$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa File: 9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa (raw, json) Hash identifier: 3YwEkX9pAN1D7SP9RBWXyJp4cc7Cljtr3sol8K26yHg= Subject key identifier: B7:2C:11:1B:C5:16:19:E3:90:78:00:32:04:91:9F:D2:0C:C1:98:E8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CD8373C3FD67E470D8ACE27C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa Signing time: Fri 13 Feb 2026 02:00:31 +0000 ROA not before: Fri 13 Feb 2026 02:00:31 +0000 ROA not after: Thu 14 May 2026 01:00:31 +0000 asID: 28213 IP address blocks: 38.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d8:37:3c:3f:d6:7e:47:0d:8a:ce:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 13 02:00:31 2026 GMT Not After : May 14 01:00:31 2026 GMT Subject: CN=371ec4f3-857c-4f44-ae73-1618467de8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:73:b6:9e:05:23:86:4e:63:66:e6:c0:bc: 1f:6b:78:ea:9e:32:12:32:92:b4:0d:2b:36:2c:55: d5:95:a3:65:66:8d:30:65:81:fc:45:e9:40:15:58: be:a0:c8:2a:67:28:77:1a:50:f9:02:07:0c:dc:3a: 76:6f:50:00:2c:00:f5:98:6f:65:e2:0c:55:0e:e6: 29:de:a8:62:c8:cc:23:f0:e5:26:16:e7:62:a8:d5: 9f:10:f4:54:97:5d:b9:b1:3d:b4:22:40:07:7e:55: de:1a:1c:ea:dd:fb:18:9e:6e:01:17:5f:00:4f:14: d8:fd:e1:75:ed:f4:51:18:81:6f:f0:96:9e:a2:d3: 85:f1:8e:c9:b3:39:7d:10:ed:f1:62:d2:10:31:80: 33:34:7d:cd:50:ff:86:92:2f:d2:f7:9a:10:21:74: fc:86:e2:e8:46:57:74:6e:83:60:8b:e3:dd:64:61: c4:7a:1b:79:e4:91:c2:51:e3:92:9d:e6:41:5d:41: 5f:51:4c:21:ea:dd:ae:5c:52:56:fa:d0:62:12:ee: 3b:63:65:60:df:d5:a9:93:bd:da:83:0c:34:20:2b: ec:3b:14:70:a9:91:bb:81:2a:5b:97:15:75:3f:6e: f8:10:39:32:58:11:d7:3c:c3:7a:fc:6d:0d:25:bc: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:11:1B:C5:16:19:E3:90:78:00:32:04:91:9F:D2:0C:C1:98:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f5a0ed9-ff94-3009-b5c3-4e1ffb1a33af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:55:0a:0f:b8:f7:4e:25:ed:d8:9a:68:c6:12:fe:73:46:83: 0e:83:63:d2:1c:16:22:28:89:23:7d:0a:42:c0:de:66:36:c4: 2f:0b:a1:78:51:73:94:0a:ac:53:c1:b3:3d:b4:2d:b2:d7:0e: 6b:bd:c6:d4:a0:ee:22:a3:34:6f:a3:47:f1:89:42:b3:60:68: b2:36:c7:de:71:6c:52:97:a4:6d:4b:2b:28:00:f7:da:cf:91: a7:a6:23:39:50:21:a3:0a:d7:7e:c2:d4:40:9a:e1:34:2b:a0: 7c:7a:e0:f0:e0:bf:95:9e:7c:70:bc:5e:27:3c:6e:90:6c:f2: 2a:fe:50:f1:cc:6d:06:c7:80:d2:f4:78:bc:96:1a:19:5b:5e: 09:e9:a4:c9:20:8e:b9:40:b1:cd:23:26:cf:1f:1f:7f:0d:ae: 73:85:b1:c4:ad:e9:96:30:8c:69:14:03:49:e8:62:fd:5c:6c: 40:94:02:b6:03:c7:a7:28:87:0f:f3:a9:92:42:65:4a:ae:1a: 67:1c:95:e0:93:46:1e:6f:b0:dd:8c:c5:76:5e:6d:a4:4a:8b: 31:fc:14:4d:ed:a6:df:9c:4e:5b:f3:11:86:b6:8b:8a:4a:94: 37:e3:65:39:66:3e:8c:b6:71:7a:ad:e5:15:8a:2c:65:74:f2: af:cf:3d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzYNzw/1n5HDYrOJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIxMzAyMDAzMVoXDTI2MDUxNDAxMDAzMVowLzEtMCsGA1UEAxMk MzcxZWM0ZjMtODU3Yy00ZjQ0LWFlNzMtMTYxODQ2N2RlOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVJztp4FI4ZOY2bmwLwfa3jqnjISMpK0DSs2 LFXVlaNlZo0wZYH8RelAFVi+oMgqZyh3GlD5AgcM3Dp2b1AALAD1mG9l4gxVDuYp 3qhiyMwj8OUmFudiqNWfEPRUl125sT20IkAHflXeGhzq3fsYnm4BF18ATxTY/eF1 7fRRGIFv8JaeotOF8Y7Jszl9EO3xYtIQMYAzNH3NUP+Gki/S95oQIXT8huLoRld0 boNgi+PdZGHEeht55JHCUeOSneZBXUFfUUwh6t2uXFJW+tBiEu47Y2Vg39Wpk73a gww0ICvsOxRwqZG7gSpblxV1P274EDkyWBHXPMN6/G0NJbwj7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcsERvFFhnjkHgAMgSRn9IMwZjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWY1YTBlZDktZmY5NC0z MDA5LWI1YzMtNGUxZmZiMWEzM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFVCg+4904l7diaaMYS/nNGgw6DY9IcFiIoiSN9CkLA3mY2xC8LoXhR c5QKrFPBsz20LbLXDmu9xtSg7iKjNG+jR/GJQrNgaLI2x95xbFKXpG1LKygA99rP kaemIzlQIaMK137C1ECa4TQroHx64PDgv5WefHC8Xic8bpBs8ir+UPHMbQbHgNL0 eLyWGhlbXgnppMkgjrlAsc0jJs8fH38NrnOFscSt6ZYwjGkUA0noYv1cbECUArYD x6cohw/zqZJCZUquGmccleCTRh5vsN2MxXZebaRKizH8FE3tpt+cTlvzEYa2i4pK lDfjZTlmPoy2cXqt5RWKLGV08q/PPSE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:36:00 2026 by rpki-client