$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa File: 3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa (raw, json) Hash identifier: aCslDURHTa2O64s5InwtOe+ySa8RIvqYEfsuVeRCEok= Subject key identifier: D9:EC:C2:73:B0:0B:40:0A:82:EA:5C:DD:EC:B7:F4:15:0F:4C:EE:BE Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EBBBB229A3CB996AD1C36 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:bb:bb:22:9a:3c:b9:96:ad:1c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=dff538d4-e988-496b-8129-b5f5a4e639fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:27:17:5c:c1:10:29:45:0d:14:cf:f8:44: 9e:83:7f:5f:e8:13:ec:59:e3:3c:56:72:f7:96:48: da:1f:ca:ab:7c:5b:1c:68:b9:88:87:7f:2e:fb:db: 8b:d2:f0:12:20:13:13:0f:29:4c:fc:bb:9d:8e:3f: 42:67:2f:87:32:af:26:0e:64:07:29:cc:09:0a:bb: 76:30:a5:95:28:fd:bc:5d:36:b5:4c:81:77:dc:e9: 23:0e:e1:99:28:48:3e:fb:ea:b2:5e:e0:90:f7:1b: f7:d9:f5:0d:04:9d:de:c3:f1:b7:0c:09:b1:eb:09: 86:1f:b3:56:f1:29:3b:92:b9:77:ce:72:51:33:be: a9:05:d1:ac:79:59:ae:ba:49:9c:b5:e7:9a:77:ab: 2d:c6:2d:1e:dd:1d:88:3f:af:3e:7b:29:34:33:c4: b0:2a:5b:dd:81:6c:e6:1b:26:a8:7e:be:e6:5c:5d: 84:0d:45:7c:31:19:bb:b3:be:c8:8a:f4:2f:d8:93: 99:06:8d:0c:e4:5c:4a:67:48:04:91:df:95:ca:4d: 69:b5:8d:64:e6:4a:81:94:72:9c:76:42:c0:a9:a9: e9:2f:b7:8d:a4:44:30:a1:55:18:a3:43:05:da:e5: cb:1a:9e:6f:fd:6b:f4:24:f8:c6:fe:30:56:d3:95: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EC:C2:73:B0:0B:40:0A:82:EA:5C:DD:EC:B7:F4:15:0F:4C:EE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:82:6f:a5:27:32:de:80:fd:79:a8:fb:d2:12:97:64:31:50: 50:9b:e7:ca:a9:04:f3:ac:18:e8:98:db:fc:7f:0f:b0:ac:2c: 0f:7b:90:bc:f1:de:38:fb:bd:a3:0b:5f:1e:bb:35:84:73:f4: 94:d5:44:4a:a7:0e:da:28:0b:d0:83:12:3e:70:0d:df:c7:01: e2:a9:ee:c3:b7:18:ce:9d:d9:85:d4:bd:33:db:47:0e:d9:c8: f1:10:7b:d0:1c:16:0c:2c:25:49:6c:04:94:42:d6:8c:31:4a: 36:d1:ac:46:cb:78:08:9a:d3:c5:b5:72:31:2d:8d:e8:13:a9: 50:3f:8e:91:10:ad:db:31:da:e0:21:ab:a1:d0:d7:95:33:8b: a4:80:3a:00:2b:13:9c:b8:40:8d:ba:77:a8:02:f3:40:b6:d2: 63:e6:01:2f:e8:91:bb:f0:fb:ce:18:61:6e:1f:ad:fe:a3:24: d5:e7:9a:0b:7b:55:b9:f8:43:a0:50:ac:8d:84:4d:5c:d1:65: dc:f1:34:13:21:4d:df:0c:b2:08:9d:7c:9c:51:58:9a:6f:33: 84:c5:6b:b7:fb:0c:8b:04:2a:25:6b:de:fe:fa:a1:9d:f5:c8: 81:59:25:61:56:3b:41:3d:e8:e7:c1:cb:63:dd:7f:e6:e6:87: f5:22:32:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXru7Ipo8uZatHDYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGZmNTM4ZDQtZTk4OC00OTZiLTgxMjktYjVmNWE0ZTYzOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscsnF1zBEClFDRTP+ESeg39f6BPsWeM8VnL3 lkjaH8qrfFscaLmIh38u+9uL0vASIBMTDylM/Ludjj9CZy+HMq8mDmQHKcwJCrt2 MKWVKP28XTa1TIF33OkjDuGZKEg+++qyXuCQ9xv32fUNBJ3ew/G3DAmx6wmGH7NW 8Sk7krl3znJRM76pBdGseVmuukmcteead6stxi0e3R2IP68+eyk0M8SwKlvdgWzm Gyaofr7mXF2EDUV8MRm7s77IivQv2JOZBo0M5FxKZ0gEkd+Vyk1ptY1k5kqBlHKc dkLAqanpL7eNpEQwoVUYo0MF2uXLGp5v/Wv0JPjG/jBW05W4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnswnOwC0AKgupc3ey39BUPTO6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2Q5OTRkMmUtOWQ1MS0z YjBiLTgwNjYtNzk4YWI0OWIyZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6Cb6UnMt6A/Xmo+9ISl2QxUFCb58qpBPOsGOiY2/x/D7CsLA97kLzx 3jj7vaMLXx67NYRz9JTVREqnDtooC9CDEj5wDd/HAeKp7sO3GM6d2YXUvTPbRw7Z yPEQe9AcFgwsJUlsBJRC1owxSjbRrEbLeAia08W1cjEtjegTqVA/jpEQrdsx2uAh q6HQ15Uzi6SAOgArE5y4QI26d6gC80C20mPmAS/okbvw+84YYW4frf6jJNXnmgt7 Vbn4Q6BQrI2ETVzRZdzxNBMhTd8MsgidfJxRWJpvM4TFa7f7DIsEKiVr3v76oZ31 yIFZJWFWO0E96OfBy2Pdf+bmh/UiMsk= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:35 2026 by rpki-client