$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa File: 1547736e-3c24-37d0-88de-b5cdfe869e96.roa (raw, json) Hash identifier: mETt9/aAoS94fyKgkNctMqdmfCgBPQiAItidYYOr2Ec= Subject key identifier: 34:29:E1:5C:74:6A:28:79:F5:9A:13:B9:38:14:26:23:12:C5:63:E3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC7197D19D55DD893DF140 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 138.1.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:71:97:d1:9d:55:dd:89:3d:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=a85a9da0-33c8-4b7d-98df-7af92347be7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:af:3a:82:da:8a:7a:7f:73:f3:e4:a2:4b:3b: d7:55:a6:8c:54:c1:04:f7:1b:b5:ca:72:09:4e:e9: 99:06:aa:77:2a:f5:11:67:8d:89:d5:01:ff:18:f3: 14:c1:ac:85:d8:43:72:af:81:e1:78:a7:91:2b:d5: 5a:5b:56:d5:c1:1a:a3:65:e6:ab:bd:80:2f:28:3f: 97:34:ea:57:71:a7:69:99:de:2c:fe:4a:8e:56:09: 37:cc:d6:88:97:e4:b2:f0:08:b9:c7:46:74:52:fa: 41:29:43:bb:ee:b6:40:1e:34:08:dc:bf:68:26:47: a1:5c:81:61:16:0c:a2:70:37:f7:7a:d2:f0:42:39: 90:72:5d:ef:db:f1:e8:3c:86:ac:90:31:cb:59:54: a2:9d:e2:78:b1:84:48:89:8d:80:08:16:4e:a2:65: dc:37:83:72:e5:a7:db:c3:fe:df:d9:25:a2:bc:6d: 15:31:48:0b:d1:b1:c4:20:da:0a:19:01:ed:7f:12: 8a:8e:b4:1b:0a:bd:39:2b:e4:7c:bc:51:16:3c:5a: 02:48:69:70:9b:13:bc:f1:40:8b:7c:59:ec:5c:74: 5f:00:ed:47:6d:8e:65:0c:63:52:3f:10:65:f9:0e: 5e:ef:b5:4e:3f:e6:82:28:8e:09:57:38:f3:3b:a8: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:29:E1:5C:74:6A:28:79:F5:9A:13:B9:38:14:26:23:12:C5:63:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:85:9b:21:1e:e1:f8:49:21:89:d0:ed:bb:92:c0:b3:93:a1: a3:c0:21:1c:9f:86:2c:28:48:88:ca:0a:b7:7f:c8:9d:35:e2: 83:70:a3:b6:0e:3b:e8:32:11:2b:6e:c0:e3:e7:68:16:66:de: ea:e6:21:af:ad:57:68:3a:a3:98:21:14:bf:30:59:00:41:45: c7:ec:44:b2:8a:b9:dd:4d:a3:c0:c3:e1:33:b8:88:00:b1:3c: 39:2d:cf:f0:2c:ac:71:c7:2f:f0:3d:1c:ea:9d:ef:23:0a:c7: 9f:ac:f2:f8:c4:1d:9e:e6:ad:53:08:6e:9b:f3:6b:1d:5c:d3: a4:a6:e5:32:26:d7:4f:d0:21:0c:85:c1:36:a0:06:c2:cd:a2: 16:fa:67:3f:84:c5:cf:2a:d2:c5:6f:61:57:14:42:fe:b0:4e: 8a:da:1c:98:af:f2:e8:46:3f:34:11:d7:18:cb:50:eb:f4:73: 08:73:6d:db:5d:c6:4b:f9:59:05:6f:83:16:73:47:a8:65:12: d6:ec:ca:6b:28:17:b6:db:d8:00:a4:5c:c8:73:bd:99:24:05: a9:51:9b:03:b3:4c:00:0d:79:77:66:15:4a:b4:62:8c:ae:47: 56:fb:61:c0:e5:74:c6:7e:25:87:2e:f8:7b:53:31:b4:36:7d: 43:12:e4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHGX0Z1V3Yk98UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTg1YTlkYTAtMzNjOC00YjdkLTk4ZGYtN2FmOTIzNDdiZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK86gtqKen9z8+SiSzvXVaaMVMEE9xu1ynIJ TumZBqp3KvURZ42J1QH/GPMUwayF2ENyr4HheKeRK9VaW1bVwRqjZearvYAvKD+X NOpXcadpmd4s/kqOVgk3zNaIl+Sy8Ai5x0Z0UvpBKUO77rZAHjQI3L9oJkehXIFh FgyicDf3etLwQjmQcl3v2/HoPIaskDHLWVSineJ4sYRIiY2ACBZOomXcN4Ny5afb w/7f2SWivG0VMUgL0bHEINoKGQHtfxKKjrQbCr05K+R8vFEWPFoCSGlwmxO88UCL fFnsXHRfAO1HbY5lDGNSPxBl+Q5e77VOP+aCKI4JVzjzO6i0bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQp4Vx0aih59ZoTuTgUJiMSxWPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTU0NzczNmUtM2MyNC0z N2QwLTg4ZGUtYjVjZGZlODY5ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqFmyEe4fhJIYnQ7buSwLOToaPAIRyfhiwoSIjKCrd/yJ014oNwo7YO O+gyEStuwOPnaBZm3urmIa+tV2g6o5ghFL8wWQBBRcfsRLKKud1No8DD4TO4iACx PDktz/AsrHHHL/A9HOqd7yMKx5+s8vjEHZ7mrVMIbpvzax1c06Sm5TIm10/QIQyF wTagBsLNohb6Zz+Exc8q0sVvYVcUQv6wToraHJiv8uhGPzQR1xjLUOv0cwhzbdtd xkv5WQVvgxZzR6hlEtbsymsoF7bb2ACkXMhzvZkkBalRmwOzTAANeXdmFUq0Yoyu R1b7YcDldMZ+JYcu+HtTMbQ2fUMS5LA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:41 2026 by rpki-client