$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa File: 5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa (raw, json) Hash identifier: /QzE0QUKQ64RCp4I2Dp5vZffg1olsVXf/Vh6Vi+/9Wk= Subject key identifier: DD:E5:9A:11:08:71:91:86:DA:1C:C6:B9:49:47:16:52:9E:21:A9:D8 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584C9967061ACE65CDA3C0C06FC0 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 11260 IP address blocks: 24.129.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:06:1a:ce:65:cd:a3:c0:c0:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=4789a47c-3231-4a71-8e59-6d925c5c84ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:e5:e5:04:e9:f2:c9:16:e8:8e:a7:6a:76: e8:6a:be:a9:37:02:40:9b:eb:c1:b2:04:19:e8:d6: 7d:29:e5:a1:54:06:65:0f:3d:2b:72:a1:17:6b:3d: 30:a8:7f:2b:64:04:87:f4:71:ad:02:ae:ce:ac:b0: cf:1f:bc:7f:5b:d6:1c:53:e6:47:cc:a7:29:ee:56: a9:b6:ee:96:a9:aa:90:b1:e3:0d:3d:70:a8:fc:7b: c1:b4:22:7f:5f:bb:6a:69:2d:56:d8:cb:17:7a:72: a9:fd:5e:1e:37:40:ab:72:34:75:10:bf:22:3d:74: 8c:35:67:2a:83:98:d2:5f:f3:ad:04:2a:b4:8c:08: f9:3e:4d:ce:26:82:51:c0:fc:ec:b1:76:e3:38:f6: 9c:53:fd:05:e0:f6:eb:72:8c:38:ca:00:5d:29:5a: e4:9b:ae:16:37:1b:03:20:0b:72:94:b5:61:0f:8a: 5d:e5:97:0a:d9:15:0d:fa:1e:51:8a:ad:5c:89:62: 5c:e6:91:b5:5a:47:89:25:77:18:be:d1:1b:57:ff: 75:50:98:c2:10:88:f9:dd:ba:d1:a1:7f:b6:ad:f6: fa:b2:c0:f6:5f:18:11:02:b3:9d:42:38:66:23:ac: c8:3f:0c:dc:d2:2e:29:13:cc:0f:3b:0f:76:28:27: 3d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E5:9A:11:08:71:91:86:DA:1C:C6:B9:49:47:16:52:9E:21:A9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 24.129.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f7:92:83:fc:3d:f4:01:59:3b:cf:60:4c:ca:6e:68:21:6a: 25:56:ac:75:18:44:20:6f:2e:55:4d:2f:5f:ce:9d:3d:14:34: 6f:ef:27:37:38:fa:42:f6:d7:02:f1:49:54:73:b0:ee:59:2a: cb:78:78:f9:ba:4f:b2:12:29:a2:bc:69:81:4a:ca:36:cc:59: d5:92:01:73:51:43:ab:90:e3:6b:ad:6f:4f:5e:19:cc:c0:90: 55:4e:d4:96:25:4a:7b:bf:23:4c:ce:b4:e6:18:37:60:6a:11: 79:16:94:a2:a4:ea:16:00:be:be:5b:47:10:04:be:e3:e1:07: 68:f6:f1:42:78:d0:3c:3a:45:24:5e:39:1c:69:ea:1e:30:19: 31:2c:ed:80:b2:bb:c1:00:06:eb:ab:21:de:8c:32:b6:48:9d: d0:ab:a1:02:96:66:36:75:ec:27:5e:c2:02:6d:76:e2:e7:7b: 77:e8:70:72:79:15:11:53:50:0b:c7:19:18:8b:dd:b6:c6:81: 9a:69:1f:1a:54:86:1d:a3:27:6c:90:ee:62:c1:76:40:db:12: cd:14:c6:cf:0a:ea:b0:da:92:81:1d:a2:27:2e:7a:0c:49:b2: 1c:f6:24:ef:f9:39:f4:f5:0a:75:8a:ee:ae:8b:34:9f:46:25: 29:fa:30:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZwYazmXNo8DAb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk NDc4OWE0N2MtMzIzMS00YTcxLThlNTktNmQ5MjVjNWM4NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQbl5QTp8skW6I6nanboar6pNwJAm+vBsgQZ 6NZ9KeWhVAZlDz0rcqEXaz0wqH8rZASH9HGtAq7OrLDPH7x/W9YcU+ZHzKcp7lap tu6WqaqQseMNPXCo/HvBtCJ/X7tqaS1W2MsXenKp/V4eN0CrcjR1EL8iPXSMNWcq g5jSX/OtBCq0jAj5Pk3OJoJRwPzssXbjOPacU/0F4Pbrcow4ygBdKVrkm64WNxsD IAtylLVhD4pd5ZcK2RUN+h5Riq1ciWJc5pG1WkeJJXcYvtEbV/91UJjCEIj53brR oX+2rfb6ssD2XxgRArOdQjhmI6zIPwzc0i4pE8wPOw92KCc96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3lmhEIcZGG2hzGuUlHFlKeIanYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNWViY2QxNmUtMWJhOC0z MjAzLTg0YjgtMDlkZTBjMWY0MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv3koP8PfQBWTvPYEzKbmghaiVWrHUYRCBvLlVNL1/OnT0UNG/vJzc4 +kL21wLxSVRzsO5ZKst4ePm6T7ISKaK8aYFKyjbMWdWSAXNRQ6uQ42utb09eGczA kFVO1JYlSnu/I0zOtOYYN2BqEXkWlKKk6hYAvr5bRxAEvuPhB2j28UJ40Dw6RSRe ORxp6h4wGTEs7YCyu8EABuurId6MMrZIndCroQKWZjZ17CdewgJtduLne3focHJ5 FRFTUAvHGRiL3bbGgZppHxpUhh2jJ2yQ7mLBdkDbEs0Uxs8K6rDakoEdoicuegxJ shz2JO/5OfT1CnWK7q6LNJ9GJSn6MM4= -----END CERTIFICATE-----Generated at Fri Feb 27 12:40:27 2026 by rpki-client