$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa File: d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa (raw, json) Hash identifier: TJSuvZeewGvqCS9A3XUjD2X53IQEEYfQxQEU1lPeqQE= Subject key identifier: 3F:43:3B:1E:E0:BC:C8:0A:EE:A5:39:D3:6F:3D:40:6F:8A:8E:F7:3D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB6B708C5D44EEFBBF0AA2DA0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 141672 IP address blocks: 38.94.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:08:c5:d4:4e:ef:bb:f0:aa:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=2a4c4001-df27-4b6f-827c-4210d2457946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:86:2d:1a:06:e6:30:98:44:0f:45:02:00:5b: 28:e0:c9:db:8c:cd:2b:0f:03:23:46:d1:fb:9a:a5: ce:c8:e9:ee:b3:41:48:6e:8f:83:01:f3:f2:a7:dc: be:d6:a3:8c:ce:25:6b:eb:c4:04:85:6f:4b:b3:b6: 55:37:90:1f:5a:4f:a3:1d:cd:3a:8f:8c:0b:f8:3b: 5d:f7:f4:29:df:ea:07:c8:3e:12:b7:ce:5e:6a:ad: fd:9b:59:05:b9:81:15:39:9e:fe:72:66:e6:90:ba: 73:26:2b:85:c9:6c:a1:8d:92:56:ad:81:54:37:89: a8:1e:d2:14:c4:2e:88:d1:d7:34:73:f2:53:25:c5: 9c:68:e5:f7:3b:7f:88:71:20:07:3e:47:d7:dd:80: 48:43:39:27:e5:f9:e3:c5:45:a3:6c:30:89:86:10: e1:db:55:66:ad:ef:50:a0:c7:22:4e:9d:a8:80:1c: 14:e6:3d:aa:34:1f:02:3b:be:1a:19:91:05:e5:67: 32:c6:a7:7e:81:d6:41:a2:32:23:8e:47:b2:f0:d1: 8f:db:a7:5d:e4:f3:7c:fb:dd:4f:4e:8a:1c:2a:90: 17:a3:b6:01:cb:24:4c:27:fe:01:d1:0c:a7:73:f5: 60:12:ce:95:f1:51:c5:d2:95:4e:b8:09:59:c1:72: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:43:3B:1E:E0:BC:C8:0A:EE:A5:39:D3:6F:3D:40:6F:8A:8E:F7:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:11:e4:69:e3:a8:1e:a7:0b:40:9c:36:0e:b7:a9:8a:5f:53: d4:6c:a5:7b:0c:06:22:83:64:de:62:bf:02:cf:df:4b:f3:e7: 45:ad:17:59:54:ff:68:0f:df:2e:f9:c1:b8:de:bd:a4:55:f9: d3:f8:d8:64:b9:c0:69:18:f6:e5:9c:ed:87:20:09:95:49:8f: 2b:b8:fe:12:2b:f7:76:32:dc:58:c6:42:49:5f:1a:3e:c3:a7: 6d:e2:01:3b:1d:d7:d4:06:33:f0:af:eb:1e:f0:37:c5:93:92: 3b:71:91:cb:79:c5:05:bb:49:a4:4a:5d:7b:10:bf:b4:9d:eb: e3:9b:61:62:5c:35:76:b2:f6:38:f5:25:1b:db:bc:22:ec:15: 03:d2:52:b4:31:8d:9e:0b:9b:8b:b7:97:41:84:e5:c7:63:ce: 26:9c:1a:b1:b1:b7:0b:7c:0c:25:a2:25:4d:c0:bf:77:19:d1: 0e:2e:52:8f:f3:e1:4a:ec:fc:d7:d8:25:e6:b7:7a:0f:71:5d: aa:ed:51:df:3b:d9:79:ac:57:4c:82:30:fe:00:00:a2:38:e5: f2:d9:52:f0:af:30:87:43:b2:82:01:f3:fe:48:8d:a3:9f:4d: 21:36:de:5b:40:5b:bc:19:43:9d:18:b6:04:a6:a1:46:59:55: 92:4f:17:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2twjF1E7vu/CqLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MmE0YzQwMDEtZGYyNy00YjZmLTgyN2MtNDIxMGQyNDU3OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIYtGgbmMJhED0UCAFso4MnbjM0rDwMjRtH7 mqXOyOnus0FIbo+DAfPyp9y+1qOMziVr68QEhW9Ls7ZVN5AfWk+jHc06j4wL+Dtd 9/Qp3+oHyD4St85eaq39m1kFuYEVOZ7+cmbmkLpzJiuFyWyhjZJWrYFUN4moHtIU xC6I0dc0c/JTJcWcaOX3O3+IcSAHPkfX3YBIQzkn5fnjxUWjbDCJhhDh21Vmre9Q oMciTp2ogBwU5j2qNB8CO74aGZEF5Wcyxqd+gdZBojIjjkey8NGP26dd5PN8+91P ToocKpAXo7YByyRMJ/4B0Qync/VgEs6V8VHF0pVOuAlZwXKJ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9DOx7gvMgK7qU50289QG+Kjvc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDE1NzRiZTEtMzVjNC0z OTk5LWFmYjYtYWUzYjlmMmQyNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJl7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwR5GnjqB6nC0CcNg63qYpfU9RspXsMBiKDZN5ivwLP30vz50WtF1lU /2gP3y75wbjevaRV+dP42GS5wGkY9uWc7YcgCZVJjyu4/hIr93Yy3FjGQklfGj7D p23iATsd19QGM/Cv6x7wN8WTkjtxkct5xQW7SaRKXXsQv7Sd6+ObYWJcNXay9jj1 JRvbvCLsFQPSUrQxjZ4Lm4u3l0GE5cdjziacGrGxtwt8DCWiJU3Av3cZ0Q4uUo/z 4Urs/NfYJea3eg9xXartUd872XmsV0yCMP4AAKI45fLZUvCvMIdDsoIB8/5IjaOf TSE23ltAW7wZQ50YtgSmoUZZVZJPFz8= -----END CERTIFICATE-----Generated at Sun Mar 1 19:02:59 2026 by rpki-client