$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa File: 429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa (raw, json) Hash identifier: kiSfKfwcsszXe2fo+4Psptak9yExsm0Mp0wQsfRBsJc= Subject key identifier: A1:34:16:D7:83:70:A7:E6:64:0C:77:96:9B:6E:3E:D0:41:37:04:92 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5E6A08E369BC184CF46F20 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:6a:08:e3:69:bc:18:4c:f4:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=76452fbe-726d-4733-b26b-6dc10750fdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:78:6a:69:83:4d:69:07:bc:11:31:0e:04: f2:87:81:c3:bc:2c:61:99:7f:20:51:42:80:c7:0d: ff:8c:ec:0a:fa:3c:8e:3c:52:23:60:e5:d1:9e:ca: 20:1f:bc:02:e9:2b:c2:c0:4e:08:14:49:ac:ac:0d: 09:92:a0:38:b0:53:e7:d9:c4:62:3e:7c:ed:56:c0: df:dd:e1:3f:16:3b:5f:25:ad:0c:c1:cd:9b:3c:c8: 19:60:e2:76:c8:c4:94:80:01:80:cf:e2:f9:45:a7: bc:34:c5:d5:0e:30:43:2a:66:70:f8:5b:68:bd:a1: a3:7d:3e:91:ac:42:03:56:ed:ea:a9:25:ea:90:2c: 19:1f:f3:50:ed:8c:01:ce:8d:3e:47:62:76:eb:cb: 33:59:8a:75:26:1d:54:68:e3:44:70:3f:55:bc:7e: 56:5f:50:aa:4f:22:46:aa:7a:f2:cf:74:00:ba:72: 53:58:09:4e:db:2f:9a:af:c7:17:6a:6f:9e:86:4c: 24:8e:cd:e3:77:d4:48:bc:bd:fc:53:90:76:db:37: 08:14:4f:93:c4:28:6a:9b:19:7c:76:e5:da:cb:ff: 32:4b:c2:51:dd:5f:4d:27:d1:36:b9:04:9f:37:12: 01:a7:0c:92:ef:ff:5a:ff:35:b3:dc:45:90:44:83: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:34:16:D7:83:70:A7:E6:64:0C:77:96:9B:6E:3E:D0:41:37:04:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/429f806c-5f71-3595-ac5c-c04c7e29c2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:74:67:d2:3c:55:9d:a3:d6:ca:53:3b:97:ea:47:9a:50:23: 1d:18:1b:d1:d6:90:57:13:2b:8a:ce:8f:ea:62:e9:9d:6c:b4: 3b:99:27:ce:ed:5b:ee:86:bc:fe:7f:ab:31:b2:f4:44:24:86: 79:bf:ba:80:04:9c:27:7b:1e:8b:b7:e6:9a:84:ae:90:1d:c4: 49:c9:06:b6:16:66:8b:1b:ad:ea:7f:9a:41:b3:5d:29:90:a4: 0b:08:21:01:ec:69:a4:3d:17:b9:14:b9:e9:2c:ba:e9:cf:48: 18:06:63:c9:e3:52:b0:e4:04:a0:4d:60:08:6d:04:e9:cc:80: 63:33:6b:f1:3b:ad:6c:97:1a:01:f0:80:37:52:18:19:d9:20: 54:18:5f:cf:b3:17:44:38:93:aa:60:d1:54:0d:b9:44:93:8d: 6d:72:f1:30:68:0c:fc:ed:c1:68:47:12:1d:98:f9:ec:32:c8: c9:0b:87:d7:a2:0c:85:f0:f9:bd:4d:a9:d2:c2:a9:aa:b2:c4: 2d:ef:ae:43:01:d4:8a:1e:de:08:72:45:09:50:d3:bc:ad:ce: ea:22:87:55:b6:bc:27:42:d2:9c:67:dc:3c:05:bf:37:a3:70: f0:45:b3:1a:5e:50:23:fe:75:8b:71:18:14:45:4e:45:ea:b4: 22:38:4d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmoI42m8GEz0byAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzY0NTJmYmUtNzI2ZC00NzMzLWIyNmItNmRjMTA3NTBmZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMp4ammDTWkHvBExDgTyh4HDvCxhmX8gUUKA xw3/jOwK+jyOPFIjYOXRnsogH7wC6SvCwE4IFEmsrA0JkqA4sFPn2cRiPnztVsDf 3eE/FjtfJa0Mwc2bPMgZYOJ2yMSUgAGAz+L5Rae8NMXVDjBDKmZw+FtovaGjfT6R rEIDVu3qqSXqkCwZH/NQ7YwBzo0+R2J268szWYp1Jh1UaONEcD9VvH5WX1CqTyJG qnryz3QAunJTWAlO2y+ar8cXam+ehkwkjs3jd9RIvL38U5B22zcIFE+TxChqmxl8 duXay/8yS8JR3V9NJ9E2uQSfNxIBpwyS7/9a/zWz3EWQRIODkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE0FteDcKfmZAx3lptuPtBBNwSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDI5ZjgwNmMtNWY3MS0z NTk1LWFjNWMtYzA0YzdlMjljMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF0Z9I8VZ2j1spTO5fqR5pQIx0YG9HWkFcTK4rOj+pi6Z1stDuZJ87t W+6GvP5/qzGy9EQkhnm/uoAEnCd7Hou35pqErpAdxEnJBrYWZosbrep/mkGzXSmQ pAsIIQHsaaQ9F7kUueksuunPSBgGY8njUrDkBKBNYAhtBOnMgGMza/E7rWyXGgHw gDdSGBnZIFQYX8+zF0Q4k6pg0VQNuUSTjW1y8TBoDPztwWhHEh2Y+ewyyMkLh9ei DIXw+b1NqdLCqaqyxC3vrkMB1Ioe3ghyRQlQ07ytzuoih1W2vCdC0pxn3DwFvzej cPBFsxpeUCP+dYtxGBRFTkXqtCI4TfA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:52 2026 by rpki-client