$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa File: b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa (raw, json) Hash identifier: FGyP2xMP2CEC5HpssZF6oLq7TWxYXSCyqlPGxIrnEbk= Subject key identifier: 4E:F0:B8:B7:CE:03:E1:D2:F2:77:42:F2:9E:9B:BD:75:AD:67:45:BC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CC106686C1F3F15A4D692D100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 35699 IP address blocks: 38.254.126.0/24 maxlen: 24 154.44.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c1:06:68:6c:1f:3f:15:a4:d6:92:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=a0aa8107-8757-45ba-9e36-3b28115acee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:62:13:01:5d:c0:1e:f1:4f:ed:23:6e:36: 74:2e:35:f6:32:5e:fb:4e:46:88:d8:a7:18:12:7b: a7:e3:fa:7a:8d:bb:a6:f4:63:2f:72:3c:50:df:6d: 18:5b:58:b9:12:75:99:f2:f1:4a:80:e2:5e:79:91: d2:64:2c:d1:fb:0e:30:3b:1b:bf:67:e1:42:53:fb: 3a:6f:aa:c2:54:e4:2d:d7:0a:24:61:c4:81:bb:f8: 23:49:a0:3e:59:2d:c2:3e:1b:8d:20:29:94:3a:cd: d4:c6:cb:8c:a4:dc:cf:57:ef:37:3f:49:ba:83:c3: c1:67:0c:0b:bf:af:cc:6a:7d:e2:0d:cc:b5:ca:71: 68:ae:97:3f:5c:f3:d3:66:fd:5b:5d:3b:74:16:af: 58:4c:f0:57:dc:39:46:3b:9f:c4:18:78:fe:07:c8: cc:ce:9a:d2:09:c1:02:5e:6f:91:9c:c8:61:64:6f: 04:7d:e3:4a:3b:f2:7b:89:d0:fe:22:5e:fe:c6:50: 82:85:64:c7:f5:ea:0a:a4:55:5d:df:f4:e3:af:3f: 66:1a:a3:d4:ce:0f:2f:9a:82:56:05:20:b2:67:41: 93:4c:fc:f1:60:e7:53:f9:23:64:bb:48:f0:a8:89: 0d:03:df:0b:1e:d2:26:08:c4:39:42:31:60:13:2c: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F0:B8:B7:CE:03:E1:D2:F2:77:42:F2:9E:9B:BD:75:AD:67:45:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.126.0/24 154.44.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:51:30:8c:23:c4:eb:f0:7f:67:1f:d4:94:80:7f:52:1c:c3: e9:3c:d9:f9:df:22:49:55:a4:14:ea:8b:71:83:fe:8e:0a:3a: 8f:81:2f:55:c2:3b:6e:96:eb:f8:c3:ba:00:92:46:df:36:0f: cb:98:6b:3a:c2:b8:08:e3:ba:eb:87:09:f8:88:dc:30:5d:a9: ac:56:7c:e1:77:eb:1d:0d:8e:d3:e2:45:f7:b8:06:18:38:99: 0e:aa:47:4f:c5:85:87:ab:a1:fe:2c:84:34:25:66:40:ec:c4: 30:32:a3:b8:10:7b:69:07:f7:ca:f3:ea:f9:6b:86:3d:b0:93: 63:cb:f2:da:7e:c0:54:78:73:35:49:54:4b:fd:b9:88:1c:b0: f0:9c:6d:0e:e6:6a:d0:9e:de:66:83:3d:13:5a:fa:f1:20:ae: a6:79:b6:dc:7b:af:e3:98:3d:86:a3:a0:5e:01:f5:d0:c8:d9: 5d:bc:dc:ca:39:d2:b6:70:d3:dc:73:97:0b:7f:c2:67:bb:09: c0:a1:aa:b1:fc:b1:91:b1:93:8e:79:6d:26:cf:fb:d9:27:13: 1f:74:44:7e:c0:42:af:a4:14:92:d0:ac:a1:48:fb:38:c8:09: 78:b9:1f:58:64:c8:17:f9:47:8d:4d:e9:3c:c4:f1:74:ce:dd: f5:ee:83:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzBBmhsHz8VpNaS0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk YTBhYTgxMDctODc1Ny00NWJhLTllMzYtM2IyODExNWFjZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykBiEwFdwB7xT+0jbjZ0LjX2Ml77TkaI2KcY Enun4/p6jbum9GMvcjxQ320YW1i5EnWZ8vFKgOJeeZHSZCzR+w4wOxu/Z+FCU/s6 b6rCVOQt1wokYcSBu/gjSaA+WS3CPhuNICmUOs3UxsuMpNzPV+83P0m6g8PBZwwL v6/Man3iDcy1ynForpc/XPPTZv1bXTt0Fq9YTPBX3DlGO5/EGHj+B8jMzprSCcEC Xm+RnMhhZG8EfeNKO/J7idD+Il7+xlCChWTH9eoKpFVd3/Tjrz9mGqPUzg8vmoJW BSCyZ0GTTPzxYOdT+SNku0jwqIkNA98LHtImCMQ5QjFgEyzsGQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE7wuLfOA+HS8ndC8p6bvXWtZ0W8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjE5ZDJkMTAtNjU5OC0z MTlmLWJjYjktYjRmZThhNTRkNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJv5+AwQC miyMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKZRMIwjxOvwf2cf1JSAf1Icw+k82fnfIklVpBTqi3GD/o4K Oo+BL1XCO26W6/jDugCSRt82D8uYazrCuAjjuuuHCfiI3DBdqaxWfOF36x0NjtPi Rfe4Bhg4mQ6qR0/FhYerof4shDQlZkDsxDAyo7gQe2kH98rz6vlrhj2wk2PL8tp+ wFR4czVJVEv9uYgcsPCcbQ7matCe3maDPRNa+vEgrqZ5ttx7r+OYPYajoF4B9dDI 2V283Mo50rZw09xzlwt/wme7CcChqrH8sZGxk455bSbP+9knEx90RH7AQq+kFJLQ rKFI+zjICXi5H1hkyBf5R41N6TzE8XTO3fXug3c= -----END CERTIFICATE-----Generated at Sun Mar 1 18:35:05 2026 by rpki-client