$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b810b230-75e8-344c-b6cd-4e8123760868.roa File: b810b230-75e8-344c-b6cd-4e8123760868.roa (raw, json) Hash identifier: aArVZEZQmUoUbaOuLgUhGIca1tQtU9pGmen2zayfDs4= Subject key identifier: CF:3C:3E:3A:A0:2A:08:CF:29:0F:D5:CC:03:8D:19:DB:E5:07:A5:3F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB121AAF94852E36E864C5B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b810b230-75e8-344c-b6cd-4e8123760868.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 272907 IP address blocks: 38.255.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:aa:f9:48:52:e3:6e:86:4c:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=7b5540f2-84b2-4a9f-b8ff-401cbd904b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:21:78:21:da:ba:73:27:b5:07:9a:11:95: 64:68:a8:9f:fc:9c:08:80:d3:02:34:b2:37:72:cd: 0d:f1:8a:62:95:62:6f:2e:75:f2:11:fc:80:c3:f2: 1f:d4:ed:31:47:ff:b0:81:ae:4b:37:21:cb:0b:c0: ad:25:6f:9d:41:8c:38:e0:ef:d1:6b:88:5a:d5:e5: 93:1a:8c:a5:a3:40:52:a4:1d:be:3e:66:1d:9c:a0: 6d:e4:d0:85:eb:5d:28:81:f0:75:ed:be:0e:dc:6c: d8:bf:9c:55:f9:ae:40:8f:63:71:9c:fb:c7:3a:13: fb:b5:a4:78:76:c3:75:35:46:87:b1:75:e2:ee:3d: 50:e5:df:52:8c:6e:f6:b4:b5:ba:e3:6e:f0:68:8b: 4e:e4:37:a3:15:84:83:89:1e:82:0f:87:01:02:da: a0:b2:70:a2:ec:40:58:a5:bb:dd:c4:5f:ff:ec:c8: 75:b5:ad:14:8a:18:60:41:18:5e:ba:1a:d5:c0:ff: 84:15:41:e8:ac:40:4e:72:f1:65:62:dd:89:52:59: 44:29:8f:39:11:84:29:89:8b:d7:d1:97:26:7d:e0: d2:70:e4:b2:84:12:1c:eb:e4:b1:4a:05:f3:1c:ff: a3:f0:df:e7:47:42:f2:da:a4:7c:80:a4:f8:33:c1: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:3E:3A:A0:2A:08:CF:29:0F:D5:CC:03:8D:19:DB:E5:07:A5:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b810b230-75e8-344c-b6cd-4e8123760868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5a:2a:d5:06:75:3c:c9:2a:a4:e8:fd:2a:1c:9f:67:52:0d: 0d:6e:3f:18:c4:f4:2c:75:d6:59:b1:03:ca:8a:6c:b2:9a:16: 14:bf:61:03:9c:94:62:12:81:ae:57:84:27:59:12:71:be:70: 13:f5:3d:dc:16:42:e9:36:ba:e2:66:84:da:33:ba:46:a7:22: 9c:07:26:ef:22:45:b4:c0:be:38:22:a2:5a:bc:ef:c2:41:06: 27:9f:b6:a3:4c:24:5f:a2:7c:34:b5:9d:5a:d6:41:aa:69:d4: 53:2a:d0:12:56:4a:63:fd:bc:a1:14:b7:97:5c:dd:be:8a:b4: 3f:7f:95:33:02:f5:ca:43:fe:07:5e:ab:cd:81:24:25:c9:84: 8b:96:c2:de:af:fd:e6:5b:23:96:f4:61:f5:e5:7c:25:cf:14: 23:42:ed:40:01:25:a0:1e:56:4d:c1:34:0f:b3:dc:a9:d8:38: a7:c9:3a:5b:ad:fa:ab:10:17:8e:3b:21:69:25:08:aa:d8:38: 8a:25:f3:a8:bd:79:66:fc:76:40:74:9b:4e:f1:ab:65:d7:a6: 4c:95:9f:d7:e8:27:7b:c9:e7:12:f0:93:b3:ff:53:be:d8:ab: aa:f5:f7:51:a9:b4:89:e9:3a:53:07:8b:da:a9:df:ae:e1:ea: 6f:9d:23:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIar5SFLjboZMWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk N2I1NTQwZjItODRiMi00YTlmLWI4ZmYtNDAxY2JkOTA0YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3AheCHaunMntQeaEZVkaKif/JwIgNMCNLI3 cs0N8YpilWJvLnXyEfyAw/If1O0xR/+wga5LNyHLC8CtJW+dQYw44O/Ra4ha1eWT Goylo0BSpB2+PmYdnKBt5NCF610ogfB17b4O3GzYv5xV+a5Aj2NxnPvHOhP7taR4 dsN1NUaHsXXi7j1Q5d9SjG72tLW6427waItO5DejFYSDiR6CD4cBAtqgsnCi7EBY pbvdxF//7Mh1ta0UihhgQRheuhrVwP+EFUHorEBOcvFlYt2JUllEKY85EYQpiYvX 0ZcmfeDScOSyhBIc6+SxSgXzHP+j8N/nR0Ly2qR8gKT4M8EayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM88PjqgKgjPKQ/VzAONGdvlB6U/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjgxMGIyMzAtNzVlOC0z NDRjLWI2Y2QtNGU4MTIzNzYwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBaKtUGdTzJKqTo/Socn2dSDQ1uPxjE9Cx11lmxA8qKbLKaFhS/YQOc lGISga5XhCdZEnG+cBP1PdwWQuk2uuJmhNozukanIpwHJu8iRbTAvjgiolq878JB BieftqNMJF+ifDS1nVrWQapp1FMq0BJWSmP9vKEUt5dc3b6KtD9/lTMC9cpD/gde q82BJCXJhIuWwt6v/eZbI5b0YfXlfCXPFCNC7UABJaAeVk3BNA+z3KnYOKfJOlut +qsQF447IWklCKrYOIol86i9eWb8dkB0m07xq2XXpkyVn9foJ3vJ5xLwk7P/U77Y q6r191GptInpOlMHi9qp367h6m+dI7c= -----END CERTIFICATE-----Generated at Sun Mar 1 22:33:34 2026 by rpki-client