$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/df2aede7-5a82-3887-8195-2ad6a2f8cc6f.roa File: df2aede7-5a82-3887-8195-2ad6a2f8cc6f.roa (raw, json) Hash identifier: yu0JZSmieNwjUkVZ5FIdwPYc9Yx0HdEALQLKwHJst4w= Subject key identifier: 37:DF:38:ED:4C:85:6E:5C:25:7E:B7:99:9E:92:ED:C3:21:91:0A:F8 Certificate issuer: /CN=38f268a3-1516-46d1-b1c9-d266749b8b40 Certificate serial: 010D0C9F4328584D2644A4BD2D6227422F725080 Authority key identifier: 53:50:53:54:93:A0:A7:E3:B9:04:2F:5B:DF:7F:84:40:B0:8F:B5:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/df2aede7-5a82-3887-8195-2ad6a2f8cc6f.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 26664 IP address blocks: 142.249.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/38f268a3-1516-46d1-b1c9-d266749b8b40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/38f268a3-1516-46d1-b1c9-d266749b8b40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:a4:bd:2d:62:27:42:2f:72:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f268a3-1516-46d1-b1c9-d266749b8b40 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=1783dced-5711-430b-96d1-964dcc18b89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:da:7b:5f:bb:99:ec:9c:11:90:dc:d8:81: f7:24:50:7d:70:33:2e:85:e8:36:9a:7e:db:9a:25: f7:18:3b:a9:20:e7:e7:7b:de:3e:7b:10:de:cd:a6: 61:0a:94:a6:69:18:8f:7e:3d:b4:ea:6a:07:27:bd: 82:6e:14:aa:0e:96:85:56:73:e7:99:72:11:45:34: 6d:d4:3a:b1:e1:20:2d:33:f7:2e:bc:39:9d:2b:c0: c5:10:32:c0:2d:82:b7:b3:fd:5b:39:cc:ca:00:01: 9c:22:de:45:4d:70:c0:87:2d:4a:d0:c8:34:bf:84: ff:58:ad:9e:9f:e1:39:c6:8a:74:2e:20:46:ef:88: 3f:9e:bb:76:4f:40:98:da:51:1a:3a:c6:99:9e:9d: e2:6f:bb:8e:49:3c:af:f1:8a:18:8d:23:fa:e0:5c: 80:71:df:83:37:71:ef:68:c5:ef:63:9f:c5:81:a6: 41:d9:53:f6:ac:8c:e4:ea:52:32:77:32:58:81:16: bb:9d:ec:2d:40:42:4e:e9:7b:19:cc:78:08:7b:79: 71:fd:4c:22:23:94:6c:3f:14:7c:13:97:ec:b3:45: 84:c9:af:2d:4e:8a:ad:6e:a3:cd:ee:33:bf:c0:06: 38:ca:65:37:f2:e1:70:8f:7a:e2:0e:28:83:b2:c3: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:38:ED:4C:85:6E:5C:25:7E:B7:99:9E:92:ED:C3:21:91:0A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/df2aede7-5a82-3887-8195-2ad6a2f8cc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40/38f268a3-1516-46d1-b1c9-d266749b8b40.crl X509v3 Authority Key Identifier: keyid:53:50:53:54:93:A0:A7:E3:B9:04:2F:5B:DF:7F:84:40:B0:8F:B5:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/38f268a3-1516-46d1-b1c9-d266749b8b40.cer sbgp-ipAddrBlock: critical IPv4: 142.249.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:43:82:da:69:cb:c9:76:7e:ec:e5:fa:0c:3f:7c:7c:1d:b9: 61:12:fc:0d:c8:b7:e3:ab:11:1e:7a:5c:3e:80:c6:f5:1c:1b: 62:44:bf:b5:a0:fc:3a:01:bd:bc:5a:17:f3:39:af:4c:04:21: d9:b4:f7:73:58:e8:b2:ca:fc:84:a9:01:31:da:b0:38:13:67: e7:21:13:3a:0e:ab:48:b4:f1:ce:d5:e8:d1:13:e5:9f:9f:6f: 0b:73:35:31:f3:88:54:61:9e:cb:2b:ea:89:3d:fc:ed:36:4b: 2d:7a:85:78:5d:a8:7a:7c:85:1a:c0:e7:08:f8:96:b2:7e:9b: ca:07:3e:fe:d7:25:43:37:b4:00:57:1b:0a:57:fa:5d:1d:16: b5:1f:c3:ff:72:ed:30:4e:a3:1b:24:06:ef:ff:af:37:f5:80: 2a:5d:1a:88:a7:10:fb:37:27:4e:04:0e:6f:31:3a:d0:07:84: 8a:f1:a5:1d:a8:fa:f9:b5:52:cd:7e:82:b0:2c:51:41:6b:1c: 09:2d:30:a2:67:2a:c3:bd:be:30:da:f4:10:06:f3:b0:b1:b2: 9f:18:f0:f0:32:d1:be:09:96:be:81:98:45:4d:db:27:e9:03: 14:14:11:a5:f4:27:af:87:56:e7:9f:ab:c7:da:86:b7:d4:f7: 54:87:76:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKS9LWInQi9yUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmMjY4YTMtMTUxNi00NmQxLWIxYzktZDI2Njc0OWI4 YjQwMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MTc4M2RjZWQtNTcxMS00MzBiLTk2ZDEtOTY0ZGNjMThiODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoHae1+7meycEZDc2IH3JFB9cDMuheg2mn7b miX3GDupIOfne94+exDezaZhCpSmaRiPfj206moHJ72CbhSqDpaFVnPnmXIRRTRt 1Dqx4SAtM/cuvDmdK8DFEDLALYK3s/1bOczKAAGcIt5FTXDAhy1K0Mg0v4T/WK2e n+E5xop0LiBG74g/nrt2T0CY2lEaOsaZnp3ib7uOSTyv8YoYjSP64FyAcd+DN3Hv aMXvY5/FgaZB2VP2rIzk6lIydzJYgRa7newtQEJO6XsZzHgIe3lx/UwiI5RsPxR8 E5fss0WEya8tToqtbqPN7jO/wAY4ymU38uFwj3riDiiDssPDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDffOO1MhW5cJX63mZ6S7cMhkQr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOGYy NjhhMy0xNTE2LTQ2ZDEtYjFjOS1kMjY2NzQ5YjhiNDAvZGYyYWVkZTctNWE4Mi0z ODg3LTgxOTUtMmFkNmEyZjhjYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzhmMjY4YTMtMTUxNi00NmQxLWIx YzktZDI2Njc0OWI4YjQwLzM4ZjI2OGEzLTE1MTYtNDZkMS1iMWM5LWQyNjY3NDli OGI0MC5jcmwwHwYDVR0jBBgwFoAUU1BTVJOgp+O5BC9b33+EQLCPtUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOGYyNjhhMy0xNTE2LTQ2ZDEtYjFjOS1kMjY2 NzQ5YjhiNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Dgtppy8l2fuzl+gw/fHwduWES/A3It+OrER56XD6AxvUcG2JEv7Wg /DoBvbxaF/M5r0wEIdm093NY6LLK/ISpATHasDgTZ+chEzoOq0i08c7V6NET5Z+f bwtzNTHziFRhnssr6ok9/O02Sy16hXhdqHp8hRrA5wj4lrJ+m8oHPv7XJUM3tABX GwpX+l0dFrUfw/9y7TBOoxskBu//rzf1gCpdGoinEPs3J04EDm8xOtAHhIrxpR2o +vm1Us1+grAsUUFrHAktMKJnKsO9vjDa9BAG87Cxsp8Y8PAy0b4Jlr6BmEVN2yfp AxQUEaX0J6+HVuefq8fahrfU91SHdl4= -----END CERTIFICATE-----Generated at Thu Mar 26 06:09:09 2026 by rpki-client