$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa File: 1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa (raw, json) Hash identifier: SsOWeS1oWXpoXUa4quDqlRuNgz/krlFeya6RySeHDTQ= Subject key identifier: BD:80:1C:52:39:54:35:02:08:89:0F:56:A0:D8:C8:BE:FB:B9:97:AB Certificate issuer: /CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe Certificate serial: 010D0C9F4328584CB121CD474C6F2DDFC0D503A0 Authority key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 63436 IP address blocks: 138.43.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cd:47:4c:6f:2d:df:c0:d5:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=dd6d3b56-d10a-4230-91a1-59d8eeb0aa1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:70:82:21:fd:5a:b6:26:bf:e3:5f:dd:9b: 88:db:50:13:51:5a:74:78:a0:76:94:66:b5:bf:8c: 31:8c:51:c3:e4:55:05:58:dc:ee:30:41:45:6e:52: 00:1b:58:da:f3:30:b6:2a:12:a2:a2:95:9e:42:1c: 68:9b:2d:16:b6:9e:6d:58:b9:80:11:75:3a:32:25: 03:22:76:7f:8c:8c:c1:49:a0:76:29:20:95:90:7d: 9a:da:c5:59:69:25:e3:aa:c2:c6:91:5a:d3:10:c8: 17:5d:90:06:b6:8e:56:85:e4:40:b0:b9:bb:33:3a: d5:24:41:6e:10:bd:6f:18:37:93:4d:7f:14:fa:b5: 66:53:76:1b:00:c6:ad:21:4c:9c:6d:32:07:e3:b6: 38:a9:b0:1c:24:63:a4:6d:87:b5:5e:09:b1:08:07: d4:50:e6:a2:99:dd:fb:29:53:25:23:f3:d5:26:3a: ce:b0:00:f7:b8:6c:a9:d6:11:f2:fc:ba:66:f2:3c: 34:51:51:61:31:df:77:25:23:ac:71:3e:e8:22:83: 6b:27:19:aa:fd:d3:33:0c:d8:38:1c:5c:06:7e:b0: 18:aa:a4:52:45:bc:1d:01:7c:d4:7e:b3:38:86:f6: 0a:0e:92:b7:5f:ee:1e:61:b0:0a:f3:a3:51:2f:eb: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:80:1C:52:39:54:35:02:08:89:0F:56:A0:D8:C8:BE:FB:B9:97:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl X509v3 Authority Key Identifier: keyid:D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer sbgp-ipAddrBlock: critical IPv4: 138.43.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ff:62:a1:a5:98:13:9f:a7:dd:dd:d8:98:a7:de:1b:ac:8b: a5:4a:97:4a:73:52:45:eb:c4:89:5e:df:d8:79:dd:60:f3:53: bc:ac:d6:37:7d:d5:8e:a1:7e:b3:a2:ae:35:98:c4:cb:a3:3d: 92:d0:2b:ba:5d:2c:a6:84:91:96:1a:3d:53:54:45:f1:72:e5: 41:6f:0d:93:24:9e:ea:ec:4e:6c:8c:21:97:0a:b4:ff:2e:42: d6:d4:70:3b:9c:8a:06:9c:6c:bc:a8:e2:e9:d7:5c:55:42:05: e0:d8:da:99:1a:67:1f:10:71:9f:45:ad:34:93:f4:1a:2a:5b: 37:2b:05:7e:d5:ff:1c:32:74:e1:e3:2a:e3:29:a3:7c:0d:88: 98:e2:68:02:69:ad:99:f4:c6:f6:e1:ff:2e:bf:8b:59:c9:8d: ce:55:ad:d8:f6:ff:27:5a:fe:05:05:4f:8b:e6:8a:0b:39:8c: 50:8f:ca:90:cd:54:3e:1a:8b:3b:b3:12:3d:92:41:13:a8:c3: ff:94:6b:df:6b:4a:ec:d1:bf:20:8b:a6:f6:77:f6:dd:0f:ad: 4c:96:bc:c6:79:61:63:e9:d8:ce:e1:96:36:6c:c0:e2:c5:6c: 21:74:1b:8d:64:3e:a7:f4:0a:f5:49:77:81:18:5e:7b:73:17: 3a:11:04:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIc1HTG8t38DVA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjNDAxMTItYmM4NS00Zjc1LTliYjAtNDcxZWM4NGJh M2ZlMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGQ2ZDNiNTYtZDEwYS00MjMwLTkxYTEtNTlkOGVlYjBhYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3pwgiH9WrYmv+Nf3ZuI21ATUVp0eKB2lGa1 v4wxjFHD5FUFWNzuMEFFblIAG1ja8zC2KhKiopWeQhxomy0Wtp5tWLmAEXU6MiUD InZ/jIzBSaB2KSCVkH2a2sVZaSXjqsLGkVrTEMgXXZAGto5WheRAsLm7MzrVJEFu EL1vGDeTTX8U+rVmU3YbAMatIUycbTIH47Y4qbAcJGOkbYe1XgmxCAfUUOaimd37 KVMlI/PVJjrOsAD3uGyp1hHy/Lpm8jw0UVFhMd93JSOscT7oIoNrJxmq/dMzDNg4 HFwGfrAYqqRSRbwdAXzUfrM4hvYKDpK3X+4eYbAK86NRL+vIiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2AHFI5VDUCCIkPVqDYyL77uZerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMGM0 MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0YmEzZmUvMWMyZjE0OWQtMzNmMS0z YTIwLThkNjEtOWJhYzM0ZWZiMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTBjNDAxMTItYmM4NS00Zjc1LTli YjAtNDcxZWM4NGJhM2ZlLzEwYzQwMTEyLWJjODUtNGY3NS05YmIwLTQ3MWVjODRi YTNmZS5jcmwwHwYDVR0jBBgwFoAU2OJcD1iYlNnHcbK+9mKxgReIKrgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFl Yzg0YmEzZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiit4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3/YqGlmBOfp93d2Jin3husi6VKl0pzUkXrxIle39h53WDzU7ys1jd9 1Y6hfrOirjWYxMujPZLQK7pdLKaEkZYaPVNURfFy5UFvDZMknursTmyMIZcKtP8u QtbUcDucigacbLyo4unXXFVCBeDY2pkaZx8QcZ9FrTST9BoqWzcrBX7V/xwydOHj KuMpo3wNiJjiaAJprZn0xvbh/y6/i1nJjc5Vrdj2/yda/gUFT4vmigs5jFCPypDN VD4aizuzEj2SQROow/+Ua99rSuzRvyCLpvZ39t0PrUyWvMZ5YWPp2M7hljZswOLF bCF0G41kPqf0CvVJd4EYXntzFzoRBIo= -----END CERTIFICATE-----Generated at Mon Feb 23 18:40:59 2026 by rpki-client