$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d41218b-2d85-351f-9226-3b156c8368c0.roa File: 6d41218b-2d85-351f-9226-3b156c8368c0.roa (raw, json) Hash identifier: wRnPQmnGulxVimMVGImfV7Z4sObZYbCiFE2iayBez1c= Subject key identifier: 35:D6:51:ED:4E:3D:2F:5A:DD:53:22:B2:7B:18:AB:24:BF:21:5E:C7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CE7CF5B834DE40378C2102040 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d41218b-2d85-351f-9226-3b156c8368c0.roa Signing time: Tue 20 Jan 2026 20:38:27 +0000 ROA not before: Tue 20 Jan 2026 20:38:27 +0000 ROA not after: Mon 20 Apr 2026 19:38:27 +0000 asID: 209466 IP address blocks: 38.94.33.0/24 maxlen: 24 38.94.60.0/22 maxlen: 22 38.236.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e7:cf:5b:83:4d:e4:03:78:c2:10:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 20 20:38:27 2026 GMT Not After : Apr 20 19:38:27 2026 GMT Subject: CN=56b2e2ae-cc16-4579-a42f-a7a7b701beb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:61:e2:ec:c8:ee:22:c3:b1:20:a0:f2:6d: d1:f3:a7:b3:3f:a0:37:92:36:bd:a4:99:8b:27:0e: 72:e5:f1:5d:1a:cd:8f:6c:f1:56:7c:18:3a:b5:b8: c8:7c:67:e9:36:08:6b:1c:28:5e:52:27:69:68:1a: 1a:75:35:0e:ca:57:6b:62:b8:4b:37:cd:2f:f3:3e: 0d:d1:c5:f5:f9:ea:5a:2e:f4:e3:28:b5:f9:b1:b5: d0:96:62:0b:90:8d:b4:87:90:bb:c3:37:4e:76:e7: 6c:99:91:15:42:5b:be:40:be:0e:0b:07:ee:55:6f: 05:2c:7f:98:36:35:23:3c:f7:c3:bf:b7:ae:a3:2a: 93:84:fe:a8:62:7f:89:48:8a:15:46:77:a0:75:2a: 3c:e2:0c:ab:27:01:89:e5:6c:ac:07:25:1a:11:68: 59:9b:09:2a:08:4e:69:d4:11:8e:d6:e4:6c:14:44: 2f:a5:c0:e4:bb:de:29:28:b1:38:b5:b2:1c:76:38: b3:2e:ff:0d:72:d3:9c:b6:f3:10:76:01:50:97:57: 9d:1b:da:2d:9d:b1:a2:e7:83:38:8c:73:89:44:1e: 01:3b:b9:6f:ea:49:32:84:bb:bd:93:d5:9a:57:aa: 9c:8c:27:ba:c3:2c:e0:65:7f:70:b0:a7:40:bf:b3: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D6:51:ED:4E:3D:2F:5A:DD:53:22:B2:7B:18:AB:24:BF:21:5E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d41218b-2d85-351f-9226-3b156c8368c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.33.0/24 38.94.60.0/22 38.236.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b2:cd:a7:c8:31:86:dc:3c:bd:ab:e7:58:57:92:8b:4d:98: d0:b6:d8:75:7d:2a:ae:0c:54:41:78:0c:01:e5:04:fd:e1:b0: de:55:3b:84:26:18:01:21:68:2d:7c:eb:f8:5e:8a:17:71:3c: a5:2a:9f:6a:e1:cb:88:db:59:ee:14:18:f8:8f:c8:37:9b:0d: a5:7b:62:3b:73:0f:a6:30:a7:60:d7:f4:f1:ad:73:39:72:65: 6b:7c:b0:17:86:0a:f3:e6:b1:c6:08:2f:ad:8c:a6:5d:d6:5f: 16:0d:df:36:aa:00:89:f9:92:4a:a9:3f:dd:7a:d8:73:09:f7: 96:f3:1e:99:be:4a:5d:9b:f6:8a:72:32:8c:76:9b:16:b1:dc: 74:9f:ed:02:e7:3c:b4:57:2d:f8:c5:b6:03:fb:ef:07:ec:75: 75:70:2d:96:0f:37:ef:48:b3:bf:42:3b:69:73:0a:b8:ce:94: 1d:6f:27:53:1f:d1:c7:87:8c:85:4b:22:db:ed:6d:d2:ab:a3: a6:65:63:c0:ac:b4:78:d9:4e:28:d7:e1:56:2a:90:fc:d9:9d: fc:e6:47:1e:01:6b:27:8e:8a:bb:09:15:7e:7d:3c:d8:d7:9e: d5:ab:56:3a:5f:97:01:af:57:44:27:ec:30:f0:47:85:3c:4a: db:03:cc:2f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEznz1uDTeQDeMIQIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEyMDIwMzgyN1oXDTI2MDQyMDE5MzgyN1owLzEtMCsGA1UEAxMk NTZiMmUyYWUtY2MxNi00NTc5LWE0MmYtYTdhN2I3MDFiZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruhh4uzI7iLDsSCg8m3R86ezP6A3kja9pJmL Jw5y5fFdGs2PbPFWfBg6tbjIfGfpNghrHCheUidpaBoadTUOyldrYrhLN80v8z4N 0cX1+epaLvTjKLX5sbXQlmILkI20h5C7wzdOdudsmZEVQlu+QL4OCwfuVW8FLH+Y NjUjPPfDv7euoyqThP6oYn+JSIoVRnegdSo84gyrJwGJ5WysByUaEWhZmwkqCE5p 1BGO1uRsFEQvpcDku94pKLE4tbIcdjizLv8NctOctvMQdgFQl1edG9otnbGi54M4 jHOJRB4BO7lv6kkyhLu9k9WaV6qcjCe6wyzgZX9wsKdAv7PwrwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDXWUe1OPS9a3VMisnsYqyS/IV7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNmQ0MTIxOGItMmQ4NS0z NTFmLTkyMjYtM2IxNTZjODM2OGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJl4hAwQC Jl48AwQAJuxTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJSyzafIMYbcPL2r51hXkotNmNC22HV9Kq4MVEF4 DAHlBP3hsN5VO4QmGAEhaC186/heihdxPKUqn2rhy4jbWe4UGPiPyDebDaV7Yjtz D6Ywp2DX9PGtczlyZWt8sBeGCvPmscYIL62Mpl3WXxYN3zaqAIn5kkqpP9162HMJ 95bzHpm+Sl2b9opyMox2mxax3HSf7QLnPLRXLfjFtgP77wfsdXVwLZYPN+9Is79C O2lzCrjOlB1vJ1Mf0ceHjIVLItvtbdKro6ZlY8CstHjZTijX4VYqkPzZnfzmRx4B ayeOirsJFX59PNjXntWrVjpflwGvV0Qn7DDwR4U8StsDzC8= -----END CERTIFICATE-----Generated at Mon Mar 2 01:06:23 2026 by rpki-client