$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa File: 146604be-880c-37ee-a349-7f94f48d3400.roa (raw, json) Hash identifier: U6kU2E4N1TJ4NAPgFfLty2zzZff+1EmLzyH3ptp9mYI= Subject key identifier: 2C:FA:67:F2:8A:59:B8:CE:14:60:30:21:12:F5:D4:33:98:9D:CE:79 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D5234F0BC2DEFCEA5184ED700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa Signing time: Sat 28 Mar 2026 18:44:32 +0000 ROA not before: Sat 28 Mar 2026 18:44:32 +0000 ROA not after: Wed 24 Jun 2026 17:09:45 +0000 asID: 271951 IP address blocks: 38.196.64.0/19 maxlen: 24 38.252.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f0:bc:2d:ef:ce:a5:18:4e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 28 18:44:32 2026 GMT Not After : Jun 24 17:09:45 2026 GMT Subject: CN=414d37f4-6505-47cb-9ade-087656a745ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c2:3d:69:db:ac:26:f3:36:9f:66:79:d1:21: 3e:34:d2:9d:c2:be:92:d4:d5:e1:6c:d3:1a:61:a0: d7:c1:70:a6:48:01:44:32:6e:9b:73:3d:08:92:5c: a2:7a:06:d5:10:89:97:b5:57:fc:6d:2f:44:1f:3a: cb:48:5b:23:08:d8:a8:17:b0:4f:c5:cb:8d:91:ac: 47:ee:3a:6f:57:ba:d9:e7:b0:f9:a7:d1:f6:66:9b: f2:ce:4c:95:fc:84:ca:d1:d8:65:a8:6d:58:df:29: 3c:b1:bf:51:a9:5b:7d:eb:2d:e5:bb:c5:02:af:ad: 91:1d:70:72:b6:70:f8:d0:f0:b3:c6:7d:a7:42:64: 80:92:e8:d5:ba:2d:70:96:76:00:2a:06:e7:f1:aa: 95:c1:89:b0:9b:cd:a5:b8:6a:98:0c:41:0e:39:e0: 3e:98:8d:78:d8:cf:0b:c5:92:68:b0:4e:a2:d5:2a: 11:4c:0f:6c:4b:5a:40:9f:ad:1c:45:a4:48:8b:d8: 58:51:65:70:60:a2:36:55:f4:6f:e6:77:6a:a6:bf: 5b:69:0e:87:94:12:c2:42:04:fd:b5:2c:d7:ad:12: 4d:c9:52:b9:34:f4:e5:e0:7f:99:b7:42:3c:c4:11: d2:bc:b7:c5:35:52:dd:ce:e2:d4:62:4a:7b:81:3f: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FA:67:F2:8A:59:B8:CE:14:60:30:21:12:F5:D4:33:98:9D:CE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.64.0/19 38.252.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cd:47:ae:26:f2:cf:9d:b9:42:dc:2e:7a:eb:71:35:08:8d: 92:5f:48:a7:5b:07:d3:a9:72:0c:94:82:3d:e2:90:3c:93:00: 20:f6:0b:97:61:75:2c:a7:7a:df:81:c9:1e:3c:5d:7e:70:39: c5:0e:22:d9:99:0f:dc:fa:ab:76:e6:a4:55:69:03:f5:0f:8b: 67:61:89:e9:56:5e:94:3b:97:5b:14:02:e4:d9:e4:d4:eb:73: cc:ca:91:92:ab:ac:49:97:f1:50:c7:d9:d8:f8:8e:85:2c:05: 50:94:07:b8:0b:0e:22:34:3d:06:1c:2d:4f:d7:fa:b8:82:f4: 84:68:68:80:d4:47:02:68:c2:27:b6:5f:68:6a:61:20:93:b0: 94:02:66:65:c1:00:6f:c5:f9:22:cb:eb:03:a0:1e:7d:16:14: 8e:5c:e2:f6:78:a3:b8:dc:d7:07:44:97:8b:4d:2f:f8:76:42: 56:b0:fe:8b:bb:1b:7b:6e:c2:16:54:1c:76:d7:74:03:04:55: 6f:a1:d8:69:00:d1:b0:ab:8f:4f:18:ca:47:ef:b9:4e:d8:80: 3a:48:cb:54:62:6d:af:45:f7:ac:60:96:6c:0c:b0:42:90:5c: ff:c5:da:e9:eb:62:de:4d:70:ab:7a:a4:c0:ef:a0:de:3e:35: e9:44:6f:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNPC8Le/OpRhO1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyODE4NDQzMloXDTI2MDYyNDE3MDk0NVowLzEtMCsGA1UEAxMk NDE0ZDM3ZjQtNjUwNS00N2NiLTlhZGUtMDg3NjU2YTc0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisI9adusJvM2n2Z50SE+NNKdwr6S1NXhbNMa YaDXwXCmSAFEMm6bcz0IklyiegbVEImXtVf8bS9EHzrLSFsjCNioF7BPxcuNkaxH 7jpvV7rZ57D5p9H2ZpvyzkyV/ITK0dhlqG1Y3yk8sb9RqVt96y3lu8UCr62RHXBy tnD40PCzxn2nQmSAkujVui1wlnYAKgbn8aqVwYmwm82luGqYDEEOOeA+mI142M8L xZJosE6i1SoRTA9sS1pAn60cRaRIi9hYUWVwYKI2VfRv5ndqpr9baQ6HlBLCQgT9 tSzXrRJNyVK5NPTl4H+Zt0I8xBHSvLfFNVLdzuLUYkp7gT829QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCz6Z/KKWbjOFGAwIRL11DOYnc55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTQ2NjA0YmUtODgwYy0z N2VlLWEzNDktN2Y5NGY0OGQzNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJsRAAwQC Jvy4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHTNR64m8s+duULcLnrrcTUIjZJfSKdbB9OpcgyUgj3ikDyT ACD2C5dhdSynet+ByR48XX5wOcUOItmZD9z6q3bmpFVpA/UPi2dhielWXpQ7l1sU AuTZ5NTrc8zKkZKrrEmX8VDH2dj4joUsBVCUB7gLDiI0PQYcLU/X+riC9IRoaIDU RwJowie2X2hqYSCTsJQCZmXBAG/F+SLL6wOgHn0WFI5c4vZ4o7jc1wdEl4tNL/h2 Qlaw/ou7G3tuwhZUHHbXdAMEVW+h2GkA0bCrj08YykfvuU7YgDpIy1Riba9F96xg lmwMsEKQXP/F2unrYt5NcKt6pMDvoN4+NelEb5w= -----END CERTIFICATE-----Generated at Wed Apr 8 09:15:47 2026 by rpki-client