$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa File: 35828ae1-c906-38dd-815a-71a05121f2f6.roa (raw, json) Hash identifier: Xb9F/1FrfdYrytiMRz1aHlqL+M0Cvs+La/U8DbZfgug= Subject key identifier: 2E:91:01:8A:50:37:C4:05:8E:27:C2:CF:D1:98:73:FF:B5:3A:E1:D1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CBE48949FB4978DB615418200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa Signing time: Tue 03 Feb 2026 19:03:41 +0000 ROA not before: Tue 03 Feb 2026 19:03:41 +0000 ROA not after: Mon 04 May 2026 18:03:41 +0000 asID: 265634 IP address blocks: 38.159.160.0/22 maxlen: 24 38.236.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:be:48:94:9f:b4:97:8d:b6:15:41:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 3 19:03:41 2026 GMT Not After : May 4 18:03:41 2026 GMT Subject: CN=e05cb2e4-d79c-4dd1-ad74-249b8a2a542d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:92:2f:e3:8c:37:0f:3f:f6:0e:d5:9e:a7:16: c3:be:a7:a8:0b:e5:f1:e4:eb:d9:8b:1d:46:4b:69: 89:23:68:15:6b:b1:28:de:a9:38:5e:74:ad:73:2b: 42:0d:91:54:8e:de:95:3c:67:d8:b3:24:ae:54:c4: de:bc:46:fe:82:51:7a:93:e6:6b:65:fe:58:6d:bd: fc:4e:89:bb:50:58:df:9b:0c:67:fb:48:b5:39:3f: db:3d:a2:3f:e6:74:97:20:5f:d1:a2:f1:15:37:67: 1f:ff:09:e5:74:8e:12:08:6e:d0:7b:d6:37:f8:89: 65:d5:45:ec:1a:5a:19:91:94:1b:a0:36:fa:7c:f9: d7:67:9e:c0:27:32:26:9a:12:82:aa:43:94:21:11: 9a:3a:08:03:86:b7:28:cf:cf:c0:05:58:6f:0e:36: 3a:4c:be:4f:97:cf:f9:1d:40:e2:1d:f8:4f:85:01: 96:39:d9:f9:70:75:ea:51:9d:f3:ea:8a:e3:eb:f5: d4:ad:1b:37:5c:07:62:b8:a5:a4:a0:fa:66:14:38: 34:85:ca:77:cf:f7:e9:d7:36:04:c6:c8:3c:21:27: 0d:bd:a3:04:7d:00:58:d3:d1:5c:4a:01:c5:29:ae: e6:bb:e2:f6:1d:11:92:cf:ae:1d:88:b4:fe:37:4a: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:91:01:8A:50:37:C4:05:8E:27:C2:CF:D1:98:73:FF:B5:3A:E1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35828ae1-c906-38dd-815a-71a05121f2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.160.0/22 38.236.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:17:83:19:5d:95:cd:dc:a6:83:d3:fc:0c:c2:b0:b9:d0:86: c9:f7:db:74:1b:18:59:52:6d:2d:3a:09:ab:7f:3c:bd:7e:5b: 61:06:18:4d:5b:b5:79:96:41:a9:e1:05:d4:dd:4c:2c:1d:e1: 88:60:a5:c9:79:23:bc:e5:1b:8e:1e:d8:38:c6:8f:5e:73:4e: 66:22:34:2f:d0:08:d1:ad:79:b2:a6:5e:e0:2d:8c:bd:df:48: cf:63:90:4b:de:8f:8b:81:5c:d5:31:01:c2:08:92:ff:84:41: 44:7c:18:99:58:db:05:9a:53:14:c7:57:13:dc:ed:d9:22:bf: a6:91:8f:6f:0f:64:c6:eb:6f:50:cb:ae:c7:e6:74:e3:1a:81: 6f:ea:8e:5b:08:53:1e:e4:d7:e3:10:ec:5f:28:9b:f5:b3:26: 6f:a1:70:1b:94:49:6d:19:95:2d:3a:04:da:6c:60:53:37:97: b8:58:65:4e:7e:bb:22:d0:0a:55:54:47:7d:c7:1b:9e:71:41: 45:23:76:2c:50:5f:fc:8f:29:3a:4b:a8:1f:7f:19:25:17:10: 53:be:ac:3c:7c:3f:3c:43:31:46:48:fc:0f:4c:36:b5:04:17: 3b:2d:f8:6f:7f:16:9a:71:70:8e:0c:49:a9:51:d5:72:a2:27: 7a:c2:af:d5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEy+SJSftJeNthVBggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIwMzE5MDM0MVoXDTI2MDUwNDE4MDM0MVowLzEtMCsGA1UEAxMk ZTA1Y2IyZTQtZDc5Yy00ZGQxLWFkNzQtMjQ5YjhhMmE1NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZIv44w3Dz/2DtWepxbDvqeoC+Xx5OvZix1G S2mJI2gVa7Eo3qk4XnStcytCDZFUjt6VPGfYsySuVMTevEb+glF6k+ZrZf5Ybb38 Tom7UFjfmwxn+0i1OT/bPaI/5nSXIF/RovEVN2cf/wnldI4SCG7Qe9Y3+Ill1UXs GloZkZQboDb6fPnXZ57AJzImmhKCqkOUIRGaOggDhrcoz8/ABVhvDjY6TL5Pl8/5 HUDiHfhPhQGWOdn5cHXqUZ3z6orj6/XUrRs3XAdiuKWkoPpmFDg0hcp3z/fp1zYE xsg8IScNvaMEfQBY09FcSgHFKa7mu+L2HRGSz64diLT+N0rTjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC6RAYpQN8QFjifCz9GYc/+1OuHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzU4MjhhZTEtYzkwNi0z OGRkLTgxNWEtNzFhMDUxMjFmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJp+gAwQC JuxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHsXgxldlc3cpoPT/AzCsLnQhsn323QbGFlSbS06Cat/PL1+ W2EGGE1btXmWQanhBdTdTCwd4Yhgpcl5I7zlG44e2DjGj15zTmYiNC/QCNGtebKm XuAtjL3fSM9jkEvej4uBXNUxAcIIkv+EQUR8GJlY2wWaUxTHVxPc7dkiv6aRj28P ZMbrb1DLrsfmdOMagW/qjlsIUx7k1+MQ7F8om/WzJm+hcBuUSW0ZlS06BNpsYFM3 l7hYZU5+uyLQClVUR33HG55xQUUjdixQX/yPKTpLqB9/GSUXEFO+rDx8PzxDMUZI /A9MNrUEFzst+G9/FppxcI4MSalR1XKiJ3rCr9U= -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:15 2026 by rpki-client