$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa File: 4c9f1b4e-8311-3d71-9b79-a652244709a6.roa (raw, json) Hash identifier: EeYrzTYMZahk/ou/c2pw29zO3aWvTX+hVPB2SJTibiM= Subject key identifier: C9:DE:77:3B:16:97:3D:9F:43:52:5E:81:8D:EF:4B:06:2E:24:A8:4C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EC6D79430FC755B06F200 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.2.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c6:d7:94:30:fc:75:5b:06:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=67955db1-40ef-493e-82d5-d9276b3b0e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:89:6f:c9:7c:8f:d2:f5:bd:63:99:1a:6e: 71:bf:66:3d:33:0c:27:e7:8f:5a:c3:8a:6c:9c:bf: 6c:21:1c:42:75:27:a7:0f:0f:90:8d:ae:c0:7a:9c: f7:47:94:f5:52:82:cf:86:af:fe:c0:d6:1f:6a:88: 30:3f:e6:0c:1e:17:68:e8:52:bc:a9:02:13:6a:5b: 6b:b7:94:3a:cf:8e:14:3b:17:de:97:53:bd:e0:2b: b8:ea:78:18:25:ae:6a:4e:e0:df:26:29:15:f2:1a: f1:68:17:b2:f2:e0:94:c7:6a:7f:9b:af:ff:fd:7a: 42:fd:0d:6d:e3:0f:1b:0f:78:eb:38:b4:76:c5:37: 39:62:f2:52:0b:0b:36:42:ec:fb:85:17:8d:3f:5b: 7f:05:59:d6:8d:c9:f4:de:7e:ff:fa:de:72:e8:46: 4d:75:cd:9b:a5:e4:e1:bc:ac:31:00:a9:fc:4d:4e: e9:a7:63:b8:cf:c9:5d:01:f1:dd:e1:91:ee:8e:9a: f7:ec:97:11:33:b7:33:df:bc:2a:71:41:a1:1a:ae: 5d:68:ee:55:c0:b4:e1:9a:d0:3b:e6:49:1d:0d:3a: 0f:d1:98:d2:aa:ef:3d:fe:0d:69:51:e6:56:c4:79: f8:03:3f:eb:5d:46:08:a3:7a:4a:c2:08:cc:0f:78: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DE:77:3B:16:97:3D:9F:43:52:5E:81:8D:EF:4B:06:2E:24:A8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6a:1b:45:df:c5:0a:92:4e:b5:82:97:2a:43:ac:f8:fd:83: 1e:4c:53:f3:b4:97:c1:be:d7:f3:9c:b1:12:18:0e:f6:77:2f: 3b:d0:43:fa:7d:eb:bc:02:e9:d0:a0:5b:1e:3a:10:d5:40:da: bb:84:30:47:36:24:83:81:63:71:54:0d:04:76:ac:e0:83:a4: ee:1e:78:8c:72:80:4b:a1:75:4e:5d:cd:9a:57:9b:da:8b:2d: a7:2a:67:3a:99:98:5d:47:d2:a0:d1:a4:fd:9e:30:1b:fa:05: cb:b1:0f:dd:ba:38:63:28:91:e6:8c:9a:cc:e7:8e:e3:3e:1e: 2b:cf:06:0b:72:b9:60:4f:72:c8:7b:98:4d:ba:b4:81:17:1a: 44:4d:f9:03:03:07:89:ed:7f:49:0c:7b:0d:7c:fd:21:47:0b: 9d:80:ba:82:a8:12:79:3c:04:a9:34:64:ad:3a:a2:2e:ad:00: 8a:73:da:56:eb:33:c7:89:10:57:d0:70:54:d9:07:a9:71:bb: 57:ca:30:b3:c7:79:39:88:7f:2c:1b:39:d0:03:37:31:39:cc: 43:d6:ce:72:52:e0:66:db:29:5f:3e:f7:d6:eb:c1:0f:28:ff: 73:5a:99:7f:57:e7:09:0a:1d:06:85:b9:79:79:8b:e7:23:41: 47:79:cf:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsbXlDD8dVsG8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Njc5NTVkYjEtNDBlZi00OTNlLTgyZDUtZDkyNzZiM2IwZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmJb8l8j9L1vWOZGm5xv2Y9Mwwn549aw4ps nL9sIRxCdSenDw+Qja7Aepz3R5T1UoLPhq/+wNYfaogwP+YMHhdo6FK8qQITaltr t5Q6z44UOxfel1O94Cu46ngYJa5qTuDfJikV8hrxaBey8uCUx2p/m6///XpC/Q1t 4w8bD3jrOLR2xTc5YvJSCws2Quz7hReNP1t/BVnWjcn03n7/+t5y6EZNdc2bpeTh vKwxAKn8TU7pp2O4z8ldAfHd4ZHujpr37JcRM7cz37wqcUGhGq5daO5VwLThmtA7 5kkdDToP0ZjSqu89/g1pUeZWxHn4Az/rXUYIo3pKwgjMD3getQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnedzsWlz2fQ1JegY3vSwYuJKhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGM5ZjFiNGUtODMxMS0z ZDcxLTliNzktYTY1MjI0NDcwOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGigKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1qG0XfxQqSTrWClypDrPj9gx5MU/O0l8G+1/OcsRIYDvZ3LzvQQ/p9 67wC6dCgWx46ENVA2ruEMEc2JIOBY3FUDQR2rOCDpO4eeIxygEuhdU5dzZpXm9qL LacqZzqZmF1H0qDRpP2eMBv6BcuxD926OGMokeaMmsznjuM+HivPBgtyuWBPcsh7 mE26tIEXGkRN+QMDB4ntf0kMew18/SFHC52AuoKoEnk8BKk0ZK06oi6tAIpz2lbr M8eJEFfQcFTZB6lxu1fKMLPHeTmIfywbOdADNzE5zEPWznJS4GbbKV8+99brwQ8o /3NamX9X5wkKHQaFuXl5i+cjQUd5z/8= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:33 2026 by rpki-client