$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e1788d9-e186-3848-a7d8-be83945bd8ec.roa File: 3e1788d9-e186-3848-a7d8-be83945bd8ec.roa (raw, json) Hash identifier: o7sBMNeerUmq0uvLlf2lGJnisL9k2cyF3IEQUvTjcqU= Subject key identifier: DA:7E:75:13:F6:30:8B:4F:3A:EC:D3:A4:7C:00:3B:C9:CD:0C:5F:F0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB6B708A91A3E3E51F19B6F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e1788d9-e186-3848-a7d8-be83945bd8ec.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 153952 IP address blocks: 38.57.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:08:a9:1a:3e:3e:51:f1:9b:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=ea3dcfcf-2402-4d8c-9448-8e2e1c677d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:b7:82:0d:d0:2d:af:40:be:4c:bb:c4:65: 9a:13:fe:42:f9:8f:6a:c4:a3:ac:65:8f:25:90:61: 1b:e4:e7:07:29:7c:7b:a9:db:ba:dd:20:13:7e:7c: 5e:0d:35:26:1b:f4:ea:7a:15:e2:df:52:9d:36:c9: 99:d4:9b:98:47:fe:2c:31:50:59:52:8c:0f:78:c6: 5d:28:f6:c7:16:4d:10:25:84:c6:6b:9b:6d:b1:d6: 7b:09:6d:e6:d1:23:18:a0:c2:05:78:df:3a:77:5e: b3:08:6e:82:64:4a:3b:9d:6a:e3:6d:e7:cb:01:dd: ef:8d:79:a0:b1:84:f9:e0:e7:65:6a:de:7b:3c:a0: 67:1c:24:7a:64:9d:68:b4:80:3e:64:ba:08:88:22: e8:76:1a:2e:86:3a:a1:ce:a5:47:69:d0:7c:67:3a: c7:ed:c7:ae:b6:9e:dc:d4:ea:fa:19:65:e8:c6:d1: 73:db:49:56:db:e1:e1:4a:a4:51:42:e6:fa:12:03: ae:c9:3d:7f:ee:d4:4b:f5:6d:9e:9f:63:fa:7b:cc: f7:32:6f:86:2a:f3:d0:73:53:11:b0:4c:c4:b9:4a: f1:d2:59:90:0b:8d:f7:78:af:36:ce:b3:0e:73:4d: f5:02:ac:ec:74:8c:45:30:7e:76:21:36:8a:3e:20: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7E:75:13:F6:30:8B:4F:3A:EC:D3:A4:7C:00:3B:C9:CD:0C:5F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e1788d9-e186-3848-a7d8-be83945bd8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:54:55:73:9f:db:76:bf:e9:b8:90:3d:a9:0b:aa:dc:18:9e: fa:c1:fa:38:f0:40:a5:d4:b3:5c:e9:f6:fe:40:b4:cb:3d:a0: b2:65:c9:c2:db:99:7e:da:c2:f3:d1:13:da:bf:56:c5:51:a7: 49:80:eb:d4:d0:be:1a:29:a7:40:35:bb:2c:a3:cc:37:d1:17: 00:6b:99:95:5a:59:2d:2a:bc:ce:3a:89:04:b8:f4:96:e5:25: 94:f2:f3:c9:19:7b:2f:b9:73:08:ff:4e:d5:ef:a1:ff:d3:ec: 96:a5:c1:d0:27:6b:51:cb:55:e2:f1:89:d1:79:e0:8a:87:a1: a2:9c:31:b0:53:42:ec:aa:f1:51:59:f6:35:f0:f4:2f:97:28: b2:c0:dc:c7:71:3b:79:d3:7e:f8:d7:3a:c0:23:e1:01:c0:6f: a4:30:15:13:c2:25:64:81:24:03:94:66:95:7e:cd:24:7d:68: e8:5b:9c:0a:d5:c5:06:78:fe:0d:37:a0:ea:20:e2:3c:e6:f6: 91:4b:32:f1:9f:8c:f1:5f:f2:30:9c:55:74:ff:99:22:9b:cb: 73:10:db:53:cb:77:ea:72:5f:a6:7c:7f:b5:4b:f6:be:5e:77: d6:ac:0d:23:f4:bc:f1:60:f5:c3:c7:3d:0a:ad:cc:2c:eb:97: dc:1e:17:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2twipGj4+UfGbbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZWEzZGNmY2YtMjQwMi00ZDhjLTk0NDgtOGUyZTFjNjc3ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPi3gg3QLa9Avky7xGWaE/5C+Y9qxKOsZY8l kGEb5OcHKXx7qdu63SATfnxeDTUmG/TqehXi31KdNsmZ1JuYR/4sMVBZUowPeMZd KPbHFk0QJYTGa5ttsdZ7CW3m0SMYoMIFeN86d16zCG6CZEo7nWrjbefLAd3vjXmg sYT54Odlat57PKBnHCR6ZJ1otIA+ZLoIiCLodhouhjqhzqVHadB8ZzrH7ceutp7c 1Or6GWXoxtFz20lW2+HhSqRRQub6EgOuyT1/7tRL9W2en2P6e8z3Mm+GKvPQc1MR sEzEuUrx0lmQC433eK82zrMOc031AqzsdIxFMH52ITaKPiD0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp+dRP2MItPOuzTpHwAO8nNDF/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2UxNzg4ZDktZTE4Ni0z ODQ4LWE3ZDgtYmU4Mzk0NWJkOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJjkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5UVXOf23a/6biQPakLqtwYnvrB+jjwQKXUs1zp9v5AtMs9oLJlycLb mX7awvPRE9q/VsVRp0mA69TQvhopp0A1uyyjzDfRFwBrmZVaWS0qvM46iQS49Jbl JZTy88kZey+5cwj/TtXvof/T7JalwdAna1HLVeLxidF54IqHoaKcMbBTQuyq8VFZ 9jXw9C+XKLLA3MdxO3nTfvjXOsAj4QHAb6QwFRPCJWSBJAOUZpV+zSR9aOhbnArV xQZ4/g03oOog4jzm9pFLMvGfjPFf8jCcVXT/mSKby3MQ21PLd+pyX6Z8f7VL9r5e d9asDSP0vPFg9cPHPQqtzCzrl9weF60= -----END CERTIFICATE-----Generated at Sun Mar 1 18:34:38 2026 by rpki-client