$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2299fe9-53be-3a5b-98a8-4bb122842f8f.roa File: a2299fe9-53be-3a5b-98a8-4bb122842f8f.roa (raw, json) Hash identifier: wQt6MfHikOFtOGxDz7I4HB4sJm//SaIxHCUOkqG8dCU= Subject key identifier: FB:27:EC:94:8C:59:93:6A:B8:3C:7A:A9:2E:13:4F:45:FE:F8:C8:C1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D00B540741B0A41A62AB1D800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2299fe9-53be-3a5b-98a8-4bb122842f8f.roa Signing time: Fri 27 Feb 2026 14:06:46 +0000 ROA not before: Fri 27 Feb 2026 14:06:46 +0000 ROA not after: Thu 28 May 2026 13:06:46 +0000 asID: 269832 IP address blocks: 38.254.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b5:40:74:1b:0a:41:a6:2a:b1:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 27 14:06:46 2026 GMT Not After : May 28 13:06:46 2026 GMT Subject: CN=846efebd-1eee-439a-b433-d4dcd84b593c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:ac:e3:1b:e2:86:8a:fe:a1:2b:91:e1:ff: 60:63:8a:f9:4d:0f:9a:4f:ab:2c:4c:9c:1d:30:74: 2c:5b:6d:d1:20:97:d7:34:4b:45:66:8a:86:b1:4e: 8a:29:35:d0:b8:93:e5:dc:ea:20:c5:95:cf:b4:2c: f7:9c:0d:55:fa:9d:ac:0d:19:36:a1:ba:64:7e:7e: 7f:f2:1a:ad:e6:7c:c8:f3:ec:6c:ec:7d:fb:ef:ee: 81:69:84:58:99:08:c4:81:09:0a:b0:2d:1a:60:b3: a5:d8:ab:5a:25:c6:ea:0c:d1:60:bb:fd:38:4c:48: 58:f9:57:05:00:d0:bc:7c:80:aa:60:3c:ef:e9:a7: 2c:9e:2b:04:5c:f8:37:8b:8a:f8:01:4b:99:c1:cc: 9c:96:11:ea:04:57:f2:49:30:5f:a9:30:d8:61:cf: de:b9:4e:22:de:7e:05:8f:84:11:cb:b2:63:91:3d: 4d:ca:79:5b:09:6b:9d:de:fa:2f:58:0f:54:01:2a: bd:46:1a:b6:65:a2:27:80:80:ab:24:7b:38:73:52: 81:4b:70:59:96:9d:50:8c:4e:ca:6c:b7:07:09:96: 17:c0:68:3b:68:f6:c5:c4:e1:8c:91:60:38:c0:8f: 93:fa:85:8b:19:26:70:a0:a2:93:74:b2:4c:d0:ad: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:27:EC:94:8C:59:93:6A:B8:3C:7A:A9:2E:13:4F:45:FE:F8:C8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a2299fe9-53be-3a5b-98a8-4bb122842f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4a:24:d6:73:f3:fb:e6:0d:6a:79:27:7d:3b:61:e2:15:e7: c6:9f:77:9a:83:c1:a2:e2:15:83:c2:d8:a9:eb:d0:2e:da:12: a1:a4:18:8e:eb:2e:da:56:fe:1a:a8:61:df:cf:a6:1b:02:3e: 6d:f9:74:04:c1:c5:98:27:c1:c8:33:49:62:e0:00:e2:24:ef: 55:a5:cf:79:80:24:41:62:09:98:80:18:e4:d2:dc:31:b2:9b: 76:34:eb:12:45:1f:22:c4:9b:fc:28:cd:cd:07:26:31:12:3f: 7a:96:5d:47:3d:28:28:0a:bf:1f:59:c6:15:f2:e0:fe:b8:a3: cc:43:d9:e3:a6:8e:f3:7d:b8:da:df:cc:19:e3:7f:99:24:e0: 47:cc:aa:d4:b9:4e:2a:03:ac:ed:33:9c:4a:05:37:c9:c7:1e: ec:7a:78:9e:14:01:d5:d3:75:7c:68:5d:b6:34:8f:a6:2f:2d: a0:d3:79:46:77:b6:e8:4c:96:ce:d6:49:e5:a4:ef:5b:08:61: 9c:7d:28:ef:4e:c6:af:4f:5a:c1:e0:47:90:e0:db:a0:a5:6e: 30:e4:ef:79:26:02:cc:62:cb:f5:35:69:64:8e:75:80:ec:00: 9c:1f:b3:25:54:71:23:c6:30:68:de:cd:6c:5d:d6:fd:99:38: d0:30:a4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AtUB0GwpBpiqx2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIyNzE0MDY0NloXDTI2MDUyODEzMDY0NlowLzEtMCsGA1UEAxMk ODQ2ZWZlYmQtMWVlZS00MzlhLWI0MzMtZDRkY2Q4NGI1OTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmGs4xvihor+oSuR4f9gY4r5TQ+aT6ssTJwd MHQsW23RIJfXNEtFZoqGsU6KKTXQuJPl3OogxZXPtCz3nA1V+p2sDRk2obpkfn5/ 8hqt5nzI8+xs7H377+6BaYRYmQjEgQkKsC0aYLOl2KtaJcbqDNFgu/04TEhY+VcF ANC8fICqYDzv6acsnisEXPg3i4r4AUuZwcyclhHqBFfySTBfqTDYYc/euU4i3n4F j4QRy7JjkT1NynlbCWud3vovWA9UASq9Rhq2ZaIngICrJHs4c1KBS3BZlp1QjE7K bLcHCZYXwGg7aPbFxOGMkWA4wI+T+oWLGSZwoKKTdLJM0K3vvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsn7JSMWZNquDx6qS4TT0X++MjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTIyOTlmZTktNTNiZS0z YTViLTk4YTgtNGJiMTIyODQyZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARKJNZz8/vmDWp5J307YeIV58afd5qDwaLiFYPC2Knr0C7aEqGkGI7r LtpW/hqoYd/PphsCPm35dATBxZgnwcgzSWLgAOIk71Wlz3mAJEFiCZiAGOTS3DGy m3Y06xJFHyLEm/wozc0HJjESP3qWXUc9KCgKvx9ZxhXy4P64o8xD2eOmjvN9uNrf zBnjf5kk4EfMqtS5TioDrO0znEoFN8nHHux6eJ4UAdXTdXxoXbY0j6YvLaDTeUZ3 tuhMls7WSeWk71sIYZx9KO9Oxq9PWsHgR5Dg26ClbjDk73kmAsxiy/U1aWSOdYDs AJwfsyVUcSPGMGjezWxd1v2ZONAwpAc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:32:44 2026 by rpki-client