$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa File: 88c3b85d-80cb-3648-8429-3a6687384ef5.roa (raw, json) Hash identifier: A6e1RgI8yJr9w7EGI12St3Ah2Lvkdqve1jKW0paGL4U= Subject key identifier: 5F:1E:01:EC:07:55:50:DB:6B:EA:F8:BB:C8:3C:3C:FE:33:F9:1B:B9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CFE71CB7586C418FF6CC7FE40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa Signing time: Fri 19 Dec 2025 22:49:47 +0000 ROA not before: Fri 19 Dec 2025 22:49:47 +0000 ROA not after: Thu 19 Mar 2026 21:49:47 +0000 asID: 213971 IP address blocks: 38.67.22.0/24 maxlen: 24 38.68.44.0/24 maxlen: 24 38.68.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:71:cb:75:86:c4:18:ff:6c:c7:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 19 22:49:47 2025 GMT Not After : Mar 19 21:49:47 2026 GMT Subject: CN=7d9cb25d-0637-44ba-b3a8-b59c07e492a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9b:0d:e1:97:b2:72:13:dd:f5:a7:51:36:94: b1:2c:a1:d4:e1:90:4b:f2:7d:11:92:7d:6e:52:f5: 4a:9f:7e:7a:17:23:43:41:a3:dc:12:97:0c:86:43: 8b:79:49:55:6f:21:be:84:22:28:a0:18:26:58:5e: 6e:21:f3:34:8c:00:3b:3e:e8:c6:8f:b8:47:44:99: b1:a4:5c:f8:f0:f0:80:9c:91:e6:fa:b9:63:a2:e1: b9:00:8d:f0:94:fa:c0:b8:da:c4:d2:3e:1e:bd:52: e9:4f:9b:57:d3:e6:f6:b7:2d:2d:83:3b:ac:57:dd: 6e:16:a0:11:a2:a8:8b:71:ff:04:82:dc:8e:a5:c4: a7:0a:00:3a:b3:e4:62:f6:bb:ca:94:0d:6d:38:58: 71:89:b7:75:fc:1f:ab:87:87:5e:cd:a4:f3:6f:69: b7:1a:00:55:f5:cd:70:4a:db:9d:9b:3c:5b:4c:de: 74:71:bd:63:5e:36:8a:c8:df:b1:dd:28:17:87:92: 6a:99:67:7d:81:88:34:9c:c4:62:9f:9f:0d:ac:04: 4a:50:8a:ac:59:86:81:29:9c:f4:8b:49:ff:af:ac: 7b:2f:98:28:af:68:4b:d7:44:03:4d:5c:6c:d7:b6: 6b:3b:47:de:25:07:ef:dd:5d:63:cd:51:b0:d6:f6: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1E:01:EC:07:55:50:DB:6B:EA:F8:BB:C8:3C:3C:FE:33:F9:1B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.67.22.0/24 38.68.44.0/24 38.68.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:6a:53:bd:bc:f4:ee:8a:a5:11:32:df:2d:db:d4:47:67:2b: a6:cf:4d:9c:b3:03:7b:7a:a1:ae:a8:e0:98:c4:8e:5f:b5:b4: b8:49:be:f9:c8:1f:69:d8:0a:37:27:b4:ff:7e:20:7f:b6:ad: 76:8f:91:b3:52:0d:5f:ba:c8:c2:a8:e8:d5:6c:ad:f2:39:fc: ba:62:d8:1c:f3:aa:1c:19:ea:22:06:20:f0:93:87:17:a1:e7: 39:2a:ce:ab:8c:0a:fb:15:38:49:42:73:3a:e2:1a:dc:ae:af: 50:d3:23:cb:6d:c9:7a:72:91:93:01:21:50:72:f5:20:2a:2c: 3f:d8:d1:c8:46:5d:6c:5f:31:d9:00:30:93:00:87:17:d6:42: 4b:2c:f0:25:f0:39:78:2e:fc:45:5d:80:ba:6b:cd:eb:93:64: 78:02:39:d7:6c:c4:f8:2b:e5:c0:36:c6:6e:be:ea:3d:1d:76: ad:4b:5f:57:97:c2:77:b1:eb:e5:3d:66:72:b8:12:20:9c:b7: 88:b3:27:63:94:0d:ff:e3:ac:34:ac:43:0e:4c:1c:5f:59:17: a2:96:52:06:f6:16:bc:4e:a3:ec:e8:dc:cb:13:07:49:5f:2a: d7:a6:7c:ed:e4:97:11:ef:4c:35:c7:df:8a:1f:91:be:75:28: 4a:2b:b8:06 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEz+cct1hsQY/2zH/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxOTIyNDk0N1oXDTI2MDMxOTIxNDk0N1owLzEtMCsGA1UEAxMk N2Q5Y2IyNWQtMDYzNy00NGJhLWIzYTgtYjU5YzA3ZTQ5MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJsN4ZeychPd9adRNpSxLKHU4ZBL8n0Rkn1u UvVKn356FyNDQaPcEpcMhkOLeUlVbyG+hCIooBgmWF5uIfM0jAA7PujGj7hHRJmx pFz48PCAnJHm+rljouG5AI3wlPrAuNrE0j4evVLpT5tX0+b2ty0tgzusV91uFqAR oqiLcf8EgtyOpcSnCgA6s+Ri9rvKlA1tOFhxibd1/B+rh4dezaTzb2m3GgBV9c1w StudmzxbTN50cb1jXjaKyN+x3SgXh5JqmWd9gYg0nMRin58NrARKUIqsWYaBKZz0 i0n/r6x7L5gor2hL10QDTVxs17ZrO0feJQfv3V1jzVGw1vY44QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF8eAewHVVDba+r4u8g8PP4z+Ru5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODhjM2I4NWQtODBjYi0z NjQ4LTg0MjktM2E2Njg3Mzg0ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJkMWAwQA JkQsAwQAJkQ4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAL5qU7289O6KpREy3y3b1EdnK6bPTZyzA3t6oa6o 4JjEjl+1tLhJvvnIH2nYCjcntP9+IH+2rXaPkbNSDV+6yMKo6NVsrfI5/Lpi2Bzz qhwZ6iIGIPCThxeh5zkqzquMCvsVOElCczriGtyur1DTI8ttyXpykZMBIVBy9SAq LD/Y0chGXWxfMdkAMJMAhxfWQkss8CXwOXgu/EVdgLprzeuTZHgCOddsxPgr5cA2 xm6+6j0ddq1LX1eXwnex6+U9ZnK4EiCct4izJ2OUDf/jrDSsQw5MHF9ZF6KWUgb2 FrxOo+zo3MsTB0lfKtemfO3klxHvTDXH34ofkb51KEoruAY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:03:47 2026 by rpki-client