$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a832853c-0b35-34ab-95af-2a17b741acca.roa File: a832853c-0b35-34ab-95af-2a17b741acca.roa (raw, json) Hash identifier: M8UICbstrWZROaOKrbB6hxD7L+GjNE1Dxz+DizdCdL8= Subject key identifier: AD:32:3E:24:2B:35:03:89:CC:E5:78:23:59:EA:3D:15:46:67:0A:22 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB31624A88F2429830E1375B0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a832853c-0b35-34ab-95af-2a17b741acca.roa Signing time: Fri 30 Jan 2026 18:48:57 +0000 ROA not before: Fri 30 Jan 2026 18:48:57 +0000 ROA not after: Thu 30 Apr 2026 17:48:57 +0000 asID: 273982 IP address blocks: 38.188.224.0/24 maxlen: 24 38.210.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:16:24:a8:8f:24:29:83:0e:13:75:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 30 18:48:57 2026 GMT Not After : Apr 30 17:48:57 2026 GMT Subject: CN=23cb7458-10c2-41c6-903e-ee6252a38a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:40:a2:0c:2e:0a:e6:2b:7a:a7:76:37:8b: 8a:80:5c:73:b2:62:9a:59:15:3f:6e:b1:cf:8f:6c: 0c:14:f7:99:56:fa:58:f0:a6:ee:8c:b3:90:4d:02: e1:3f:f2:db:69:cb:e6:1d:9d:4b:26:6b:70:41:b3: d6:37:95:eb:71:c7:2d:50:a8:e0:74:4e:b7:f6:37: f8:fb:ba:e1:c6:53:51:09:73:7c:7a:0f:a3:41:88: c9:dd:4e:ce:a5:b9:27:97:7b:02:bf:45:60:cf:65: 58:19:1a:69:72:80:ab:d4:ec:fc:d5:22:04:7f:e4: b4:e5:09:d8:e2:2a:92:d9:bc:bd:de:88:79:d3:82: 33:ec:04:01:8b:28:27:78:b0:c0:93:87:0e:59:ff: b2:36:f4:92:62:ec:4e:8c:a7:a0:bc:e6:ff:30:bf: 88:98:44:4a:8d:bb:d8:a2:28:b4:10:40:28:8e:03: 4a:57:02:d2:0a:ad:e8:7f:6b:2b:87:47:71:dd:be: 0f:2c:1b:b3:cf:6b:d8:c6:27:5b:a6:5c:c6:e8:cb: 73:66:ae:83:16:e2:59:fe:59:64:c0:a3:9b:f1:c7: 50:4d:cd:60:10:74:be:d8:3f:c4:92:39:4b:fe:12: 45:81:e8:7c:13:ff:5f:9d:43:7c:b3:3e:7e:5d:5f: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:32:3E:24:2B:35:03:89:CC:E5:78:23:59:EA:3D:15:46:67:0A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a832853c-0b35-34ab-95af-2a17b741acca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.188.224.0/24 38.210.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:63:c6:af:38:9a:e1:f0:9f:fa:55:1d:1e:5f:4b:de:98:4f: 5c:1e:52:09:b7:92:9e:cb:ef:84:a9:be:e0:d5:bc:1b:62:33: 6a:a2:6c:b1:21:43:4f:02:48:0a:91:86:f7:1f:2a:7e:26:e9: 55:bf:e0:ce:e3:66:28:78:f9:e2:59:db:51:30:4b:94:5f:65: e2:51:b7:01:00:d6:7a:aa:c1:24:03:eb:1c:b3:df:71:c1:44: df:40:4f:60:ba:c4:09:7d:6f:0a:fe:cf:7e:20:2b:cd:32:da: ae:a7:36:d0:1f:76:b0:d9:2f:39:30:2f:e2:ed:4a:9f:14:40: ae:c2:9a:7b:05:c0:04:2d:4c:43:e7:43:9b:fb:b5:1c:8d:14: c8:8b:fe:22:2c:84:80:a6:99:02:05:d4:5a:f1:11:60:ae:98: 73:0d:26:3a:71:dd:4e:ac:2b:48:e7:bf:2d:b4:06:24:4c:1d: 35:da:9c:cd:2a:55:0d:f8:87:ca:6b:17:0a:de:45:5a:cf:d6: a8:da:8c:60:f2:19:9a:8f:ef:52:30:de:46:1e:47:b7:0a:02: b6:a0:66:36:f5:a7:18:e8:35:83:28:0f:54:f4:83:f8:35:c7: a3:dd:e0:7d:c5:0f:ce:b5:d3:db:99:f5:db:12:e4:d5:45:61: 3d:17:fb:ed -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyzFiSojyQpgw4TdbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEzMDE4NDg1N1oXDTI2MDQzMDE3NDg1N1owLzEtMCsGA1UEAxMk MjNjYjc0NTgtMTBjMi00MWM2LTkwM2UtZWU2MjUyYTM4YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxRAogwuCuYreqd2N4uKgFxzsmKaWRU/brHP j2wMFPeZVvpY8KbujLOQTQLhP/LbacvmHZ1LJmtwQbPWN5XrccctUKjgdE639jf4 +7rhxlNRCXN8eg+jQYjJ3U7Opbknl3sCv0Vgz2VYGRppcoCr1Oz81SIEf+S05QnY 4iqS2by93oh504Iz7AQBiygneLDAk4cOWf+yNvSSYuxOjKegvOb/ML+ImERKjbvY oii0EEAojgNKVwLSCq3of2srh0dx3b4PLBuzz2vYxidbplzG6MtzZq6DFuJZ/llk wKOb8cdQTc1gEHS+2D/EkjlL/hJFgeh8E/9fnUN8sz5+XV8N6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK0yPiQrNQOJzOV4I1nqPRVGZwoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTgzMjg1M2MtMGIzNS0z NGFiLTk1YWYtMmExN2I3NDFhY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJrzgAwQA JtJaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEFjxq84muHwn/pVHR5fS96YT1weUgm3kp7L74SpvuDVvBti M2qibLEhQ08CSAqRhvcfKn4m6VW/4M7jZih4+eJZ21EwS5RfZeJRtwEA1nqqwSQD 6xyz33HBRN9AT2C6xAl9bwr+z34gK80y2q6nNtAfdrDZLzkwL+LtSp8UQK7CmnsF wAQtTEPnQ5v7tRyNFMiL/iIshICmmQIF1FrxEWCumHMNJjpx3U6sK0jnvy20BiRM HTXanM0qVQ34h8prFwreRVrP1qjajGDyGZqP71Iw3kYeR7cKAragZjb1pxjoNYMo D1T0g/g1x6Pd4H3FD86109uZ9dsS5NVFYT0X++0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:43:18 2026 by rpki-client