$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa File: 2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa (raw, json) Hash identifier: YqxLA0v1x2Eo5goVJohn1yrGS0ozEBFD8mPgEWc0bj4= Subject key identifier: EC:3E:21:09:F9:67:5C:08:C9:3D:DE:0E:85:97:48:A3:7C:5C:2C:E1 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EC315E32930A66E674D80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c3:15:e3:29:30:a6:6e:67:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=cd9f4d7b-c742-43eb-91fc-b776890bcf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:6a:ad:da:bc:69:b1:37:be:0c:74:17:7d: fa:5d:2c:c6:06:b6:01:f6:a7:d6:84:82:3d:6b:bd: 07:55:44:57:9c:da:c0:fb:72:f7:d2:d6:cf:29:21: 6b:44:3c:c1:ec:4a:5e:51:20:2e:aa:ca:12:5b:56: b4:4a:ff:90:96:22:d9:82:9e:ba:a5:66:d2:5c:e9: 3b:e9:4b:8a:a3:f2:dc:02:e2:54:a7:6a:d6:d6:8b: 5e:e2:87:d8:9a:8a:fa:ee:3a:02:2e:90:c4:9d:27: 54:24:11:1c:61:54:ac:db:ba:ab:1c:e5:6e:72:e5: 35:d7:21:40:f6:0f:ba:be:7b:c6:88:d3:b1:f8:cf: ef:53:cb:5c:e1:47:02:50:30:ac:f2:9a:49:12:8b: 3d:f2:84:bf:2f:b7:53:8d:bf:54:ef:08:8b:6d:58: 3d:a1:7f:93:06:19:b4:0b:eb:f5:01:4f:27:06:7b: e3:26:66:c7:67:fd:f1:87:a5:da:02:e8:10:89:a7: af:31:ff:ab:fa:d6:44:57:ae:46:4d:64:d0:41:d3: 1b:fe:0d:31:18:58:fb:4f:1b:9b:a9:9c:13:44:ce: 93:33:90:4d:1d:95:5e:2d:4d:be:62:b1:4d:1c:3d: 10:19:e0:58:d6:a3:22:a4:71:ca:df:bd:33:9d:d6: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3E:21:09:F9:67:5C:08:C9:3D:DE:0E:85:97:48:A3:7C:5C:2C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:64:45:03:7c:fe:5c:c8:90:3c:45:5d:65:fb:91:a1:7f:3e: 13:f0:55:89:49:04:f7:c1:dd:28:ae:e6:92:78:bd:50:5b:d9: ca:4e:18:44:dd:2e:d4:a2:4b:93:94:1e:33:4f:a5:59:9e:d7: 87:9a:5b:02:dd:ab:31:aa:cf:11:d7:37:cc:f0:a9:fe:47:d1: 07:4a:2c:ad:57:78:53:0d:50:c0:39:9a:16:d3:85:21:f6:6e: 53:d3:9c:f5:63:98:06:48:a8:59:99:d6:cb:38:02:ee:fc:4c: 5b:98:7a:65:09:1f:61:35:ea:95:30:98:b7:9b:da:70:bd:43: 68:85:3d:18:c7:de:d4:c2:77:41:f2:12:e1:41:15:0a:c7:18: fe:6c:7b:7f:62:04:3d:c8:e9:38:50:1f:b7:88:ee:6c:55:71: 52:ad:5d:f5:cc:9e:da:8a:0f:d7:85:ea:6b:fb:68:65:23:b7: 25:e2:b4:ef:ed:07:54:92:e0:de:a3:d1:63:e1:e8:54:0d:44: 31:fe:b9:40:72:c4:dd:16:2e:f8:ed:90:a6:e9:a3:c5:3a:28: 0b:fb:ac:dc:56:e8:d0:65:f1:71:18:8d:81:8d:99:70:ea:5f: f4:76:61:05:cd:bb:22:52:13:27:77:f5:a3:f3:2b:db:1c:8b: 88:89:c0:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsMV4ykwpm5nTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2Q5ZjRkN2ItYzc0Mi00M2ViLTkxZmMtYjc3Njg5MGJjZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm9qrdq8abE3vgx0F336XSzGBrYB9qfWhII9 a70HVURXnNrA+3L30tbPKSFrRDzB7EpeUSAuqsoSW1a0Sv+QliLZgp66pWbSXOk7 6UuKo/LcAuJUp2rW1ote4ofYmor67joCLpDEnSdUJBEcYVSs27qrHOVucuU11yFA 9g+6vnvGiNOx+M/vU8tc4UcCUDCs8ppJEos98oS/L7dTjb9U7wiLbVg9oX+TBhm0 C+v1AU8nBnvjJmbHZ/3xh6XaAugQiaevMf+r+tZEV65GTWTQQdMb/g0xGFj7Txub qZwTRM6TM5BNHZVeLU2+YrFNHD0QGeBY1qMipHHK370znda0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw+IQn5Z1wIyT3eDoWXSKN8XCzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMmU3NDFjMDQtNmE2Yy0z MjVmLThhOTEtZmE0YmQwYjhmZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpkRQN8/lzIkDxFXWX7kaF/PhPwVYlJBPfB3Siu5pJ4vVBb2cpOGETd LtSiS5OUHjNPpVme14eaWwLdqzGqzxHXN8zwqf5H0QdKLK1XeFMNUMA5mhbThSH2 blPTnPVjmAZIqFmZ1ss4Au78TFuYemUJH2E16pUwmLeb2nC9Q2iFPRjH3tTCd0Hy EuFBFQrHGP5se39iBD3I6ThQH7eI7mxVcVKtXfXMntqKD9eF6mv7aGUjtyXitO/t B1SS4N6j0WPh6FQNRDH+uUByxN0WLvjtkKbpo8U6KAv7rNxW6NBl8XEYjYGNmXDq X/R2YQXNuyJSEyd39aPzK9sci4iJwLI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:29 2026 by rpki-client