$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ef967cdc-4376-38ae-86dd-fc3297eab736.roa File: ef967cdc-4376-38ae-86dd-fc3297eab736.roa (raw, json) Hash identifier: pLxBabQgstbEAyg4tZ5lafQdE6OVFPANu+qsqwcfm80= Subject key identifier: D1:CE:EA:6B:9B:9A:69:97:81:97:67:0C:56:F1:37:8B:E4:98:8D:64 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584DAF102D4F0E97064588347C00 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ef967cdc-4376-38ae-86dd-fc3297eab736.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 400662 IP address blocks: 57.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2d:4f:0e:97:06:45:88:34:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=c0d1e054-849e-4d6c-86d3-1e183c1aef1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:2d:8e:4a:b7:38:44:76:d3:5b:8f:39:23: fd:80:b6:31:9f:e2:5b:59:c6:d7:4f:de:5b:9c:2b: 5a:50:a7:df:14:24:26:96:e3:60:a2:61:b8:1f:f6: c2:83:f4:65:a4:73:5c:23:09:b5:e6:18:38:14:53: ac:fb:72:0c:af:f4:59:e4:a7:3a:5c:ff:d0:af:b4: 65:06:62:fc:b4:0f:65:da:31:d3:33:32:75:2f:3c: 8d:1d:78:a3:51:e5:3d:87:bc:9f:51:9a:d0:d6:2b: 3e:5e:9c:1d:1f:ae:69:6e:97:ff:e1:13:ca:22:b5: 5b:a0:18:ec:bb:40:f1:ec:69:5d:77:8f:ae:5a:52: cb:9f:96:8b:7e:61:e3:c6:ea:0e:fe:1d:ab:df:53: 70:e7:1d:a4:b3:4b:f9:2c:82:0d:9d:82:14:fb:f3: ba:f6:48:c8:64:08:fa:dc:c1:87:95:e2:37:d2:56: 3c:93:ad:42:22:98:80:f6:c5:c1:83:eb:7f:49:4a: 61:bc:55:ea:83:d9:43:43:91:fc:17:0f:e6:1d:82: f6:09:a1:e9:64:2e:55:08:ad:2b:c4:c1:16:09:cf: 8b:71:58:6f:63:79:c6:70:5c:26:29:47:49:58:75: 74:c8:4a:96:54:42:b0:83:cf:d8:91:4b:7d:80:0f: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:EA:6B:9B:9A:69:97:81:97:67:0C:56:F1:37:8B:E4:98:8D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ef967cdc-4376-38ae-86dd-fc3297eab736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 57.138.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e0:57:7c:33:1b:f1:52:22:ad:25:b7:fc:9e:47:6f:c0:90: 63:83:17:4f:c1:e2:90:c5:fa:22:e3:64:5a:13:c9:e7:ec:6f: 77:c6:4e:22:11:25:83:4a:79:73:6e:ae:c8:a2:e9:99:06:42: 3e:64:d8:7e:e9:66:c2:8e:74:fb:d5:94:7c:c0:b7:21:8c:ea: 25:2e:76:b2:7a:bf:74:05:53:af:74:32:5b:62:d5:75:fd:a1: 5e:b4:58:ef:35:53:9a:28:5c:c4:e9:90:69:e2:ee:bc:80:e9: 11:b6:7e:61:66:94:5e:11:14:45:a5:1e:fe:05:d2:20:44:f3: 2e:21:b1:86:90:fa:3c:8f:b2:bc:9e:9d:82:e6:09:f3:17:76: 8a:a4:7d:3c:4c:e1:2e:60:ad:d0:b3:2c:9d:59:d5:0c:ae:bf: bc:62:9a:f4:3a:5c:63:d5:30:61:3d:c2:8b:71:ab:a6:b8:98: c7:bc:80:94:fe:5b:7d:54:e5:4f:b4:38:97:2f:5a:14:b5:ea: b3:b4:83:2b:f7:c2:15:58:fc:4c:54:9e:7d:00:d7:c1:37:e0: b0:cd:0c:f8:bd:75:d4:90:b9:ba:c6:a8:00:72:e4:67:90:e5: 5b:a4:64:d7:17:f9:43:8a:0b:85:48:53:53:e6:36:37:4a:4a: e9:30:f0:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2vEC1PDpcGRYg0fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk YzBkMWUwNTQtODQ5ZS00ZDZjLTg2ZDMtMWUxODNjMWFlZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR0tjkq3OER201uPOSP9gLYxn+JbWcbXT95b nCtaUKffFCQmluNgomG4H/bCg/RlpHNcIwm15hg4FFOs+3IMr/RZ5Kc6XP/Qr7Rl BmL8tA9l2jHTMzJ1LzyNHXijUeU9h7yfUZrQ1is+XpwdH65pbpf/4RPKIrVboBjs u0Dx7Gldd4+uWlLLn5aLfmHjxuoO/h2r31Nw5x2ks0v5LIINnYIU+/O69kjIZAj6 3MGHleI30lY8k61CIpiA9sXBg+t/SUphvFXqg9lDQ5H8Fw/mHYL2CaHpZC5VCK0r xMEWCc+LcVhvY3nGcFwmKUdJWHV0yEqWVEKwg8/YkUt9gA8YhwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNHO6mubmmmXgZdnDFbxN4vkmI1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvZWY5NjdjZGMtNDM3Ni0z OGFlLTg2ZGQtZmMzMjk3ZWFiNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOYowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADeBXfDMb8VIirSW3/J5Hb8CQY4MXT8HikMX6IuNkWhPJ5+xvd8ZOIhEl g0p5c26uyKLpmQZCPmTYfulmwo50+9WUfMC3IYzqJS52snq/dAVTr3QyW2LVdf2h XrRY7zVTmihcxOmQaeLuvIDpEbZ+YWaUXhEURaUe/gXSIETzLiGxhpD6PI+yvJ6d guYJ8xd2iqR9PEzhLmCt0LMsnVnVDK6/vGKa9DpcY9UwYT3Ci3GrpriYx7yAlP5b fVTlT7Q4ly9aFLXqs7SDK/fCFVj8TFSefQDXwTfgsM0M+L111JC5usaoAHLkZ5Dl W6Rk1xf5Q4oLhUhTU+Y2N0pK6TDw/Q== -----END CERTIFICATE-----Generated at Thu May 7 01:12:22 2026 by rpki-client