$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5ae86e-a425-36ba-bb77-099ec100601e.roa File: 3b5ae86e-a425-36ba-bb77-099ec100601e.roa (raw, json) Hash identifier: MH2N8nz/TzGJFLdZMzz3zhVFPNUjibLvSxOvZnG71xs= Subject key identifier: AD:48:25:AD:37:A1:33:33:6A:18:1A:D7:6D:28:ED:17:B9:02:2C:D6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CF6ECC7B96C32FCCFF6ED1580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5ae86e-a425-36ba-bb77-099ec100601e.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 154112 IP address blocks: 38.242.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:c7:b9:6c:32:fc:cf:f6:ed:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=2b445217-1834-4414-a86d-d0880482b99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:b3:66:eb:6f:27:3f:d5:38:d4:08:fd:6f: ca:e7:35:59:ca:7b:d7:9c:94:bd:b0:f2:1f:d8:a5: 63:ef:2f:e9:ab:b6:b1:ea:00:39:be:ad:c9:fb:46: 64:df:61:ec:88:da:bc:f8:f4:a9:f4:ab:cc:be:e0: de:4f:99:88:18:c2:04:fb:39:ee:b3:7b:28:5a:3e: df:3d:bd:55:75:3b:27:98:4d:40:fb:98:1c:2c:10: 78:7d:86:ba:4c:d1:a4:c3:6e:5e:19:04:0f:0a:51: 88:82:e2:63:a9:22:69:e8:c3:58:61:57:26:0d:b8: f7:95:51:a3:19:87:4e:f4:18:12:83:2b:1c:b7:46: 16:18:72:93:c3:cc:94:84:5f:d3:46:16:b7:b0:c9: 7f:c3:ac:85:30:2c:4b:a2:b2:6e:56:10:4b:18:54: 5f:1e:3a:16:24:72:14:a1:70:f6:4c:f2:c4:1e:b1: 00:b0:43:38:46:fe:04:35:34:99:b9:3c:ff:46:15: 3e:c0:96:21:4c:c6:6a:e4:1e:37:f9:2a:84:f7:81: ac:59:27:42:4f:6d:c2:f4:33:86:4a:c7:0a:41:bd: f7:d7:54:da:9a:1f:da:0c:ed:db:9d:70:ee:5f:3c: a4:cc:a8:d5:46:6e:d3:a6:9c:5c:0a:64:16:9c:93: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:25:AD:37:A1:33:33:6A:18:1A:D7:6D:28:ED:17:B9:02:2C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5ae86e-a425-36ba-bb77-099ec100601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.242.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:75:1c:a3:93:be:01:72:77:7d:73:d7:c6:12:b1:25:1e:c0: 2c:fa:7d:ad:63:41:be:ec:52:4a:f2:8f:69:13:c9:95:30:8d: 89:8c:76:99:40:4c:95:29:e0:d0:4c:65:5d:b0:85:01:d1:13: 5e:92:62:67:8f:f1:7f:dd:76:c0:fc:dd:04:81:24:96:8f:94: 1d:75:f6:da:66:02:c4:0c:46:09:a2:02:02:92:23:e5:98:12: ac:66:58:0e:49:d1:9f:e7:e8:5e:c6:1a:4f:b0:ae:b8:08:70: 95:70:68:8a:0b:e7:e8:28:92:62:0a:6e:b7:67:da:b3:fe:81: 8f:6a:11:50:b5:35:18:4f:15:d1:42:39:4f:a3:59:be:27:4f: 18:19:77:93:16:c6:6c:1c:bb:74:a6:7e:0e:08:2a:d7:20:db: 9c:67:37:6f:f9:5b:bf:1b:58:c9:e7:34:d5:60:a5:47:85:0f: d2:3d:90:c8:c5:4d:64:8f:53:09:fb:be:c5:db:eb:52:fe:ff: b0:fe:9a:82:cc:25:b2:b1:92:e0:9c:3a:6f:30:16:74:e1:f2: 5c:cc:a1:55:3b:fe:fc:2e:b6:06:78:71:21:27:f0:61:43:ae: 7d:54:19:54:0b:ab:75:73:5d:3b:6f:12:53:dd:e9:8a:f3:f1: 01:0f:a5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27Me5bDL8z/btFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk MmI0NDUyMTctMTgzNC00NDE0LWE4NmQtZDA4ODA0ODJiOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulazZutvJz/VONQI/W/K5zVZynvXnJS9sPIf 2KVj7y/pq7ax6gA5vq3J+0Zk32HsiNq8+PSp9KvMvuDeT5mIGMIE+znus3soWj7f Pb1VdTsnmE1A+5gcLBB4fYa6TNGkw25eGQQPClGIguJjqSJp6MNYYVcmDbj3lVGj GYdO9BgSgysct0YWGHKTw8yUhF/TRha3sMl/w6yFMCxLorJuVhBLGFRfHjoWJHIU oXD2TPLEHrEAsEM4Rv4ENTSZuTz/RhU+wJYhTMZq5B43+SqE94GsWSdCT23C9DOG SscKQb3311Tamh/aDO3bnXDuXzykzKjVRm7TppxcCmQWnJNXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1IJa03oTMzahga120o7Re5AizWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2I1YWU4NmUtYTQyNS0z NmJhLWJiNzctMDk5ZWMxMDA2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJvIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMp1HKOTvgFyd31z18YSsSUewCz6fa1jQb7sUkryj2kTyZUwjYmMdplA TJUp4NBMZV2whQHRE16SYmeP8X/ddsD83QSBJJaPlB119tpmAsQMRgmiAgKSI+WY EqxmWA5J0Z/n6F7GGk+wrrgIcJVwaIoL5+gokmIKbrdn2rP+gY9qEVC1NRhPFdFC OU+jWb4nTxgZd5MWxmwcu3Smfg4IKtcg25xnN2/5W78bWMnnNNVgpUeFD9I9kMjF TWSPUwn7vsXb61L+/7D+moLMJbKxkuCcOm8wFnTh8lzMoVU7/vwutgZ4cSEn8GFD rn1UGVQLq3VzXTtvElPd6Yrz8QEPpR0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:43 2026 by rpki-client