$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa File: 38cff7ac-79e5-37d1-8a91-3327b27ea983.roa (raw, json) Hash identifier: TLG6ogYtvMPL4VdrphHKJpt4wyv1An4UcJy3MhQK6ws= Subject key identifier: 3A:39:4A:15:B5:92:0B:03:AA:18:BE:78:6A:6E:FD:F8:7F:58:3F:2F Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584D4D5A4E96D6169A8179789E80 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46408 IP address blocks: 208.84.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4e:96:d6:16:9a:81:79:78:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=cd1e957e-62c5-4773-8d71-34972cd8a43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:41:76:b5:47:58:24:27:4b:66:11:ea:74: 73:b5:48:92:c3:29:c0:06:6c:99:16:f2:66:ac:37: 77:b7:24:88:dd:fc:a9:a3:bc:a6:b6:14:a9:a8:58: 30:0e:58:21:9e:d9:27:fa:a8:7b:73:22:70:1e:66: 02:54:1a:f2:b8:7b:32:a4:97:f5:b4:c7:25:31:4d: f6:d4:9f:91:e8:26:d0:2d:28:c2:9e:48:af:15:93: a1:28:28:29:a7:0f:69:21:9a:bf:a8:4f:21:2a:9b: c5:de:dc:3f:93:ee:db:ac:df:49:4c:6f:4a:94:69: 3c:1a:12:d9:ed:8f:51:8c:1f:a7:9c:55:8a:34:83: 22:04:4a:a9:e9:03:78:1d:3f:cb:d4:c3:ad:dc:f0: 0a:12:26:ed:05:61:c9:5b:a9:2e:81:dc:53:d1:85: 83:4f:8c:49:53:11:1b:09:d7:45:89:81:e4:26:5a: 34:31:b2:7c:45:cd:63:a7:62:50:37:b3:84:b0:8c: 5e:5d:b2:25:d5:d2:ca:f0:1c:a9:1c:15:41:e5:9d: 7c:df:38:c4:81:46:51:67:10:de:22:40:b3:44:af: dc:72:05:19:af:5f:ce:cd:f7:f4:75:4c:2b:fe:f2: ae:64:01:a6:d2:30:81:ff:4e:13:b7:a3:f5:10:23: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:4A:15:B5:92:0B:03:AA:18:BE:78:6A:6E:FD:F8:7F:58:3F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 208.84.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:15:91:9b:f3:11:2f:48:89:f0:71:99:13:52:40:f7:22:64: e3:12:14:4c:45:45:99:8d:3b:73:ac:7b:e6:8a:0a:e8:17:d1: 9e:9e:cb:c0:73:68:18:b0:9c:4f:66:10:2b:bf:30:de:53:9e: 57:81:86:64:9f:be:e6:07:58:a3:ca:18:31:42:6e:ad:f1:b5: 87:1e:62:d7:22:74:dc:d9:08:a5:06:0f:ed:7a:85:c6:bf:ec: dc:74:7c:63:54:07:5b:30:16:24:76:98:9c:2b:0d:4e:81:20: 23:25:92:06:b7:f4:51:45:7e:1a:26:01:65:fd:99:9f:d6:40: 66:b8:5f:ae:b6:46:4d:7f:6f:84:d5:52:9a:7e:2b:d8:f7:1f: 5e:9f:85:11:3e:3c:f5:d3:53:24:c3:a5:bb:01:c3:fa:a8:89: fb:55:b9:8d:9b:87:d1:c2:8d:f4:b6:e1:4b:fe:fe:de:7e:1f: bd:8f:b4:ad:8f:b5:c2:a9:9a:63:9c:7a:9e:3c:4c:73:71:0a: d0:d8:74:cc:12:70:96:41:e4:fa:d0:81:6e:c9:c4:e2:dd:0c: b7:5a:dc:44:dc:8d:18:ed:da:a9:9e:53:e1:e1:b6:de:14:c0: ce:df:d7:c4:32:2c:0c:f1:0a:c1:d2:cd:da:45:b7:84:fc:c7: f9:41:ab:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk6W1haagXl4noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk Y2QxZTk1N2UtNjJjNS00NzczLThkNzEtMzQ5NzJjZDhhNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIhBdrVHWCQnS2YR6nRztUiSwynABmyZFvJm rDd3tySI3fypo7ymthSpqFgwDlghntkn+qh7cyJwHmYCVBryuHsypJf1tMclMU32 1J+R6CbQLSjCnkivFZOhKCgppw9pIZq/qE8hKpvF3tw/k+7brN9JTG9KlGk8GhLZ 7Y9RjB+nnFWKNIMiBEqp6QN4HT/L1MOt3PAKEibtBWHJW6kugdxT0YWDT4xJUxEb CddFiYHkJlo0MbJ8Rc1jp2JQN7OEsIxeXbIl1dLK8BypHBVB5Z183zjEgUZRZxDe IkCzRK/ccgUZr1/Ozff0dUwr/vKuZAGm0jCB/04Tt6P1ECOG6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo5ShW1kgsDqhi+eGpu/fh/WD8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMzhjZmY3YWMtNzllNS0z N2QxLThhOTEtMzMyN2IyN2VhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEVkZvzES9IifBxmRNSQPciZOMSFExFRZmNO3Ose+aKCugX0Z6ey8Bz aBiwnE9mECu/MN5TnleBhmSfvuYHWKPKGDFCbq3xtYceYtcidNzZCKUGD+16hca/ 7Nx0fGNUB1swFiR2mJwrDU6BICMlkga39FFFfhomAWX9mZ/WQGa4X662Rk1/b4TV Upp+K9j3H16fhRE+PPXTUyTDpbsBw/qoiftVuY2bh9HCjfS24Uv+/t5+H72PtK2P tcKpmmOcep48THNxCtDYdMwScJZB5PrQgW7JxOLdDLda3ETcjRjt2qmeU+Hhtt4U wM7f18QyLAzxCsHSzdpFt4T8x/lBq4M= -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:33 2026 by rpki-client