6zza3QhMU4xYDqAqsHv/zz+VFD3D0o6NhyiE0= Subject key identifier: 69:13:64:E7:FD:85:20:38:AF:FD:56:12:C4:53:E0:12:71:15:96:0B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5234FC07B40B57241E7FB4C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa Signing time: Sat 28 Mar 2026 18:44:37 +0000 ROA not before: Sat 28 Mar 2026 18:44:37 +0000 ROA not after: Mon 04 May 2026 18:03:41 +0000 asID: 265634 IP address blocks: 38.159.160.0/22 maxlen: 24 38.236.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:fc:07:b4:0b:57:24:1e:7f:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 28 18:44:37 2026 GMT Not After : May 4 18:03:41 2026 GMT Subject: CN=98a8e3f0-ecae-4489-9231-3b39477a82b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:e9:e6:ec:f6:70:2b:28:ee:6e:90:69:b3: 69:a2:d0:2d:35:75:98:7f:9d:7e:b8:4c:b0:c3:b1: a5:c9:1e:cb:54:59:1c:f0:01:0d:14:05:3d:e3:00: d9:16:59:5e:da:00:ea:a5:c6:72:2c:6e:10:6e:25: a1:3c:87:4f:d0:c4:0f:27:ad:7f:04:37:de:21:b5: 6f:b4:ca:6a:59:fc:2a:f0:a4:86:40:31:b8:7b:94: 57:7c:ec:47:7c:8b:cf:26:f6:61:f1:27:5d:a2:c3: 08:53:5f:cb:9a:1b:4a:c6:de:44:59:0e:09:bd:b2: 1b:7e:9d:f4:70:1c:eb:0e:35:4a:da:57:fa:8d:37: a9:fb:b5:16:d2:00:5c:23:db:12:b1:76:0a:6a:b9: 2d:fe:c8:4e:a7:83:d8:cc:a9:58:d6:a0:f2:98:44: 9d:1d:a3:2b:eb:ef:a1:45:ea:ac:ec:e9:d0:21:e9: 40:30:10:56:87:65:34:e1:1a:54:fb:13:14:13:6f: e3:b2:35:39:1b:0a:68:b9:04:48:fa:bc:64:58:05: 5b:42:dc:e1:98:c4:e7:e8:42:6e:df:47:3b:96:fc: 97:c1:37:a2:37:fb:e3:46:20:06:3f:ee:70:97:01: 87:0a:ba:da:e2:7c:8e:e3:55:2c:fe:20:b7:8e:62: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:13:64:E7:FD:85:20:38:AF:FD:56:12:C4:53:E0:12:71:15:96:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.160.0/22 38.236.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:81:fc:98:6b:f0:8e:4a:ea:ba:e7:5c:b4:ac:0b:0b:8a:f6: a8:f4:a5:56:bc:df:93:ac:bc:62:bb:60:fb:cc:eb:3e:d2:a2: ca:95:e1:39:cb:31:4d:45:ec:49:f3:ec:90:bd:ba:1d:f4:ea: 46:00:ad:b5:4f:f1:26:8d:b5:74:7f:43:22:5c:cd:46:8e:54: 95:69:68:99:54:0b:fa:db:1d:98:68:24:1e:14:5a:59:82:f4: 75:5a:39:5f:ac:01:d2:84:85:c2:ff:0e:3d:84:31:90:11:5b: 9a:f0:76:50:34:5d:d3:34:9b:21:f0:db:19:5b:91:3c:31:8e: a4:65:f6:78:b3:e3:ed:50:35:93:b4:6e:72:98:5d:e5:b7:55: de:f3:5d:d5:9a:41:fe:59:f1:ed:53:d8:22:0e:9a:b5:f2:eb: 1a:f5:33:62:7a:33:ac:ee:0d:c0:ad:b9:43:e5:f0:c2:d0:50: b0:9a:e3:20:7a:a1:56:c9:b4:e6:34:d6:f0:cb:07:72:92:ee: 8a:f5:3e:79:7b:d6:01:ca:b0:4a:43:4b:41:6e:9a:b8:87:bc: 4e:3d:b4:3f:a1:ea:eb:37:40:f5:10:28:af:c0:ec:24:a3:e1: 68:74:3a:27:09:d6:cf:41:3d:ab:88:da:1c:39:6d:e3:23:c9: 0a:79:85:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNPwHtAtXJB5/tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyODE4NDQzN1oXDTI2MDUwNDE4MDM0MVowLzEtMCsGA1UEAxMk OThhOGUzZjAtZWNhZS00NDg5LTkyMzEtM2IzOTQ3N2E4MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Hp5uz2cCso7m6QabNpotAtNXWYf51+uEyw w7GlyR7LVFkc8AENFAU94wDZFlle2gDqpcZyLG4QbiWhPIdP0MQPJ61/BDfeIbVv tMpqWfwq8KSGQDG4e5RXfOxHfIvPJvZh8SddosMIU1/LmhtKxt5EWQ4JvbIbfp30 cBzrDjVK2lf6jTep+7UW0gBcI9sSsXYKarkt/shOp4PYzKlY1qDymESdHaMr6++h Reqs7OnQIelAMBBWh2U04RpU+xMUE2/jsjU5GwpouQRI+rxkWAVbQtzhmMTn6EJu 30c7lvyXwTeiN/vjRiAGP+5wlwGHCrra4nyO41Us/iC3jmILaQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGkTZOf9hSA4r/1WEsRT4BJxFZYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzU4MjhhZTEtYzkwNi0z OGRkLTgxNWEtNzFhMDUxMjFmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJp+gAwQC JuxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABWB/Jhr8I5K6rrnXLSsCwuK9qj0pVa835OsvGK7YPvM6z7S osqV4TnLMU1F7Enz7JC9uh306kYArbVP8SaNtXR/QyJczUaOVJVpaJlUC/rbHZho JB4UWlmC9HVaOV+sAdKEhcL/Dj2EMZARW5rwdlA0XdM0myHw2xlbkTwxjqRl9niz 4+1QNZO0bnKYXeW3Vd7zXdWaQf5Z8e1T2CIOmrXy6xr1M2J6M6zuDcCtuUPl8MLQ ULCa4yB6oVbJtOY01vDLB3KS7or1Pnl71gHKsEpDS0FumriHvE49tD+h6us3QPUQ KK/A7CSj4Wh0OicJ1s9BPauI2hw5beMjyQp5hXA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:50:07 2026 by rpki-client