$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa File: 17f45e08-575d-331e-8082-276aa8342fa3.roa (raw, json) Hash identifier: IGhmnb4Us1LByDT8hEHOvnmXFjKgSInPoWH/MsBbXi8= Subject key identifier: D4:E8:E0:6F:44:EB:5C:EC:72:7C:43:57:A4:23:96:37:3C:19:D0:1C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EBC72EE36B3A5C1809280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:bc:72:ee:36:b3:a5:c1:80:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=edbf541f-bb78-40c7-bf39-53f953267d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:2d:fe:80:21:29:81:e0:9b:c0:45:a0:38: ae:74:de:52:25:e6:e8:9d:7b:56:4e:60:0e:a8:26: 05:93:6a:80:37:22:93:b5:2e:ef:dd:dc:63:d3:c8: 1c:d6:a9:22:38:83:a3:e4:95:47:e0:58:15:b1:59: a1:6b:d6:14:18:07:64:0e:9d:63:6d:5a:3b:c2:47: 38:fb:a8:75:23:91:63:15:4d:25:21:43:6f:93:7b: 65:01:6c:92:40:b5:e5:63:a8:cb:57:47:e3:6e:c7: 3c:13:f4:f8:16:73:2c:ab:e4:c9:f1:5d:46:a3:f2: 32:c4:6d:3e:f0:32:79:b0:64:10:d2:c4:cd:f9:4f: 21:9b:72:2d:f2:9b:71:22:15:b5:4c:f5:67:be:d6: 8e:fa:2b:86:6b:ea:c8:74:6c:ff:76:13:6a:ba:7e: de:d8:98:74:52:24:3e:29:94:8b:cc:e6:f8:15:e2: 46:72:8d:74:34:2e:78:1a:a7:82:b8:db:6d:31:6c: aa:06:7b:54:4c:47:c4:84:df:75:d0:e8:7a:b4:a7: 1f:49:e5:8b:15:f7:fc:e7:d6:87:7a:6b:5c:85:12: 54:4a:6c:89:6f:a4:77:1f:d1:b2:c2:1b:38:30:0a: a2:5c:51:24:23:90:93:95:da:1d:83:78:1b:5d:d5: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:E0:6F:44:EB:5C:EC:72:7C:43:57:A4:23:96:37:3C:19:D0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:00:9b:5a:1e:fd:a8:ec:9b:1d:b5:a8:f7:cf:18:f1:86:bd: 5f:aa:1e:e6:e4:43:c5:9a:1a:d5:5b:53:b5:bb:f1:39:7a:16: 59:f9:6d:44:20:25:bd:a2:67:e9:ba:78:4e:e0:e5:99:69:f1: 7c:db:54:69:9e:81:66:c7:f8:57:a2:70:9b:36:d3:53:da:d2: 17:ee:5b:94:11:08:90:7a:4e:97:09:e7:a9:3c:73:4d:59:31: 53:93:9e:a2:1a:89:6a:24:9b:88:ee:9a:a3:5e:44:a0:79:28: c7:4e:d7:c8:c1:bb:65:b0:e9:dd:db:62:ef:c0:9e:c4:09:79: d9:44:bf:69:58:71:b6:34:71:cb:99:bc:6a:50:e6:52:9c:84: 52:76:49:17:23:33:2b:0a:15:09:70:62:37:62:32:4f:23:0e: b1:42:41:9c:5f:9d:40:82:8c:4d:c1:20:4f:87:3d:f3:4c:d1: af:0c:cc:8f:ac:15:13:0f:40:8e:91:32:19:f8:1c:7a:c9:e3: 03:ae:b6:96:e0:2d:0a:eb:73:ed:cf:d5:6c:05:db:8d:b4:d0: e0:37:5e:04:dc:9e:6b:83:2a:96:8e:33:70:d6:b8:29:14:b3: 43:31:df:24:3f:08:bf:42:33:7c:77:8e:dd:5d:4f:4b:56:62: ee:d0:18:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXrxy7jazpcGAkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWRiZjU0MWYtYmI3OC00MGM3LWJmMzktNTNmOTUzMjY3ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk98t/oAhKYHgm8BFoDiudN5SJebonXtWTmAO qCYFk2qANyKTtS7v3dxj08gc1qkiOIOj5JVH4FgVsVmha9YUGAdkDp1jbVo7wkc4 +6h1I5FjFU0lIUNvk3tlAWySQLXlY6jLV0fjbsc8E/T4FnMsq+TJ8V1Go/IyxG0+ 8DJ5sGQQ0sTN+U8hm3It8ptxIhW1TPVnvtaO+iuGa+rIdGz/dhNqun7e2Jh0UiQ+ KZSLzOb4FeJGco10NC54GqeCuNttMWyqBntUTEfEhN910Oh6tKcfSeWLFff859aH emtchRJUSmyJb6R3H9Gywhs4MAqiXFEkI5CTldodg3gbXdXHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTo4G9E61zscnxDV6Qjljc8GdAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTdmNDVlMDgtNTc1ZC0z MzFlLTgwODItMjc2YWE4MzQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEAm1oe/ajsmx21qPfPGPGGvV+qHubkQ8WaGtVbU7W78Tl6Fln5bUQg Jb2iZ+m6eE7g5Zlp8XzbVGmegWbH+FeicJs201Pa0hfuW5QRCJB6TpcJ56k8c01Z MVOTnqIaiWokm4jumqNeRKB5KMdO18jBu2Ww6d3bYu/AnsQJedlEv2lYcbY0ccuZ vGpQ5lKchFJ2SRcjMysKFQlwYjdiMk8jDrFCQZxfnUCCjE3BIE+HPfNM0a8MzI+s FRMPQI6RMhn4HHrJ4wOutpbgLQrrc+3P1WwF24200OA3XgTcnmuDKpaOM3DWuCkU s0Mx3yQ/CL9CM3x3jt1dT0tWYu7QGMo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:24 2026 by rpki-client