$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa File: aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa (raw, json) Hash identifier: RXmzPwFa5PMCfOIXOoUgO25pBcaLWCYSjNZfvsbu/fs= Subject key identifier: E6:91:A5:C0:35:12:EC:A1:5A:06:0E:51:D3:24:23:6E:D1:EE:53:C6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D04E22EFEFE714C6940AF0500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 213245 IP address blocks: 38.236.97.0/24 maxlen: 24 209.61.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:2e:fe:fe:71:4c:69:40:af:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=5fc42288-4abc-4934-a0bb-d8f05e7e3278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:f3:16:98:b6:77:cb:fe:11:ae:72:22:42: 1c:82:7c:1d:c8:23:72:26:7a:d1:71:d0:77:42:6c: 5a:e5:94:77:fa:2f:76:67:01:2e:86:2b:79:d2:c3: 25:c0:34:cf:34:f9:e9:94:ed:1f:89:b6:da:ad:67: f3:77:43:e0:a8:37:4b:ae:71:9b:a9:90:70:f9:a3: 8e:83:d7:89:61:77:6f:be:22:aa:cd:a1:9c:56:2a: c0:47:41:ce:55:f6:d6:83:ce:7f:39:e2:2b:fb:72: ca:eb:dd:65:bc:00:10:de:4f:93:4e:d6:95:64:b0: de:09:2b:88:97:1e:14:41:eb:2d:be:3c:ce:52:a2: e6:92:b8:e5:4c:7b:2b:58:d3:ad:34:df:d8:10:89: 8c:79:9f:a8:7f:04:f1:86:7c:42:0f:c7:1e:65:81: e7:bf:12:d8:08:f9:12:a6:39:db:81:70:8a:a8:b7: dc:9c:41:42:b6:61:7b:0a:65:ed:6c:08:c1:02:8e: 5d:4e:29:33:b1:cd:ef:27:3c:a7:38:3a:8d:8c:79: e2:f2:2c:1a:21:24:b4:f5:ca:76:de:58:48:ea:9f: 5b:a7:7a:6b:9a:be:fe:2d:65:cf:6b:93:b3:b2:69: ae:0a:69:50:2a:c3:68:75:7d:9a:d2:56:1e:17:9d: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:A5:C0:35:12:EC:A1:5A:06:0E:51:D3:24:23:6E:D1:EE:53:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.97.0/24 209.61.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c1:4b:7a:65:91:a9:54:16:bd:7f:85:40:7c:4e:22:a2:94: bb:84:15:d0:e6:23:77:f3:66:c0:ee:ff:a1:a3:31:d7:a5:15: 87:7e:0f:22:68:c8:e0:09:73:82:97:cc:46:0e:20:71:09:23: 7b:61:8d:69:db:bb:29:29:f8:bc:e0:fd:cc:24:6a:a6:f3:7f: 91:17:03:f9:c6:ca:23:68:d6:1d:ea:b0:fa:3c:f1:8b:88:38: b1:50:93:db:79:3a:a6:d7:68:cc:14:eb:63:2b:67:3f:23:6e: f7:6d:ab:22:51:88:50:42:04:7d:26:6c:7c:5f:49:b2:92:17: cf:73:dd:70:fa:ab:01:0f:59:6e:31:a4:81:27:c5:68:10:39: 64:2f:bc:57:82:23:1a:0b:46:1b:bd:55:bc:37:38:50:84:e7: 1a:4d:05:e8:50:e7:8a:51:a4:28:0f:cd:da:45:ee:35:49:f6: 7e:21:78:98:d3:a8:5a:f9:99:c9:9f:09:85:ce:7f:2f:ed:0a: da:05:bd:f0:75:84:22:0f:0f:44:e7:59:56:c3:92:09:59:9b: 02:aa:07:84:37:85:7f:1a:83:e7:c7:f7:9d:75:c5:03:ab:36: fb:82:c7:16:8c:69:dd:33:b2:46:cc:68:c3:47:64:d9:99:85: f3:b4:db:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0E4i7+/nFMaUCvBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk NWZjNDIyODgtNGFiYy00OTM0LWEwYmItZDhmMDVlN2UzMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbLzFpi2d8v+Ea5yIkIcgnwdyCNyJnrRcdB3 Qmxa5ZR3+i92ZwEuhit50sMlwDTPNPnplO0fibbarWfzd0PgqDdLrnGbqZBw+aOO g9eJYXdvviKqzaGcVirAR0HOVfbWg85/OeIr+3LK691lvAAQ3k+TTtaVZLDeCSuI lx4UQestvjzOUqLmkrjlTHsrWNOtNN/YEImMeZ+ofwTxhnxCD8ceZYHnvxLYCPkS pjnbgXCKqLfcnEFCtmF7CmXtbAjBAo5dTikzsc3vJzynODqNjHni8iwaISS09cp2 3lhI6p9bp3prmr7+LWXPa5OzsmmuCmlQKsNodX2a0lYeF52NjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOaRpcA1EuyhWgYOUdMkI27R7lPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWVjNDYyM2QtMTUzMC0z Nzc2LWFkN2ItY2I0ZmIzYTRmMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJuxhAwQA 0T0hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEnBS3plkalUFr1/hUB8TiKilLuEFdDmI3fzZsDu/6GjMdel FYd+DyJoyOAJc4KXzEYOIHEJI3thjWnbuykp+Lzg/cwkaqbzf5EXA/nGyiNo1h3q sPo88YuIOLFQk9t5OqbXaMwU62MrZz8jbvdtqyJRiFBCBH0mbHxfSbKSF89z3XD6 qwEPWW4xpIEnxWgQOWQvvFeCIxoLRhu9Vbw3OFCE5xpNBehQ54pRpCgPzdpF7jVJ 9n4heJjTqFr5mcmfCYXOfy/tCtoFvfB1hCIPD0TnWVbDkglZmwKqB4Q3hX8ag+fH 9511xQOrNvuCxxaMad0zskbMaMNHZNmZhfO02zw= -----END CERTIFICATE-----Generated at Sun Mar 1 18:43:21 2026 by rpki-client