$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/b9e0ff1a-fbea-34bd-99d4-ff0a89fc7bdf.roa File: b9e0ff1a-fbea-34bd-99d4-ff0a89fc7bdf.roa (raw, json) Hash identifier: YOvwfWeQpwAZNuGVnvtFt2H2G2EbsGGICbRF3pP0STk= Subject key identifier: E8:48:9B:E4:8A:38:E2:42:6C:4D:C9:44:10:B9:A3:67:8D:27:BF:0E Certificate issuer: /CN=38f268a3-1516-46d1-b1c9-d266749b8b40 Certificate serial: 010D0C9F4328584D4D5A3625E3A77696F2EC1400 Authority key identifier: 53:50:53:54:93:A0:A7:E3:B9:04:2F:5B:DF:7F:84:40:B0:8F:B5:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/b9e0ff1a-fbea-34bd-99d4-ff0a89fc7bdf.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 198949 IP address blocks: 142.249.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/38f268a3-1516-46d1-b1c9-d266749b8b40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/38f268a3-1516-46d1-b1c9-d266749b8b40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:36:25:e3:a7:76:96:f2:ec:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f268a3-1516-46d1-b1c9-d266749b8b40 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=cb1840a6-c816-4d84-8539-a7747d824704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:e4:3f:56:31:02:7e:f1:72:4c:61:18:8e: ca:c2:43:9b:0a:57:1c:bf:f6:46:01:95:f1:88:52: ef:fa:f4:c7:10:47:a9:94:22:1f:73:de:30:90:f4: 19:ff:bc:cf:6d:ec:c3:82:61:ac:b1:b0:77:8d:c5: b2:0d:9a:71:4c:af:90:b5:0a:ee:bf:3c:5d:ed:b0: cc:e3:15:a4:2d:a5:1f:93:3b:b3:c8:d6:06:02:81: 54:dd:24:56:9d:08:ea:a7:c2:e6:3a:2b:e2:d8:08: d5:b5:2a:52:13:c2:8c:d3:43:97:08:0c:4d:33:a8: 73:fb:a1:07:46:51:ea:8b:84:76:fa:b4:a0:9f:fe: f2:17:d6:ad:c3:e2:96:eb:c2:7a:ab:0d:67:15:f1: c7:45:cb:ea:75:6e:eb:74:10:a4:f5:2e:64:96:ce: cb:8c:a6:56:c2:12:0f:d7:5f:27:85:17:13:86:2d: 4a:42:4f:7f:b7:8d:d9:a8:17:63:91:a0:c5:a1:59: e1:bd:d1:81:8b:7a:61:36:42:7e:fd:60:95:6d:2d: 35:56:4b:f2:9c:ce:df:05:2c:11:81:da:27:91:7f: 03:b8:05:40:0e:49:60:58:b4:f7:86:22:5e:93:58: cd:fd:bf:2c:e1:66:d8:26:a8:58:61:80:b5:90:f7: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:9B:E4:8A:38:E2:42:6C:4D:C9:44:10:B9:A3:67:8D:27:BF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/b9e0ff1a-fbea-34bd-99d4-ff0a89fc7bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/38f268a3-1516-46d1-b1c9-d266749b8b40.crl X509v3 Authority Key Identifier: keyid:53:50:53:54:93:A0:A7:E3:B9:04:2F:5B:DF:7F:84:40:B0:8F:B5:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40.cer sbgp-ipAddrBlock: critical IPv4: 142.249.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:21:f0:d6:a3:47:89:a5:53:9b:b4:32:28:23:a7:51:0b:1a: 98:6a:eb:03:15:32:5e:7e:40:7e:0d:43:da:1e:27:5f:69:c5: 2a:aa:93:c3:51:d6:6f:71:03:26:99:f1:e8:d0:07:28:43:62: ed:85:72:37:36:c8:09:69:26:60:2d:17:6c:fe:fc:f0:98:6f: 9a:e0:15:cf:fa:b8:55:03:a0:d1:9a:eb:1b:6a:f6:5a:98:1c: 01:46:2e:e8:40:59:fe:07:e8:74:ff:7b:be:47:5d:ca:ab:3d: b4:36:43:6a:d3:f4:53:64:a6:10:24:ac:6f:76:d7:da:09:a1: 51:da:9e:f6:02:6a:c0:c0:b0:64:92:ea:3e:3c:e1:87:1a:45: 3c:b3:21:b7:97:b6:62:91:ba:00:91:b5:b5:91:b3:03:4f:2e: 58:98:3c:ca:d5:61:2e:a6:b5:c8:1c:23:13:ae:b4:96:fc:54: f8:d4:c2:c5:06:cb:9d:d8:4a:c2:ed:0f:01:ec:7a:bd:e5:72: 2d:c4:f7:1c:db:b5:5a:8d:6d:3e:3e:5e:fa:83:69:e7:a2:3b: 12:42:74:a0:79:29:6c:cc:e5:bd:07:81:77:2f:ea:ab:fb:43: 84:b7:ab:58:f0:48:77:ad:24:48:ad:cb:86:80:0b:c4:21:2c: 59:97:cb:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjYl46d2lvLsFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmMjY4YTMtMTUxNi00NmQxLWIxYzktZDI2Njc0OWI4 YjQwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk Y2IxODQwYTYtYzgxNi00ZDg0LTg1MzktYTc3NDdkODI0NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZXkP1YxAn7xckxhGI7KwkObClccv/ZGAZXx iFLv+vTHEEeplCIfc94wkPQZ/7zPbezDgmGssbB3jcWyDZpxTK+QtQruvzxd7bDM 4xWkLaUfkzuzyNYGAoFU3SRWnQjqp8LmOivi2AjVtSpSE8KM00OXCAxNM6hz+6EH RlHqi4R2+rSgn/7yF9atw+KW68J6qw1nFfHHRcvqdW7rdBCk9S5kls7LjKZWwhIP 118nhRcThi1KQk9/t43ZqBdjkaDFoVnhvdGBi3phNkJ+/WCVbS01VkvynM7fBSwR gdonkX8DuAVADklgWLT3hiJek1jN/b8s4WbYJqhYYYC1kPffWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhIm+SKOOJCbE3JRBC5o2eNJ78OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOGYy NjhhMy0xNTE2LTQ2ZDEtYjFjOS1kMjY2NzQ5YjhiNDAvYjllMGZmMWEtZmJlYS0z NGJkLTk5ZDQtZmYwYTg5ZmM3YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzhmMjY4YTMtMTUxNi00NmQxLWIx YzktZDI2Njc0OWI4YjQwLzM4ZjI2OGEzLTE1MTYtNDZkMS1iMWM5LWQyNjY3NDli OGI0MC5jcmwwHwYDVR0jBBgwFoAUU1BTVJOgp+O5BC9b33+EQLCPtUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOGYyNjhhMy0xNTE2LTQ2ZDEtYjFjOS1kMjY2 NzQ5YjhiNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEch8NajR4mlU5u0Migjp1ELGphq6wMVMl5+QH4NQ9oeJ19pxSqqk8NR 1m9xAyaZ8ejQByhDYu2Fcjc2yAlpJmAtF2z+/PCYb5rgFc/6uFUDoNGa6xtq9lqY HAFGLuhAWf4H6HT/e75HXcqrPbQ2Q2rT9FNkphAkrG9219oJoVHanvYCasDAsGSS 6j484YcaRTyzIbeXtmKRugCRtbWRswNPLliYPMrVYS6mtcgcIxOutJb8VPjUwsUG y53YSsLtDwHser3lci3E9xzbtVqNbT4+XvqDaeeiOxJCdKB5KWzM5b0HgXcv6qv7 Q4S3q1jwSHetJEity4aAC8QhLFmXy30= -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:59 2026 by rpki-client