$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa File: 41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa (raw, json) Hash identifier: vnAccYBVCUgk92UxeTcB02vufLXyLmIGeI476SXkoVU= Subject key identifier: 0D:1F:6B:EB:F3:4F:CE:33:EB:C2:BF:A1:36:A9:32:44:4A:A0:9B:50 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D3BC00A6FFFB1B683C8683D60 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa Signing time: Fri 20 Mar 2026 17:41:12 +0000 ROA not before: Fri 20 Mar 2026 17:41:12 +0000 ROA not after: Thu 18 Jun 2026 17:41:12 +0000 asID: 273872 IP address blocks: 38.196.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:0a:6f:ff:b1:b6:83:c8:68:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 20 17:41:12 2026 GMT Not After : Jun 18 17:41:12 2026 GMT Subject: CN=a524f9c2-e99a-4f38-b72d-c04592b9b61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:63:2b:05:ee:96:60:bc:7f:e4:5f:ae:ff: 58:ff:61:4c:56:25:ff:ed:42:14:12:c8:1f:27:df: 9e:fb:58:66:68:25:c3:d0:08:cb:29:05:86:08:f9: a4:0e:c4:9c:7d:89:17:a3:74:ed:f9:4a:72:20:80: 6c:af:ae:c5:c5:b1:ad:e8:98:43:d8:0e:2a:55:53: 96:04:7b:f0:cd:8c:10:60:3f:29:9c:45:9b:81:35: ab:9d:0a:b1:4f:b0:c4:6a:dd:71:bc:de:25:05:c6: f2:15:e2:91:c7:74:bb:81:3e:c6:a6:4d:de:e6:b1: 6a:32:eb:ee:8e:62:4a:21:30:d6:99:f4:b6:b7:2d: 78:4f:d4:4f:d2:9a:e5:f0:d9:3e:dd:42:93:45:dc: 90:8e:0b:10:58:2d:a3:87:e4:d2:5b:cc:24:4d:20: c4:70:4e:10:91:14:cf:d3:eb:47:bb:0c:a4:d2:fa: 29:43:69:f3:e8:70:4a:ac:4e:1f:de:5a:52:fd:24: 44:f5:14:13:f5:2f:63:65:b9:4c:3c:4c:2c:7f:75: 29:f5:9e:f9:54:6b:03:52:96:e1:3a:9e:c9:a2:ee: 30:62:16:78:01:d5:74:04:65:e0:5b:cf:f5:72:c0: 6a:ba:c5:b0:e3:47:81:96:f9:6b:09:2f:d2:8d:0f: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1F:6B:EB:F3:4F:CE:33:EB:C2:BF:A1:36:A9:32:44:4A:A0:9B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:af:9c:c0:00:73:13:f4:ce:8c:d6:56:ef:b1:51:ba:9f:4a: 0d:6e:4b:10:17:43:21:f9:ab:da:c9:08:86:8d:87:1f:59:2f: 4f:32:aa:55:ef:01:5d:70:ac:8a:79:c7:57:b1:ae:33:0a:44: 0a:33:ef:a3:87:4f:ec:ea:99:ad:a2:bb:8e:66:be:60:78:d0: ce:37:c5:00:b5:32:84:1b:f5:62:8e:a0:ad:7c:34:33:50:13: 03:fd:3d:9d:96:d5:e8:09:6b:50:0b:69:22:c4:39:fe:c0:92: 9c:6f:94:37:c7:6f:3c:c1:3c:61:bc:ad:d2:03:9e:cf:8c:76: c9:45:e6:45:bf:97:f1:d3:c3:29:c8:ce:0f:be:b2:2c:e8:16: f6:ac:09:15:b5:ed:c7:20:da:ce:44:ea:ec:86:74:01:1d:05: f8:73:5e:7a:7e:31:c3:b1:0f:92:57:4b:b7:e8:27:4b:4a:58: 66:d6:b1:b4:9f:81:26:5c:8e:4f:67:ed:a0:d7:2e:59:d8:a7: dd:0d:7e:81:64:fa:91:98:9f:b2:28:8d:d5:9a:b7:14:d9:7a: 60:89:d2:cc:ec:30:03:23:83:d1:68:0a:1f:68:90:a6:3b:c9: d4:a2:85:d8:13:4d:01:28:1b:e0:3b:b3:fc:30:89:d3:18:c9: dc:d5:b9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07wApv/7G2g8hoPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMDE3NDExMloXDTI2MDYxODE3NDExMlowLzEtMCsGA1UEAxMk YTUyNGY5YzItZTk5YS00ZjM4LWI3MmQtYzA0NTkyYjliNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPdjKwXulmC8f+Rfrv9Y/2FMViX/7UIUEsgf J9+e+1hmaCXD0AjLKQWGCPmkDsScfYkXo3Tt+UpyIIBsr67FxbGt6JhD2A4qVVOW BHvwzYwQYD8pnEWbgTWrnQqxT7DEat1xvN4lBcbyFeKRx3S7gT7Gpk3e5rFqMuvu jmJKITDWmfS2ty14T9RP0prl8Nk+3UKTRdyQjgsQWC2jh+TSW8wkTSDEcE4QkRTP 0+tHuwyk0vopQ2nz6HBKrE4f3lpS/SRE9RQT9S9jZblMPEwsf3Up9Z75VGsDUpbh Op7Jou4wYhZ4AdV0BGXgW8/1csBqusWw40eBlvlrCS/SjQ93FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0fa+vzT84z68K/oTapMkRKoJtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDFkYjRlM2QtNDJlMi0z ZjZmLTlmZjgtMzgzNDg1ZmU2ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICvnMAAcxP0zozWVu+xUbqfSg1uSxAXQyH5q9rJCIaNhx9ZL08yqlXv AV1wrIp5x1exrjMKRAoz76OHT+zqma2iu45mvmB40M43xQC1MoQb9WKOoK18NDNQ EwP9PZ2W1egJa1ALaSLEOf7AkpxvlDfHbzzBPGG8rdIDns+MdslF5kW/l/HTwynI zg++sizoFvasCRW17ccg2s5E6uyGdAEdBfhzXnp+McOxD5JXS7foJ0tKWGbWsbSf gSZcjk9n7aDXLlnYp90NfoFk+pGYn7IojdWatxTZemCJ0szsMAMjg9FoCh9okKY7 ydSihdgTTQEoG+A7s/wwidMYydzVueM= -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:45 2026 by rpki-client