$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa File: 96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa (raw, json) Hash identifier: 3WncS+f0wIrvhlwcinck6CJDlVx/hjHYZRQrWebF3hc= Subject key identifier: 60:FB:19:E0:2E:03:A1:7A:4E:86:F9:2D:0F:37:71:AE:C7:B5:D7:5D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4A8F8927C65EB3227AF5A180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 61622 IP address blocks: 38.52.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:89:27:c6:5e:b3:22:7a:f5:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=131f5886-84f7-45c4-b659-6ff7e2108153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:15:ff:ee:80:fe:3a:f7:43:fa:46:d8:76: 80:33:03:cf:4a:93:ad:05:f8:ff:5a:ba:1f:61:66: fc:d3:9c:2a:72:8e:e4:50:3e:7e:d0:00:f2:79:fa: f4:af:25:54:7d:8f:ea:45:e7:44:00:0b:8c:da:a6: c1:08:07:8a:c2:c0:a0:c1:45:99:c2:e0:74:6a:31: 4e:2a:d9:80:05:c6:87:2e:d3:16:c9:a4:66:e5:27: 3e:1f:57:15:3a:a7:86:6e:95:43:da:43:a2:0d:2b: d0:4c:41:37:24:ea:91:83:e7:52:68:08:7c:fe:a5: 22:03:c5:ca:d0:9d:43:79:3d:42:fa:d4:0d:90:c5: 6f:da:a1:f9:28:cb:3b:10:cc:48:ef:61:8b:f9:c1: 8f:8c:29:5e:8d:88:3f:c7:49:01:19:2b:bf:36:46: 34:1f:a0:ed:85:ac:d3:cc:7f:60:1d:68:2e:55:92: 2d:e1:e3:3d:12:ee:e2:6d:36:21:de:8c:53:22:6c: 17:35:9f:38:ad:b7:b5:27:4e:e8:df:01:dd:de:7f: 30:56:82:57:45:7e:b4:3e:bd:67:5b:25:06:ad:b8: c3:8f:81:05:44:d9:6e:8c:2e:e5:49:3c:10:ed:a1: c5:f9:46:4a:0a:ec:9c:48:a9:3b:4c:e4:6f:28:24: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FB:19:E0:2E:03:A1:7A:4E:86:F9:2D:0F:37:71:AE:C7:B5:D7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/96a34dd9-b65b-3d76-a965-47fa13e55eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.52.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:13:e1:70:6f:2b:62:63:15:59:8a:39:84:4e:ec:77:68:df: 04:69:8d:1b:e3:13:70:60:c5:61:db:08:38:e5:1f:34:80:b8: 6c:39:78:3a:21:5e:ad:89:9b:1c:2c:ab:e2:7a:82:3c:e7:14: 73:de:1f:25:00:82:f8:36:45:26:cd:bd:28:b7:c6:db:e3:6e: 2c:c8:64:e7:17:a8:1a:2c:64:ed:f2:93:9d:08:96:8f:45:92: 33:2f:71:a6:f4:b0:dd:5e:33:a4:3e:c3:7f:10:86:82:aa:68: 13:01:95:10:95:54:78:dc:18:0f:ae:14:3d:60:81:47:0c:80: d6:31:8c:4c:26:77:df:5b:01:69:3f:f4:eb:a1:66:3c:d4:00: f4:ae:b0:ce:b8:6b:f6:e2:8d:d4:6f:ce:f2:61:5c:18:68:27: e9:c3:62:fc:c3:94:2f:c1:f0:9f:33:50:30:f7:98:4f:c4:15: 5f:df:ad:bc:dc:ba:d7:e4:8b:b1:c1:b9:67:94:36:65:48:92: cc:a1:53:f3:ae:e4:36:8f:b7:60:07:7d:f5:65:d5:4d:e0:f4: 0a:e2:9d:5c:b9:a6:aa:c6:2d:02:50:72:23:2e:20:85:98:50: 35:f3:b4:35:8d:f0:16:db:37:97:08:99:93:71:5e:25:f0:77: 08:8d:19:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4knxl6zInr1oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MTMxZjU4ODYtODRmNy00NWM0LWI2NTktNmZmN2UyMTA4MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn94V/+6A/jr3Q/pG2HaAMwPPSpOtBfj/Wrof YWb805wqco7kUD5+0ADyefr0ryVUfY/qRedEAAuM2qbBCAeKwsCgwUWZwuB0ajFO KtmABcaHLtMWyaRm5Sc+H1cVOqeGbpVD2kOiDSvQTEE3JOqRg+dSaAh8/qUiA8XK 0J1DeT1C+tQNkMVv2qH5KMs7EMxI72GL+cGPjClejYg/x0kBGSu/NkY0H6DthazT zH9gHWguVZIt4eM9Eu7ibTYh3oxTImwXNZ84rbe1J07o3wHd3n8wVoJXRX60Pr1n WyUGrbjDj4EFRNlujC7lSTwQ7aHF+UZKCuycSKk7TORvKCR0XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD7GeAuA6F6Tob5LQ83ca7HtdddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTZhMzRkZDktYjY1Yi0z ZDc2LWE5NjUtNDdmYTEzZTU1ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjSVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAT4XBvK2JjFVmKOYRO7Hdo3wRpjRvjE3BgxWHbCDjlHzSAuGw5eDoh Xq2Jmxwsq+J6gjznFHPeHyUAgvg2RSbNvSi3xtvjbizIZOcXqBosZO3yk50Ilo9F kjMvcab0sN1eM6Q+w38QhoKqaBMBlRCVVHjcGA+uFD1ggUcMgNYxjEwmd99bAWk/ 9OuhZjzUAPSusM64a/bijdRvzvJhXBhoJ+nDYvzDlC/B8J8zUDD3mE/EFV/frbzc utfki7HBuWeUNmVIksyhU/Ou5DaPt2AHffVl1U3g9ArinVy5pqrGLQJQciMuIIWY UDXztDWN8BbbN5cImZNxXiXwdwiNGZo= -----END CERTIFICATE-----Generated at Fri Apr 17 01:30:58 2026 by rpki-client