$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dacdbf30-72e0-341b-a715-0e077e64738a.roa File: dacdbf30-72e0-341b-a715-0e077e64738a.roa (raw, json) Hash identifier: GT6+j3vcKrPJ/+67SjqHdsotl1lhKzcpLXLMeqRZHmg= Subject key identifier: 38:54:96:EC:37:EE:12:71:08:80:D4:48:D9:FB:89:8F:46:E3:D1:DB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB6B70CD3F5631772247ABA40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dacdbf30-72e0-341b-a715-0e077e64738a.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 393796 IP address blocks: 38.58.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:0c:d3:f5:63:17:72:24:7a:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=0e9ba9a6-12fd-4093-b502-2f23fd2dd3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:80:02:ef:e2:fd:8e:1d:a1:26:56:40:32: 4b:ec:02:a8:a3:a0:2b:13:bc:2e:7a:33:df:a7:0a: aa:1e:e7:85:74:48:22:14:88:93:db:85:78:e0:1e: d4:f9:f7:a2:09:e0:ca:c9:cf:32:43:02:0d:a5:79: b7:1c:29:a7:18:03:9a:84:1f:8b:d7:f2:0c:22:05: 66:a8:a9:be:e2:c5:83:78:5a:73:8e:6c:68:ac:2d: e2:d4:d1:fb:35:3b:37:48:97:bf:04:20:31:7b:f7: 0e:fc:1d:96:86:a0:cc:a2:99:00:ca:ea:b1:eb:9d: 35:08:ab:f4:ec:71:23:72:23:61:49:c4:67:44:2e: 4f:3f:4c:ba:67:ea:28:6d:d2:2f:c6:aa:f7:41:df: bd:91:0e:5f:a1:37:63:15:67:14:e5:fc:6b:7d:cd: a1:6f:33:da:57:4d:92:96:7d:2e:73:22:df:1e:f9: 6f:84:0e:71:28:f6:b6:95:56:d7:a9:c2:99:b3:3a: 63:b3:dd:8e:4f:d1:96:4a:42:ab:92:ef:68:63:25: 17:99:b1:f5:f3:3f:7f:d9:87:41:14:0d:e4:2d:47: 11:b2:45:e3:bd:33:d9:d8:dc:42:d8:0f:08:e9:91: 9f:5f:bd:8e:4b:4c:74:25:75:07:fd:1d:c4:6a:02: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:54:96:EC:37:EE:12:71:08:80:D4:48:D9:FB:89:8F:46:E3:D1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dacdbf30-72e0-341b-a715-0e077e64738a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e2:62:f5:0b:29:35:cb:1c:92:22:50:01:5e:c1:b2:eb:01: 91:54:d4:0b:70:16:5a:8e:14:1e:70:d5:f2:20:12:36:ca:37: 22:a0:5f:05:a0:5f:bf:74:46:36:e5:c0:f2:15:cb:1e:56:53: 8c:e6:87:48:ee:83:aa:89:2e:c2:9c:59:1e:88:57:e0:c8:cb: d4:d3:93:f1:9d:83:25:3e:05:25:84:40:10:c5:b2:98:8f:08: 1e:ec:fc:5c:10:bf:d3:85:24:69:2b:3a:91:a1:01:1c:8a:46: d8:55:33:96:81:89:c5:44:5a:8d:4d:41:0a:48:83:15:b0:d3: ed:f3:9f:28:8c:57:8a:16:4b:c4:0b:e4:35:3d:aa:8b:ef:cb: 08:fd:f9:6b:c4:ad:b1:02:69:fa:db:06:43:02:d7:92:fc:63: c4:4a:ba:5a:21:7c:a7:0a:e1:f1:ed:63:63:20:89:c1:cc:e6: c0:d1:99:23:bb:ee:f2:b1:a1:fd:40:8c:4a:d6:18:50:9d:9c: aa:c5:94:47:7e:12:81:65:f6:e0:da:42:83:f3:be:09:82:cf: ce:78:81:da:88:39:f5:82:a7:29:50:c2:25:1d:68:cc:6e:42: 15:bb:e9:d1:08:dc:94:3c:56:ce:1f:cc:82:52:f5:dc:45:b5: d4:0a:33:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2twzT9WMXciR6ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGU5YmE5YTYtMTJmZC00MDkzLWI1MDItMmYyM2ZkMmRkM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KCAAu/i/Y4doSZWQDJL7AKoo6ArE7wuejPf pwqqHueFdEgiFIiT24V44B7U+feiCeDKyc8yQwINpXm3HCmnGAOahB+L1/IMIgVm qKm+4sWDeFpzjmxorC3i1NH7NTs3SJe/BCAxe/cO/B2WhqDMopkAyuqx6501CKv0 7HEjciNhScRnRC5PP0y6Z+oobdIvxqr3Qd+9kQ5foTdjFWcU5fxrfc2hbzPaV02S ln0ucyLfHvlvhA5xKPa2lVbXqcKZszpjs92OT9GWSkKrku9oYyUXmbH18z9/2YdB FA3kLUcRskXjvTPZ2NxC2A8I6ZGfX72OS0x0JXUH/R3EagJz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhUluw37hJxCIDUSNn7iY9G49HbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGFjZGJmMzAtNzJlMC0z NDFiLWE3MTUtMGUwNzdlNjQ3MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJjrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHiYvULKTXLHJIiUAFewbLrAZFU1AtwFlqOFB5w1fIgEjbKNyKgXwWg X790RjblwPIVyx5WU4zmh0jug6qJLsKcWR6IV+DIy9TTk/GdgyU+BSWEQBDFspiP CB7s/FwQv9OFJGkrOpGhARyKRthVM5aBicVEWo1NQQpIgxWw0+3znyiMV4oWS8QL 5DU9qovvywj9+WvErbECafrbBkMC15L8Y8RKulohfKcK4fHtY2MgicHM5sDRmSO7 7vKxof1AjErWGFCdnKrFlEd+EoFl9uDaQoPzvgmCz854gdqIOfWCpylQwiUdaMxu QhW76dEI3JQ8Vs4fzIJS9dxFtdQKM2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:32 2026 by rpki-client