$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa File: 00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa (raw, json) Hash identifier: rApXtCZuL2MseZhCpGcTuD2lEmziYyL5XoBMkQXF7ig= Subject key identifier: 72:01:F1:0C:FC:D5:0C:21:99:D7:DC:31:6F:5D:E3:01:D2:C1:42:31 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC6DB964F1BC3F395EB180 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 138.1.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:6d:b9:64:f1:bc:3f:39:5e:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=8e695225-bef8-4f0b-a4fa-b93c59cbd41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:29:cb:ad:5d:31:ba:a5:80:b2:66:30:1f: 7c:2f:73:63:1b:12:c0:4f:29:df:74:e0:31:e4:51: 9d:67:75:19:f6:1a:1d:3f:09:77:3d:ff:ff:c4:71: 64:ab:0b:75:20:63:21:d2:9e:d5:c3:c6:89:0c:e0: a0:38:98:62:9f:d7:70:22:48:f5:c9:36:f1:4a:07: 29:c6:8e:03:5c:18:a2:48:a7:42:29:3c:e4:f9:c3: 82:a0:d6:a0:34:65:6c:82:9a:6a:29:a5:62:2f:b3: a7:f5:ad:d9:b0:5d:08:4c:d4:0a:0f:9d:65:21:1e: d3:67:1f:41:62:8a:95:34:47:10:08:9a:12:e6:9b: 13:a9:d3:5f:f9:c3:73:a0:d4:e6:37:15:f4:a0:89: c0:37:9b:8e:06:d7:6c:8b:fd:7b:c8:f8:3b:c4:9c: 67:9e:2c:d0:b3:27:2f:e8:b9:d8:37:bf:b4:c0:c8: 4b:78:7a:e4:ae:1d:ec:a8:ea:13:42:4e:be:57:aa: 0a:e6:18:f6:31:24:48:3f:64:60:96:b9:72:ee:14: 65:fe:db:fd:a5:bb:3f:b3:40:49:bf:eb:d4:a0:13: 74:aa:10:67:2a:65:73:a9:8c:de:30:c8:a0:1e:be: f9:b5:a3:12:ca:eb:d7:62:f4:2b:12:2a:9e:17:78: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:01:F1:0C:FC:D5:0C:21:99:D7:DC:31:6F:5D:E3:01:D2:C1:42:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:cc:20:7e:29:69:c0:ff:a5:9d:6a:16:c0:bb:d7:b2:a8: bf:e3:f6:d8:f7:4c:16:91:fa:84:bb:a5:0c:28:d9:56:db:74: 05:ad:a3:05:f3:8c:f9:8f:6e:f8:4b:e8:88:70:01:4c:9a:25: 57:80:ab:c3:eb:06:02:e4:15:fe:63:bd:6c:26:18:58:69:aa: f0:68:e8:ea:31:99:e0:8a:33:57:ba:5d:8e:34:93:f7:d2:3c: ac:b8:14:87:e5:4c:77:3d:a3:b3:09:8e:f5:3f:0f:a2:b6:06: 85:f7:76:0b:17:12:dd:f9:4c:bf:c1:48:a8:70:75:2c:e9:e4: 4d:9c:1d:2b:aa:e2:b4:25:af:9a:40:0d:01:0a:f4:b5:f1:37: a2:0c:01:fe:ee:a5:a0:8e:66:fb:f9:7a:84:24:55:9e:3d:3a: 09:a6:ab:f9:ca:bc:40:ea:ef:df:96:fc:50:a0:a7:9f:2c:35: 2f:dc:71:fb:15:ce:29:f1:97:91:c8:be:a5:15:6a:68:53:7f: 31:47:02:63:f6:5e:37:cb:94:3c:c0:17:56:d1:e4:82:3c:eb: 1b:42:65:42:63:06:2f:3c:74:9b:76:23:3d:c4:4a:17:c1:0a: 70:81:9f:19:34:2a:f2:b4:b5:72:b0:f1:42:c2:7a:00:3a:54: 4e:49:da:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvG25ZPG8PzlesYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGU2OTUyMjUtYmVmOC00ZjBiLWE0ZmEtYjkzYzU5Y2JkNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UQpy61dMbqlgLJmMB98L3NjGxLATynfdOAx 5FGdZ3UZ9hodPwl3Pf//xHFkqwt1IGMh0p7Vw8aJDOCgOJhin9dwIkj1yTbxSgcp xo4DXBiiSKdCKTzk+cOCoNagNGVsgppqKaViL7On9a3ZsF0ITNQKD51lIR7TZx9B YoqVNEcQCJoS5psTqdNf+cNzoNTmNxX0oInAN5uOBtdsi/17yPg7xJxnnizQsycv 6LnYN7+0wMhLeHrkrh3sqOoTQk6+V6oK5hj2MSRIP2Rglrly7hRl/tv9pbs/s0BJ v+vUoBN0qhBnKmVzqYzeMMigHr75taMSyuvXYvQrEiqeF3iALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIB8Qz81QwhmdfcMW9d4wHSwUIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDBkMGI2YTItMmI4Ny0z MWY5LWEzMzctM2EzZGM1NjQ3ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDigEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2yzCB+KWnA/6WdahbAu9eyqL/j9tj3TBaR+oS7pQwo2VbbdAWtowXz jPmPbvhL6IhwAUyaJVeAq8PrBgLkFf5jvWwmGFhpqvBo6OoxmeCKM1e6XY40k/fS PKy4FIflTHc9o7MJjvU/D6K2BoX3dgsXEt35TL/BSKhwdSzp5E2cHSuq4rQlr5pA DQEK9LXxN6IMAf7upaCOZvv5eoQkVZ49Ogmmq/nKvEDq79+W/FCgp58sNS/ccfsV zinxl5HIvqUVamhTfzFHAmP2XjfLlDzAF1bR5II86xtCZUJjBi88dJt2Iz3EShfB CnCBnxk0KvK0tXKw8ULCegA6VE5J2u4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:17 2026 by rpki-client