$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa File: cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa (raw, json) Hash identifier: Br9oMouSaau16thJqcQQoKteHjiOlzEy+tzidX+htv8= Subject key identifier: 3E:36:CE:61:0C:9E:5B:C1:16:11:6B:26:02:CD:12:9E:C0:2C:7C:4E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CCA41D278722C9DD505B6D9C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 132925 IP address blocks: 38.130.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:d2:78:72:2c:9d:d5:05:b6:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=e1c2ca9e-3d49-42a1-ac47-60785564f15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:fa:86:3e:ba:e7:33:a2:70:2b:6f:41:54: 59:d6:5a:26:a3:74:a2:d6:1f:d0:46:2a:93:f9:83: 05:89:0e:bb:f4:2e:ee:41:0a:36:a5:5f:d0:ca:02: 5f:0a:3c:30:dd:f0:49:cc:73:73:92:9a:dd:11:49: 0a:bd:88:41:4c:eb:ba:92:d5:0b:55:f1:e0:70:7b: 0d:71:9f:fd:eb:a9:24:f8:c7:9f:1a:dc:4f:dc:6c: 4c:6f:fc:79:8e:28:6d:3a:18:bb:26:6e:dd:a9:dd: 79:8e:bd:a5:59:9d:2c:8a:47:75:ad:5f:7a:03:17: e8:95:60:e1:f1:a4:e4:a7:b8:29:8f:99:a0:72:f8: 7e:98:d4:52:57:63:c8:d6:3d:13:35:9d:ef:1f:f2: c9:74:a0:59:73:35:bb:c8:5a:9f:7c:40:cd:c5:70: 98:91:d2:fe:4e:b3:b3:c7:9c:c0:a8:41:bc:23:8e: 33:e8:21:46:91:9c:8c:29:73:5b:98:f2:3e:86:78: a9:1d:51:13:f3:42:2f:82:3c:63:9d:c3:fd:fe:34: eb:3f:58:74:3c:72:53:83:cf:e1:bd:f5:3a:60:f5: 45:32:cd:ce:61:62:de:aa:7c:82:c4:18:63:bd:76: f4:fb:e7:c3:fb:09:ec:07:cd:79:13:13:59:c5:ed: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:CE:61:0C:9E:5B:C1:16:11:6B:26:02:CD:12:9E:C0:2C:7C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbc4d96a-0e5b-35be-89fe-0857ef0e7a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.130.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:63:c2:60:fc:04:2e:b3:51:bc:9f:70:91:3a:ac:6d:9f:70: 00:72:5d:de:ac:18:f0:af:62:15:6b:5e:c5:ad:ef:85:27:b7: 4c:b4:0e:e0:81:b5:79:89:bb:a4:65:a3:78:ca:13:3e:da:dd: 76:b1:56:c7:c7:48:2f:f2:3e:25:82:e0:fa:85:40:b9:9f:91: ce:ea:e5:c0:79:1f:65:8f:b5:b5:e7:fd:9a:9a:da:03:38:8d: 6e:cd:45:96:81:de:bf:4b:ed:fd:e6:54:ce:17:25:61:c3:df: 2a:4b:44:57:49:db:56:61:4f:78:5d:5d:7b:27:bc:0e:ca:82: c7:e1:43:ae:e7:71:a4:14:e6:87:24:ba:ee:57:b4:e4:5c:ae: 89:0f:56:dd:5e:8b:3b:0b:a8:61:26:ab:26:84:0e:8d:e3:f9: 25:8a:c6:17:8d:fb:7e:d5:02:8a:7f:a1:55:ce:fa:9b:36:a6: c4:46:ac:d5:2a:84:a3:6f:5c:ac:a7:64:d2:47:00:17:dc:08: 08:b5:e7:29:a3:63:7e:40:be:c3:b8:ee:14:01:56:40:b2:bb: 75:9d:1a:04:4b:ef:d9:f8:d9:3a:bc:2e:2c:5c:a0:ad:5c:cb: 93:ff:47:69:fd:fe:b8:6a:7a:8e:e4:9a:d3:30:fb:3d:f5:fa: 7c:82:64:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQdJ4ciyd1QW22cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTFjMmNhOWUtM2Q0OS00MmExLWFjNDctNjA3ODU1NjRmMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXH6hj665zOicCtvQVRZ1lomo3Si1h/QRiqT +YMFiQ679C7uQQo2pV/QygJfCjww3fBJzHNzkprdEUkKvYhBTOu6ktULVfHgcHsN cZ/966kk+MefGtxP3GxMb/x5jihtOhi7Jm7dqd15jr2lWZ0sikd1rV96AxfolWDh 8aTkp7gpj5mgcvh+mNRSV2PI1j0TNZ3vH/LJdKBZczW7yFqffEDNxXCYkdL+TrOz x5zAqEG8I44z6CFGkZyMKXNbmPI+hnipHVET80IvgjxjncP9/jTrP1h0PHJTg8/h vfU6YPVFMs3OYWLeqnyCxBhjvXb0++fD+wnsB815ExNZxe1YDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD42zmEMnlvBFhFrJgLNEp7ALHxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2JjNGQ5NmEtMGU1Yi0z NWJlLTg5ZmUtMDg1N2VmMGU3YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJoL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhjwmD8BC6zUbyfcJE6rG2fcAByXd6sGPCvYhVrXsWt74Unt0y0DuCB tXmJu6Rlo3jKEz7a3XaxVsfHSC/yPiWC4PqFQLmfkc7q5cB5H2WPtbXn/Zqa2gM4 jW7NRZaB3r9L7f3mVM4XJWHD3ypLRFdJ21ZhT3hdXXsnvA7KgsfhQ67ncaQU5ock uu5XtORcrokPVt1eizsLqGEmqyaEDo3j+SWKxheN+37VAop/oVXO+ps2psRGrNUq hKNvXKynZNJHABfcCAi15ymjY35AvsO47hQBVkCyu3WdGgRL79n42Tq8LixcoK1c y5P/R2n9/rhqeo7kmtMw+z31+nyCZNE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:34 2026 by rpki-client