$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa File: f98e473e-c87d-32f1-bdf9-de6df3252819.roa (raw, json) Hash identifier: C7WvxjDav1rXQGXfN7GSxw9ASpvYxBCk+knMp2s5prQ= Subject key identifier: 33:5F:D5:EF:92:55:8D:D2:60:4C:99:E2:4D:46:81:90:7D:99:1B:6C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CD6D21EAEE18E5DD955333BC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 272464 IP address blocks: 38.19.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:1e:ae:e1:8e:5d:d9:55:33:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=400918ec-4d06-4c7f-889c-dcdc5fab7627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:50:ff:4a:2f:fe:f8:77:f0:33:b8:70:72: 32:ac:31:98:2d:56:b1:a5:ba:4f:30:8f:38:e7:29: 7a:70:6a:2c:80:17:69:59:43:43:78:36:cd:2c:f8: 55:69:ac:d9:37:de:b8:ef:7b:6e:23:93:53:cb:b7: e0:0e:80:0d:e1:e6:c8:13:c3:4e:ba:de:13:41:5d: b4:5a:4c:a8:dd:72:dd:8a:da:53:49:5c:dc:a5:52: bb:90:6c:a6:4b:16:15:54:b0:38:c9:fd:97:e1:66: 75:75:74:18:1a:03:81:b9:76:7b:4e:bb:84:34:d7: 02:84:1e:3b:d8:44:3d:0f:79:52:9f:b7:52:93:78: 5a:88:b3:56:b8:2e:a6:a6:3d:0c:a0:3d:05:24:ca: bf:d3:be:18:af:e3:ff:29:c7:45:f8:ad:3d:ec:a7: 79:05:34:a3:0a:08:55:6d:96:58:7d:7c:1a:84:8c: f6:d0:e8:b3:95:b2:5f:b5:23:4a:11:e6:0c:fd:07: 1b:40:d8:2a:05:6f:27:2d:7a:73:97:df:45:03:ed: ae:7f:8c:c1:26:87:16:2b:09:99:d9:9e:28:b2:77: aa:57:50:df:49:82:ad:ef:8c:46:98:a4:88:20:f9: 10:6c:46:c7:3c:cf:d3:72:86:d6:cf:3b:27:74:89: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5F:D5:EF:92:55:8D:D2:60:4C:99:E2:4D:46:81:90:7D:99:1B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f98e473e-c87d-32f1-bdf9-de6df3252819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:95:33:36:a9:02:5d:89:0e:52:2a:ed:88:32:5e:3a:40:26: 5f:12:2f:86:c8:4e:3c:24:fc:dd:ef:bc:53:03:16:f8:bf:09: 3b:be:39:8a:a2:44:4a:50:39:7d:b9:70:c3:05:c1:80:3e:ab: 2a:1d:ff:d6:94:61:99:b2:7d:a9:45:66:02:9e:cf:fe:34:0d: a4:47:0a:f5:1a:33:a4:01:15:05:76:e5:21:bc:87:98:44:56: 00:c2:d6:11:a9:96:84:25:3e:82:10:8b:59:66:60:a7:ab:87: e4:46:96:bd:0f:d6:39:5b:41:2a:76:1c:7a:79:6c:76:2b:bc: b4:aa:40:49:b2:91:05:ac:6f:16:b4:dc:66:7f:0d:57:71:b9: ed:e5:b8:2b:47:0e:6f:b5:73:47:98:fb:f9:1d:14:f1:32:29: 17:41:0b:0a:b1:40:65:0d:10:d7:68:3b:39:54:d7:ea:32:78: d2:45:18:d7:99:8a:90:ce:9a:41:bf:c8:10:76:7f:ae:8a:82: 03:f2:28:46:3c:61:85:48:58:b3:33:07:2d:ce:88:4f:71:8d: ea:a3:5f:d4:86:b5:2e:85:a0:f8:20:db:2e:57:d2:d9:66:56: 2b:73:53:a3:1d:00:57:7b:78:c5:e6:cd:27:33:95:a8:2d:ca: 80:f1:8f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0h6u4Y5d2VUzO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NDAwOTE4ZWMtNGQwNi00YzdmLTg4OWMtZGNkYzVmYWI3NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrVQ/0ov/vh38DO4cHIyrDGYLVaxpbpPMI84 5yl6cGosgBdpWUNDeDbNLPhVaazZN96473tuI5NTy7fgDoAN4ebIE8NOut4TQV20 Wkyo3XLditpTSVzcpVK7kGymSxYVVLA4yf2X4WZ1dXQYGgOBuXZ7TruENNcChB47 2EQ9D3lSn7dSk3haiLNWuC6mpj0MoD0FJMq/074Yr+P/KcdF+K097Kd5BTSjCghV bZZYfXwahIz20OizlbJftSNKEeYM/QcbQNgqBW8nLXpzl99FA+2uf4zBJocWKwmZ 2Z4osneqV1DfSYKt74xGmKSIIPkQbEbHPM/TcobWzzsndIk53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNf1e+SVY3SYEyZ4k1GgZB9mRtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjk4ZTQ3M2UtYzg3ZC0z MmYxLWJkZjktZGU2ZGYzMjUyODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhNlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqVMzapAl2JDlIq7YgyXjpAJl8SL4bITjwk/N3vvFMDFvi/CTu+OYqi REpQOX25cMMFwYA+qyod/9aUYZmyfalFZgKez/40DaRHCvUaM6QBFQV25SG8h5hE VgDC1hGploQlPoIQi1lmYKerh+RGlr0P1jlbQSp2HHp5bHYrvLSqQEmykQWsbxa0 3GZ/DVdxue3luCtHDm+1c0eY+/kdFPEyKRdBCwqxQGUNENdoOzlU1+oyeNJFGNeZ ipDOmkG/yBB2f66KggPyKEY8YYVIWLMzBy3OiE9xjeqjX9SGtS6FoPgg2y5X0tlm VitzU6MdAFd7eMXmzSczlagtyoDxjyE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:46:26 2026 by rpki-client