$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa File: 064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa (raw, json) Hash identifier: L8GqEzNWNdRtDHSAERaslDLpuPUZ6mSi8bD+yqRuCyw= Subject key identifier: C7:D2:CA:DB:D9:4D:84:A0:D9:CD:63:03:6D:9B:BA:AE:A3:93:10:3D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EC34D26FFDE743E875FE0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c3:4d:26:ff:de:74:3e:87:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e9207355-565f-40b0-9c52-a46ff4e205db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:78:29:c7:75:1c:8a:d5:8d:a6:63:19:d6: 1a:76:a9:a9:4f:ec:f1:05:8f:ae:15:c3:12:d0:68: 2d:46:64:8b:ea:74:b0:26:a5:29:a7:4c:80:a6:42: 96:a6:76:b3:5f:6b:49:a8:fe:03:7c:29:eb:c4:5b: 1c:ed:4a:c6:ab:6c:9c:67:fd:cc:ab:c2:f7:26:43: 83:15:51:78:c0:0b:19:d2:92:0b:19:d9:8c:b6:f2: d2:76:f4:8f:94:fe:1d:5d:e4:46:86:5e:04:ae:8b: 61:fe:23:b4:8e:b2:81:89:ed:7a:7a:c2:2b:00:6b: 9f:4c:e1:17:2d:37:c9:ed:f8:ac:ed:41:05:dc:77: 11:c2:4b:c7:41:21:f8:29:3a:7a:e3:27:5d:45:dc: 17:ce:2d:d8:30:2f:76:ec:c9:67:d9:6f:44:61:f7: d9:e0:62:28:7f:69:65:2d:80:d0:d1:0b:98:ae:b2: 97:9a:f8:01:30:18:64:78:c3:f2:08:24:a0:1a:14: 9b:47:2d:5e:5f:2d:73:ac:42:54:63:cc:74:68:d3: 7d:97:12:c1:66:03:6a:36:a3:eb:1d:76:87:e5:26: a7:87:23:51:7d:bc:3a:a4:8c:4b:c7:46:a2:ac:2d: f0:0d:90:33:c3:29:57:74:d9:ac:3e:ba:c0:d5:4d: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:CA:DB:D9:4D:84:A0:D9:CD:63:03:6D:9B:BA:AE:A3:93:10:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:8b:cb:52:a6:ce:a6:85:9b:82:6c:1f:37:11:aa:94:59:62: 99:48:aa:1b:85:94:f7:1f:3c:00:4c:63:2e:0b:73:47:53:af: d8:dc:21:63:09:91:78:3d:23:05:51:b8:15:ad:d7:72:27:b2: 37:a4:92:f8:44:14:05:c3:f7:68:ed:6d:2c:cd:cf:7a:9c:68: af:f6:eb:7c:ae:53:52:db:d1:06:c8:f8:06:f9:0e:e2:d1:f8: 0d:7b:bd:87:f6:e6:af:db:40:c4:26:84:e4:be:7b:92:c0:a1: 0f:19:bf:ac:cc:23:2b:d4:14:3a:1e:e4:25:5d:49:32:25:06: 42:c8:6b:eb:8b:48:7f:bb:75:eb:2f:c1:cc:4b:5f:8d:f8:dd: 8c:9b:c0:f1:3d:09:57:6c:ba:97:a1:2e:01:10:f3:66:57:b9: 8a:06:e3:69:af:22:91:3a:31:16:8e:74:8e:f6:d7:3d:0c:b1: 86:02:71:9d:c9:7f:0b:13:ea:d5:30:ff:e7:c5:3e:00:e2:cd: c4:66:50:bc:c9:63:8c:a9:e3:4e:42:46:f6:ed:31:c9:3e:ea: 20:eb:8a:fe:53:48:7b:5a:17:3f:0d:5c:0b:00:bd:6c:dc:bb: 3f:15:60:14:35:c0:b6:42:bf:3e:10:96:82:aa:53:db:0e:47: 8c:78:22:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsNNJv/edD6HX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTkyMDczNTUtNTY1Zi00MGIwLTljNTItYTQ2ZmY0ZTIwNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Z4Kcd1HIrVjaZjGdYadqmpT+zxBY+uFcMS 0GgtRmSL6nSwJqUpp0yApkKWpnazX2tJqP4DfCnrxFsc7UrGq2ycZ/3Mq8L3JkOD FVF4wAsZ0pILGdmMtvLSdvSPlP4dXeRGhl4Eroth/iO0jrKBie16esIrAGufTOEX LTfJ7fis7UEF3HcRwkvHQSH4KTp64yddRdwXzi3YMC927Mln2W9EYffZ4GIof2ll LYDQ0QuYrrKXmvgBMBhkeMPyCCSgGhSbRy1eXy1zrEJUY8x0aNN9lxLBZgNqNqPr HXaH5SanhyNRfbw6pIxLx0airC3wDZAzwylXdNmsPrrA1U3MBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfSytvZTYSg2c1jA22buq6jkxA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDY0ZjMxY2ItYjhlZC0z NzYxLTk2NmUtZDEzMDZmN2EzYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCLy1KmzqaFm4JsHzcRqpRZYplIqhuFlPcfPABMYy4Lc0dTr9jcIWMJ kXg9IwVRuBWt13InsjekkvhEFAXD92jtbSzNz3qcaK/263yuU1Lb0QbI+Ab5DuLR +A17vYf25q/bQMQmhOS+e5LAoQ8Zv6zMIyvUFDoe5CVdSTIlBkLIa+uLSH+7desv wcxLX4343YybwPE9CVdsupehLgEQ82ZXuYoG42mvIpE6MRaOdI721z0MsYYCcZ3J fwsT6tUw/+fFPgDizcRmULzJY4yp405CRvbtMck+6iDriv5TSHtaFz8NXAsAvWzc uz8VYBQ1wLZCvz4QloKqU9sOR4x4Ik0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:15 2026 by rpki-client