$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/597fbc22-e8b9-38b0-a702-2ab5a09f987e.roa File: 597fbc22-e8b9-38b0-a702-2ab5a09f987e.roa (raw, json) Hash identifier: DRV47tdWCSb7caqqPMKw0rT90kB1DY2EK4Yz2yv09B4= Subject key identifier: A1:05:B2:86:8B:FD:2D:FB:50:68:5F:6E:FA:0D:21:45:00:D9:09:CA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D02178083BC5943D8F2D6A840 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/597fbc22-e8b9-38b0-a702-2ab5a09f987e.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 34666 IP address blocks: 38.188.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:80:83:bc:59:43:d8:f2:d6:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=91fc8d2e-3eae-48dd-9551-6e45d59432e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:de:d8:6d:88:50:9a:ed:b1:81:0d:97:e4:33: 14:ee:88:d6:1b:da:54:d3:d7:10:91:49:23:e2:06: 7c:2f:c1:d7:ce:bf:5d:37:eb:fb:81:4d:76:cf:74: d1:fc:fa:27:94:55:19:55:63:41:79:5c:03:be:e5: 83:63:9d:f8:dd:67:0b:5d:a0:49:ff:87:17:c8:53: d2:1c:d7:2c:42:00:ab:2e:86:b3:97:8b:0c:9e:0b: 7d:97:39:7e:90:ce:4f:92:bc:f7:a7:7a:4f:c9:32: be:54:1e:b6:be:65:30:d2:70:b0:c9:b8:ba:2a:e9: bf:84:66:7b:26:92:47:ef:06:5f:32:44:42:cd:78: 83:10:02:05:ed:2e:4d:23:d7:8e:db:5e:3c:18:eb: 06:a1:5a:ac:96:16:50:75:6e:94:f5:ec:18:b6:4d: 04:74:43:4b:7f:f2:ea:76:57:30:a2:d3:a4:73:6b: d4:bc:25:af:ac:c4:fb:20:eb:fd:ee:a0:09:f2:19: c9:61:b6:e4:53:6a:4f:89:e6:da:c1:c7:92:2f:84: 13:5b:8f:2a:8e:1c:c1:a5:4d:8d:10:65:28:6a:c0: 6a:2f:78:d1:87:a3:6d:88:f8:44:2d:74:8f:52:a0: 87:f0:d1:4c:6b:7e:98:c0:dc:f5:eb:f8:1e:bc:eb: b9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:05:B2:86:8B:FD:2D:FB:50:68:5F:6E:FA:0D:21:45:00:D9:09:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/597fbc22-e8b9-38b0-a702-2ab5a09f987e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.188.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:34:4c:a4:88:90:1d:a1:e8:1f:f0:0c:f0:e6:4a:f2:94:7f: 94:84:2b:1d:e3:a1:9a:52:ad:59:20:d0:ec:65:0d:7f:4d:3b: 0a:62:b3:dd:0b:5e:65:10:e0:b1:65:84:69:77:11:30:7f:6c: 40:e7:7a:7f:45:66:86:41:40:8f:a2:36:2e:c8:19:b5:99:3c: 2a:8f:58:84:da:9d:59:29:9c:c8:cc:24:22:bd:89:7e:33:d4: 09:c1:3f:82:14:98:30:72:55:d8:6b:fe:df:18:9b:f1:4d:66: 3b:a4:49:30:32:2f:3e:13:c4:f5:57:85:42:30:96:c1:30:90: 10:0e:98:f1:62:f4:cf:78:6a:06:6c:b8:4c:c6:7e:72:a5:13: 57:5e:b5:43:cc:99:fe:11:a6:1b:f2:c1:df:b7:4a:be:64:07: e8:32:1a:6b:8b:17:f9:24:ca:02:0a:7e:3b:90:06:e9:bc:b6: bb:4d:82:a8:b0:3a:8b:91:e4:e1:a7:96:06:c6:3e:d9:8a:8a: c4:6e:cc:31:9b:de:50:d9:d3:07:99:5e:c3:1d:94:a5:80:32: 52:0f:ab:ca:e9:e4:ef:2f:62:25:27:99:76:cf:90:49:df:43: 36:ab:59:6b:28:90:b9:5b:33:51:8f:7a:d3:c6:0b:4d:cb:26: 3b:a9:4d:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4CDvFlD2PLWqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTFmYzhkMmUtM2VhZS00OGRkLTk1NTEtNmU0NWQ1OTQzMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt7YbYhQmu2xgQ2X5DMU7ojWG9pU09cQkUkj 4gZ8L8HXzr9dN+v7gU12z3TR/PonlFUZVWNBeVwDvuWDY5343WcLXaBJ/4cXyFPS HNcsQgCrLoazl4sMngt9lzl+kM5Pkrz3p3pPyTK+VB62vmUw0nCwybi6Kum/hGZ7 JpJH7wZfMkRCzXiDEAIF7S5NI9eO2148GOsGoVqslhZQdW6U9ewYtk0EdENLf/Lq dlcwotOkc2vUvCWvrMT7IOv97qAJ8hnJYbbkU2pPiebawceSL4QTW48qjhzBpU2N EGUoasBqL3jRh6NtiPhELXSPUqCH8NFMa36YwNz16/gevOu5FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEFsoaL/S37UGhfbvoNIUUA2QnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTk3ZmJjMjItZThiOS0z OGIwLWE3MDItMmFiNWEwOWY5ODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJrw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg0TKSIkB2h6B/wDPDmSvKUf5SEKx3joZpSrVkg0OxlDX9NOwpis90L XmUQ4LFlhGl3ETB/bEDnen9FZoZBQI+iNi7IGbWZPCqPWITanVkpnMjMJCK9iX4z 1AnBP4IUmDByVdhr/t8Ym/FNZjukSTAyLz4TxPVXhUIwlsEwkBAOmPFi9M94agZs uEzGfnKlE1detUPMmf4Rphvywd+3Sr5kB+gyGmuLF/kkygIKfjuQBum8trtNgqiw OouR5OGnlgbGPtmKisRuzDGb3lDZ0weZXsMdlKWAMlIPq8rp5O8vYiUnmXbPkEnf QzarWWsokLlbM1GPetPGC03LJjupTZ0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:35:38 2026 by rpki-client