$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/16f24d4d-03d7-37eb-8197-266ed91672b8.roa File: 16f24d4d-03d7-37eb-8197-266ed91672b8.roa (raw, json) Hash identifier: EEThHI3NFheuYyGJmWdkdCtm+8YImWliA/xyaXi3lAA= Subject key identifier: 32:3C:DE:FA:CE:F0:7E:AA:FB:BD:8E:0B:17:12:24:8B:23:C9:40:2C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5E8FB4E536CAB6BC49C280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/16f24d4d-03d7-37eb-8197-266ed91672b8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:8f:b4:e5:36:ca:b6:bc:49:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=63df1088-328c-4a29-b03d-d055667ae68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:5d:9f:40:25:20:ba:89:8b:10:37:e0:5e: 38:02:0f:94:c2:93:3a:59:dc:b6:65:46:04:1c:2b: 5f:85:62:af:67:07:1b:96:b4:15:6a:85:aa:8f:cf: 77:33:90:1d:01:26:59:8f:26:37:1d:3b:8e:ec:76: 11:2b:7a:41:12:c3:68:4e:d7:7d:1f:a8:e7:b5:00: a1:ac:57:d1:ec:f1:c8:8e:97:6b:3c:79:3a:9a:05: 17:09:bc:3a:be:5a:fc:40:cb:54:a6:71:9a:30:b1: 15:18:2e:68:30:c6:a6:b6:27:6b:4b:75:95:28:1a: c1:97:7d:47:f7:52:79:37:5f:8c:77:d1:c5:43:4a: d5:10:2e:d2:f6:c9:45:c2:19:a7:a4:60:9a:71:af: 57:21:1f:b8:92:73:5b:b9:df:63:8e:02:ae:fb:bd: 99:74:7c:80:cd:56:3f:a2:b1:af:dc:49:3d:80:91: 68:f9:41:44:0e:f8:c7:62:f6:52:76:0b:42:dd:a7: 4b:65:8f:70:b3:c1:93:89:f0:82:fd:9d:54:3b:01: 72:ad:64:5d:49:8a:0f:ce:b2:6a:d7:a5:3e:c9:7c: 0d:8d:76:8c:7f:68:f0:d1:d0:2c:20:dd:53:42:6f: 3b:6f:d4:16:55:8b:fa:40:3c:48:cd:38:43:b3:7e: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3C:DE:FA:CE:F0:7E:AA:FB:BD:8E:0B:17:12:24:8B:23:C9:40:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/16f24d4d-03d7-37eb-8197-266ed91672b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:59:11:f9:16:a3:a9:3d:1a:c4:f6:22:82:e1:14:89:75:f2: a4:ae:2d:f2:83:cc:ba:0f:82:ad:99:bc:c2:90:ad:77:bb:85: 68:2a:b7:b7:69:e9:72:85:45:f5:a3:ea:79:39:fb:bd:f4:3b: a4:5a:30:31:6b:16:0b:31:77:64:3f:01:a7:21:7b:b7:fc:c0: ba:14:f3:07:49:8e:a2:43:82:f5:d3:5f:a7:53:19:18:a1:ef: fc:30:73:25:0a:18:61:af:58:89:b0:ea:eb:b4:9e:02:ec:89: c1:c5:13:d8:8f:96:a5:31:24:82:7c:15:cc:83:46:6a:09:73: d4:7b:33:80:e5:92:7c:dc:84:2e:6f:42:d4:f4:5b:9d:93:66: b8:f5:f3:33:22:93:f2:c7:3d:da:6e:20:aa:0a:28:4b:88:2c: 28:50:3e:10:18:1f:34:fd:32:30:06:59:f0:6e:72:3e:86:67: 6f:86:c8:41:3d:eb:0a:ba:f3:99:4d:17:63:6d:09:08:dd:9d: f9:21:1a:7c:1d:93:8d:fd:c9:61:ac:b2:7d:88:9b:0f:ce:51: 8b:24:a5:76:b3:46:71:8e:03:a9:4a:a5:3f:1c:00:a2:db:99: c1:4a:a4:e3:0e:03:ec:75:0d:fb:04:14:d8:1c:62:83:e8:15: c2:17:b4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXo+05TbKtrxJwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjNkZjEwODgtMzI4Yy00YTI5LWIwM2QtZDA1NTY2N2FlNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ5dn0AlILqJixA34F44Ag+UwpM6Wdy2ZUYE HCtfhWKvZwcblrQVaoWqj893M5AdASZZjyY3HTuO7HYRK3pBEsNoTtd9H6jntQCh rFfR7PHIjpdrPHk6mgUXCbw6vlr8QMtUpnGaMLEVGC5oMMamtidrS3WVKBrBl31H 91J5N1+Md9HFQ0rVEC7S9slFwhmnpGCaca9XIR+4knNbud9jjgKu+72ZdHyAzVY/ orGv3Ek9gJFo+UFEDvjHYvZSdgtC3adLZY9ws8GTifCC/Z1UOwFyrWRdSYoPzrJq 16U+yXwNjXaMf2jw0dAsIN1TQm87b9QWVYv6QDxIzThDs36/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI83vrO8H6q+72OCxcSJIsjyUAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTZmMjRkNGQtMDNkNy0z N2ViLTgxOTctMjY2ZWQ5MTY3MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJZEfkWo6k9GsT2IoLhFIl18qSuLfKDzLoPgq2ZvMKQrXe7hWgqt7dp 6XKFRfWj6nk5+730O6RaMDFrFgsxd2Q/Aache7f8wLoU8wdJjqJDgvXTX6dTGRih 7/wwcyUKGGGvWImw6uu0ngLsicHFE9iPlqUxJIJ8FcyDRmoJc9R7M4DlknzchC5v QtT0W52TZrj18zMik/LHPdpuIKoKKEuILChQPhAYHzT9MjAGWfBucj6GZ2+GyEE9 6wq685lNF2NtCQjdnfkhGnwdk439yWGssn2Imw/OUYskpXazRnGOA6lKpT8cAKLb mcFKpOMOA+x1DfsEFNgcYoPoFcIXtAc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:59 2026 by rpki-client