$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa File: fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa (raw, json) Hash identifier: HX2oSOVUO49wzs3RkMnHDTV/vS1pbXAKSV1lKwRoxn4= Subject key identifier: D5:D6:B0:6D:12:D0:18:DA:DE:7E:16:80:E5:E9:05:94:19:3B:05:B6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D57AD82FA55925BEDB5B74F80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa Signing time: Mon 30 Mar 2026 17:46:30 +0000 ROA not before: Mon 30 Mar 2026 17:46:30 +0000 ROA not after: Sun 28 Jun 2026 17:46:30 +0000 asID: 275658 IP address blocks: 38.159.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:ad:82:fa:55:92:5b:ed:b5:b7:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 30 17:46:30 2026 GMT Not After : Jun 28 17:46:30 2026 GMT Subject: CN=d180de92-5d31-42af-9c64-db95fd390382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c3:c9:66:0f:54:9a:65:b7:f4:6a:86:1e:a4: 6e:02:22:b0:7e:28:be:bc:a6:0f:e1:67:69:78:1f: 0a:e6:43:04:90:9e:b0:fc:e2:8b:a0:f3:55:14:f5: 25:6c:31:4e:97:3c:f4:47:d7:a2:cc:d4:6b:c3:a6: f1:59:cb:21:34:b6:e4:00:b0:cb:c9:f0:ce:58:07: 11:bc:b2:d8:b9:7b:3a:ad:e9:62:e2:6a:ad:5d:8f: a8:f0:2e:ba:67:72:e9:54:09:8b:b7:26:05:69:b6: 08:75:94:75:dc:da:38:0b:9b:da:91:4d:f7:59:f5: 51:db:bb:de:6c:d2:2e:95:b8:76:aa:59:64:c1:4e: ef:c2:79:1e:8e:8f:d1:27:13:f9:72:9e:ea:c2:9e: 45:d5:e1:23:03:18:12:90:aa:3b:48:9a:b4:23:53: d2:6e:b0:e7:07:41:ce:53:19:4b:af:65:72:e5:aa: e9:46:e0:89:a4:d8:8c:35:0d:a1:55:0b:a9:5f:c1: a9:5c:7a:b2:9a:4e:e6:61:3c:74:ba:f6:10:08:24: 1d:ad:16:26:7b:1f:f8:c2:95:b5:6e:e6:ae:0c:e0: 7c:a4:a0:16:03:b7:21:7d:f6:9a:56:a2:6c:1c:25: 97:68:bc:e9:88:2b:8a:a4:7c:80:8e:00:5d:7e:a5: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D6:B0:6D:12:D0:18:DA:DE:7E:16:80:E5:E9:05:94:19:3B:05:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0b:b1:06:cd:5f:05:b1:22:c3:38:36:b5:7d:6c:31:83:e8: eb:a1:2a:66:b0:4c:ee:f5:38:9e:65:18:4b:9c:09:bc:f8:e6: 6b:6f:64:d2:5f:ef:c9:21:90:66:d0:da:84:b7:23:9d:5b:3e: 30:6a:97:6f:b1:bc:09:b2:99:04:d2:98:4d:4b:2e:8d:b7:54: 67:86:d0:e5:f9:3d:cc:6f:93:61:65:ce:8e:bc:d1:1f:b4:d9: 49:6d:40:e4:1e:07:95:44:11:ca:94:74:38:8a:03:c4:f1:1e: 9b:36:64:7c:95:38:23:03:c3:83:7c:eb:75:4f:6f:92:c0:26: 9b:a7:14:3c:6c:a5:ac:a5:3e:08:d3:da:92:9f:9b:3a:d5:b3: d6:21:6f:a6:2e:e0:3f:10:dc:44:63:e6:5e:88:71:2c:90:7f: df:e2:d4:4e:a6:31:3f:89:fe:92:33:0f:fd:91:c9:40:c6:49: fd:63:a1:7b:d3:36:47:c1:6e:93:a0:6c:e4:35:f3:99:f9:92: c3:56:da:be:8f:b1:ef:f5:0c:25:46:5b:19:0f:64:78:ac:26: 8c:c3:ff:44:3b:aa:42:a4:57:3e:68:87:b1:12:fd:29:67:90: df:28:2d:37:ef:f0:76:e0:27:bd:9c:af:26:6e:f5:fa:2f:a5: d8:6e:b7:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XrYL6VZJb7bW3T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMzMDE3NDYzMFoXDTI2MDYyODE3NDYzMFowLzEtMCsGA1UEAxMk ZDE4MGRlOTItNWQzMS00MmFmLTljNjQtZGI5NWZkMzkwMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMPJZg9UmmW39GqGHqRuAiKwfii+vKYP4Wdp eB8K5kMEkJ6w/OKLoPNVFPUlbDFOlzz0R9eizNRrw6bxWcshNLbkALDLyfDOWAcR vLLYuXs6reli4mqtXY+o8C66Z3LpVAmLtyYFabYIdZR13No4C5vakU33WfVR27ve bNIulbh2qllkwU7vwnkejo/RJxP5cp7qwp5F1eEjAxgSkKo7SJq0I1PSbrDnB0HO UxlLr2Vy5arpRuCJpNiMNQ2hVQupX8GpXHqymk7mYTx0uvYQCCQdrRYmex/4wpW1 buauDOB8pKAWA7chffaaVqJsHCWXaLzpiCuKpHyAjgBdfqXfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXWsG0S0Bja3n4WgOXpBZQZOwW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmEzOGVjNDUtNDRiOC0z ZDJhLThmMmEtZGRjZTAxMzkzNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJp/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYLsQbNXwWxIsM4NrV9bDGD6OuhKmawTO71OJ5lGEucCbz45mtvZNJf 78khkGbQ2oS3I51bPjBql2+xvAmymQTSmE1LLo23VGeG0OX5Pcxvk2Flzo680R+0 2UltQOQeB5VEEcqUdDiKA8TxHps2ZHyVOCMDw4N863VPb5LAJpunFDxspaylPgjT 2pKfmzrVs9Yhb6Yu4D8Q3ERj5l6IcSyQf9/i1E6mMT+J/pIzD/2RyUDGSf1joXvT NkfBbpOgbOQ185n5ksNW2r6Pse/1DCVGWxkPZHisJozD/0Q7qkKkVz5oh7ES/Sln kN8oLTfv8HbgJ72cryZu9fovpdhut3M= -----END CERTIFICATE-----Generated at Sun Apr 19 09:04:20 2026 by rpki-client