$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fe2a091-8ac4-30c9-a805-9308b96d8208.roa File: 8fe2a091-8ac4-30c9-a805-9308b96d8208.roa (raw, json) Hash identifier: p1/H5sP8GwGlmHkCcIcDHQ7uhW2VX29QAf7MeSYgHeE= Subject key identifier: 50:54:CD:84:20:28:38:07:7A:32:80:57:99:3F:18:0A:04:47:AF:07 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB2E6F1B99A147F7D0502B3E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fe2a091-8ac4-30c9-a805-9308b96d8208.roa Signing time: Fri 30 Jan 2026 17:13:51 +0000 ROA not before: Fri 30 Jan 2026 17:13:51 +0000 ROA not after: Thu 30 Apr 2026 16:13:51 +0000 asID: 273295 IP address blocks: 38.236.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:e6:f1:b9:9a:14:7f:7d:05:02:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 30 17:13:51 2026 GMT Not After : Apr 30 16:13:51 2026 GMT Subject: CN=61d7ce56-c153-4f54-96a6-4547bf8fb4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:57:dc:0f:f9:f8:e4:cc:d5:99:a2:82:21: ed:44:90:3a:6e:31:98:58:68:1a:c8:6c:93:0b:23: 34:43:95:07:e6:53:0b:56:35:93:0b:46:49:e2:61: 8b:1f:8c:a4:5c:b7:75:af:e0:62:67:03:f6:72:4e: f1:4a:66:65:73:a7:19:1a:97:a6:2a:c9:d9:23:28: 01:9e:4c:e2:6d:73:4b:14:df:64:aa:5c:6f:cf:0a: 0d:9f:a3:ba:21:81:49:3d:56:a6:64:1e:b3:24:7b: 8d:e1:f5:08:4e:e8:66:ee:6c:17:86:ca:d5:8d:dc: c3:80:f2:ca:d8:09:ce:c8:48:cd:e2:a6:e9:86:4e: ad:e9:32:67:06:45:08:6b:00:09:26:43:0e:87:e9: a1:b8:f9:a8:9a:ac:60:94:7c:3b:97:86:f7:cf:67: 2c:91:d1:23:3b:eb:fa:71:73:dd:fa:86:84:73:0b: 51:98:7d:99:62:1b:3b:74:35:bd:2f:21:6c:2b:23: 9b:56:97:22:31:ef:ce:1c:1c:87:72:9d:50:20:da: 79:e9:eb:4a:e7:a5:87:46:64:f5:4f:44:e5:ad:90: a5:e8:a1:5d:65:9c:8d:a1:a1:fc:22:4f:c2:44:43: 18:f2:d0:7e:59:e8:a0:d1:71:e2:fb:7b:d8:fc:e8: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:CD:84:20:28:38:07:7A:32:80:57:99:3F:18:0A:04:47:AF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fe2a091-8ac4-30c9-a805-9308b96d8208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9e:1b:05:d4:b5:63:50:f0:25:61:e5:6e:02:6d:4c:93:0e: fe:12:76:b1:48:51:98:32:17:e8:c1:dc:60:72:2c:fe:98:cc: 5b:b6:ca:65:38:0c:7d:5a:2a:6d:81:b2:18:06:ac:24:53:21: 6d:ae:a5:31:3c:8d:69:cd:fd:1d:1d:f0:b3:f1:d9:b1:0f:19: 63:19:10:ab:a5:87:c9:c0:5a:5a:26:17:25:df:e8:3b:dc:25: 38:84:e4:c6:08:01:11:6f:9c:b6:db:54:30:0a:35:a9:75:e9: ea:9d:f6:64:31:f0:d3:62:20:9a:18:a7:a4:18:b1:05:26:cf: 7e:b3:b8:81:f2:f5:34:df:77:71:e6:57:75:53:cd:3d:f1:59: 77:a2:5e:f0:92:95:bf:10:84:5c:ba:cd:74:cc:a0:ad:49:e3: 0b:74:01:e7:a7:64:65:26:f3:6a:ac:03:fe:03:91:38:91:2b: 6a:25:2b:70:d6:58:a7:fe:a5:3f:8c:b5:d2:cd:0c:cd:40:cc: e8:e6:d8:ab:72:65:83:fa:20:68:4d:e0:9b:12:3f:ac:1b:da: ae:be:27:b2:14:a3:32:44:73:5e:68:bb:e5:94:2e:b8:2b:d8: cd:fb:02:fd:b9:ee:2c:2a:0a:88:e5:3d:5b:07:a3:3c:d9:44: 45:ee:d3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyy5vG5mhR/fQUCs+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEzMDE3MTM1MVoXDTI2MDQzMDE2MTM1MVowLzEtMCsGA1UEAxMk NjFkN2NlNTYtYzE1My00ZjU0LTk2YTYtNDU0N2JmOGZiNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskFX3A/5+OTM1ZmigiHtRJA6bjGYWGgayGyT CyM0Q5UH5lMLVjWTC0ZJ4mGLH4ykXLd1r+BiZwP2ck7xSmZlc6cZGpemKsnZIygB nkzibXNLFN9kqlxvzwoNn6O6IYFJPVamZB6zJHuN4fUITuhm7mwXhsrVjdzDgPLK 2AnOyEjN4qbphk6t6TJnBkUIawAJJkMOh+mhuPmomqxglHw7l4b3z2cskdEjO+v6 cXPd+oaEcwtRmH2ZYhs7dDW9LyFsKyObVpciMe/OHByHcp1QINp56etK56WHRmT1 T0TlrZCl6KFdZZyNoaH8Ik/CREMY8tB+Weig0XHi+3vY/Oi0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBUzYQgKDgHejKAV5k/GAoER68HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGZlMmEwOTEtOGFjNC0z MGM5LWE4MDUtOTMwOGI5NmQ4MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2eGwXUtWNQ8CVh5W4CbUyTDv4SdrFIUZgyF+jB3GByLP6YzFu2ymU4 DH1aKm2BshgGrCRTIW2upTE8jWnN/R0d8LPx2bEPGWMZEKulh8nAWlomFyXf6Dvc JTiE5MYIARFvnLbbVDAKNal16eqd9mQx8NNiIJoYp6QYsQUmz36zuIHy9TTfd3Hm V3VTzT3xWXeiXvCSlb8QhFy6zXTMoK1J4wt0AeenZGUm82qsA/4DkTiRK2olK3DW WKf+pT+MtdLNDM1AzOjm2KtyZYP6IGhN4JsSP6wb2q6+J7IUozJEc15ou+WULrgr 2M37Av257iwqCojlPVsHozzZREXu00M= -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:59 2026 by rpki-client