$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa File: fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa (raw, json) Hash identifier: +R2+5tPMhf/iWZz3TeOUWr04R+GKcV3aSXFPZCFZy3Y= Subject key identifier: 4A:0E:9C:03:EC:65:A7:6E:AE:9A:A1:36:DD:4E:BB:D7:64:90:BC:79 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB3EC63F54A7DBF3A39B326C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 273299 IP address blocks: 38.255.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:ec:63:f5:4a:7d:bf:3a:39:b3:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=c282b41c-28a5-4dd9-8fcc-33e7a37de507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:2d:e8:ba:d2:7a:25:d4:f0:ff:b5:63:eb: de:57:80:ea:0c:4b:74:7d:3b:e1:dc:c0:ba:0a:ef: 9b:a5:4f:43:58:66:5d:5c:7e:08:1f:c5:64:a4:15: e5:62:2c:f5:2c:63:97:0e:91:ef:95:b4:6d:04:a7: 5a:bd:dc:28:69:85:87:42:b6:8d:00:08:0e:eb:1a: be:c7:85:6d:aa:3f:e3:ae:d0:00:53:b4:72:35:94: 5f:bf:cc:bc:ad:10:cf:f7:26:69:4b:ce:8f:9f:28: 56:2d:da:76:f6:38:1d:a1:eb:dd:88:fa:0a:44:90: 8e:42:5e:45:dd:9d:38:1e:1b:43:1f:04:34:92:37: 54:c5:0e:27:b2:a5:c6:f6:f6:dc:a2:ff:45:2b:5d: 39:87:4c:f5:1b:c0:67:92:00:e7:d5:d6:c5:a3:dc: 18:8c:14:ac:c6:6b:dc:35:47:e2:4c:8a:6a:41:0f: b6:34:19:98:60:d0:fe:6f:37:ae:8a:cb:bc:7a:d0: 60:4d:c4:ef:ea:d5:95:66:16:14:52:48:bc:01:56: ac:27:58:18:60:b1:15:1c:f3:d0:0a:de:61:2d:4e: b0:4a:6e:55:09:50:44:1f:cc:8b:28:79:68:40:bc: 80:22:06:d8:93:11:80:91:93:2a:0e:de:89:23:c9: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0E:9C:03:EC:65:A7:6E:AE:9A:A1:36:DD:4E:BB:D7:64:90:BC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fdd89c79-659c-309c-b88e-d3c93f94a1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2e:76:23:54:ee:81:5a:d3:df:7e:58:43:2d:f8:b0:6e:48: 8f:cd:a5:fa:f8:f0:8b:23:ef:3d:8d:ef:14:35:0d:5d:75:20: 19:9b:1e:7c:91:59:29:af:07:38:93:e0:39:87:a2:aa:49:f2: d5:86:8a:d2:74:f7:85:40:15:df:1d:9d:75:aa:9d:05:d2:f7: 0d:99:21:2d:f8:ce:63:73:45:5a:51:35:3e:e3:5a:a5:32:21: fd:d9:5e:88:8d:09:62:f3:83:b1:72:58:63:d8:b5:82:fb:06: 1b:9b:01:03:a7:08:4e:c1:16:f2:fa:83:6f:99:12:d3:0d:fe: c0:7e:03:90:19:2d:3f:c8:c1:59:2f:1c:e0:db:8e:1c:35:f3: 74:de:c5:8c:ff:ec:e3:35:99:ea:b3:5c:06:4d:29:7e:ad:fd: 11:55:74:ae:f9:9d:e0:53:ff:40:80:55:92:c9:45:08:a4:0c: 3c:aa:9b:34:05:7a:bf:95:b0:1f:23:44:4e:0d:e2:98:de:e5: 0d:2d:05:26:5f:e8:8b:d1:0c:83:01:59:38:be:20:cf:70:22: 43:3a:96:3f:d3:b1:7e:f4:e2:75:21:74:83:e4:b1:d3:78:9e: a3:ba:0f:82:eb:fc:18:36:70:9e:ff:6f:b7:d1:8d:6a:13:cd: 66:13:cc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GP1Sn2/OjmzJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk YzI4MmI0MWMtMjhhNS00ZGQ5LThmY2MtMzNlN2EzN2RlNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkst6LrSeiXU8P+1Y+veV4DqDEt0fTvh3MC6 Cu+bpU9DWGZdXH4IH8VkpBXlYiz1LGOXDpHvlbRtBKdavdwoaYWHQraNAAgO6xq+ x4Vtqj/jrtAAU7RyNZRfv8y8rRDP9yZpS86PnyhWLdp29jgdoevdiPoKRJCOQl5F 3Z04HhtDHwQ0kjdUxQ4nsqXG9vbcov9FK105h0z1G8BnkgDn1dbFo9wYjBSsxmvc NUfiTIpqQQ+2NBmYYND+bzeuisu8etBgTcTv6tWVZhYUUki8AVasJ1gYYLEVHPPQ Ct5hLU6wSm5VCVBEH8yLKHloQLyAIgbYkxGAkZMqDt6JI8kvVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoOnAPsZadurpqhNt1Ou9dkkLx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmRkODljNzktNjU5Yy0z MDljLWI4OGUtZDNjOTNmOTRhMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0udiNU7oFa099+WEMt+LBuSI/Npfr48Isj7z2N7xQ1DV11IBmbHnyR WSmvBziT4DmHoqpJ8tWGitJ094VAFd8dnXWqnQXS9w2ZIS34zmNzRVpRNT7jWqUy If3ZXoiNCWLzg7FyWGPYtYL7BhubAQOnCE7BFvL6g2+ZEtMN/sB+A5AZLT/IwVkv HODbjhw183TexYz/7OM1meqzXAZNKX6t/RFVdK75neBT/0CAVZLJRQikDDyqmzQF er+VsB8jRE4N4pje5Q0tBSZf6IvRDIMBWTi+IM9wIkM6lj/TsX704nUhdIPksdN4 nqO6D4Lr/Bg2cJ7/b7fRjWoTzWYTzL0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:06 2026 by rpki-client