$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa File: 85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa (raw, json) Hash identifier: 2YlnZPuqmfnEh1pLRf7KZWttIG3sE7ZJPJRfMljNygs= Subject key identifier: 03:77:98:E1:DA:72:BC:0D:8C:06:CC:AB:76:5D:56:A8:31:7E:13:AD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5E825A61BFBA7AEC5A8740 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:82:5a:61:bf:ba:7a:ec:5a:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7ca49228-d71c-4f87-9979-632f87f1c45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:e0:33:19:69:4a:69:67:ff:50:43:87:ba: d1:7f:7e:23:d7:d1:4f:d9:d2:f4:83:b8:db:06:fe: 4c:7c:e0:4c:b5:fa:3e:87:16:82:c0:ee:15:31:cf: ec:12:e4:63:94:b7:3c:49:a1:4e:99:b0:a5:ed:f5: 22:96:18:65:f3:26:40:71:e8:00:0d:a0:42:18:d1: 50:31:ad:a6:7c:99:90:91:99:3d:3f:3b:a4:d9:a0: f7:9a:65:e9:5e:d8:12:27:0c:9b:74:f1:50:3b:a7: d9:fa:86:3b:cf:e4:e4:df:40:89:77:69:11:c1:58: 0e:6d:61:bf:fa:90:13:88:a7:27:8f:d6:d2:1a:7f: 88:19:05:0e:e7:ce:85:e2:ac:cd:f4:ab:9e:73:29: 99:a2:e1:e1:fd:e0:b2:0d:2b:4a:ce:cf:a6:e3:78: ba:ea:ee:41:39:37:35:f8:15:44:d8:28:59:bf:3e: 0d:b0:27:bc:59:57:3e:f5:4c:ba:f4:be:fe:81:d8: 26:76:2b:56:30:a9:25:51:48:63:23:f5:c6:23:8e: c4:1f:3a:98:5f:80:44:4c:cb:e0:79:5d:ec:72:c9: 9f:6d:6e:dc:40:08:85:29:c9:e2:16:bf:ea:09:a3: 25:25:7d:2a:3a:e4:d8:77:a3:db:5d:6e:e7:2c:b3: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:98:E1:DA:72:BC:0D:8C:06:CC:AB:76:5D:56:A8:31:7E:13:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:77:a1:5a:38:c3:b3:32:d2:da:13:42:27:9a:0d:13:c9:fa: d7:d3:4d:24:7d:ff:80:b1:90:87:a6:6b:72:d7:c9:a9:ca:aa: b3:94:b6:1b:a1:33:fc:05:e7:70:72:ae:a0:d0:87:d4:44:87: 4c:45:de:ba:e2:f6:61:14:1b:02:87:89:d9:e1:61:de:c2:ce: 58:e4:bb:29:7a:7e:2e:10:e6:50:1e:0a:75:69:1d:e7:f0:8c: 5b:3a:ca:71:b1:ce:8f:e1:63:8c:4d:46:72:7a:2f:ea:29:db: e0:84:7b:0e:8e:14:16:06:e5:31:25:4d:db:65:c2:5e:82:ce: 01:9e:20:57:69:75:d6:5d:64:ef:78:c7:ab:d8:05:2d:45:b7: 4a:bd:5f:e6:f3:ed:47:04:0c:db:44:ee:61:c0:93:2a:05:49: a4:d3:ec:ec:45:84:80:da:75:21:a8:58:f4:0b:6c:b0:3b:77: af:07:f4:39:b6:62:b3:1e:93:e3:95:44:37:b3:42:58:8c:a0: ee:28:f8:15:5c:aa:74:c5:6e:47:02:e0:b2:83:d4:aa:f5:c1: a2:59:c4:95:af:7d:25:49:35:0e:94:a9:54:74:e0:25:33:6e: 73:a2:b0:ab:e7:04:4c:7a:19:3c:41:49:05:6c:cc:c1:b4:50: 9f:98:4d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXoJaYb+6euxah0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2NhNDkyMjgtZDcxYy00Zjg3LTk5NzktNjMyZjg3ZjFjNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNLgMxlpSmln/1BDh7rRf34j19FP2dL0g7jb Bv5MfOBMtfo+hxaCwO4VMc/sEuRjlLc8SaFOmbCl7fUilhhl8yZAcegADaBCGNFQ Ma2mfJmQkZk9Pzuk2aD3mmXpXtgSJwybdPFQO6fZ+oY7z+Tk30CJd2kRwVgObWG/ +pATiKcnj9bSGn+IGQUO586F4qzN9KuecymZouHh/eCyDStKzs+m43i66u5BOTc1 +BVE2ChZvz4NsCe8WVc+9Uy69L7+gdgmditWMKklUUhjI/XGI47EHzqYX4BETMvg eV3scsmfbW7cQAiFKcniFr/qCaMlJX0qOuTYd6PbXW7nLLONrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN3mOHacrwNjAbMq3ZdVqgxfhOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODViOWY3YmEtYTUzZC0z NjY1LWJhNGEtYzhhNjgzNWYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt3oVo4w7My0toTQieaDRPJ+tfTTSR9/4CxkIema3LXyanKqrOUthuh M/wF53ByrqDQh9REh0xF3rri9mEUGwKHidnhYd7Czljkuyl6fi4Q5lAeCnVpHefw jFs6ynGxzo/hY4xNRnJ6L+op2+CEew6OFBYG5TElTdtlwl6CzgGeIFdpddZdZO94 x6vYBS1Ft0q9X+bz7UcEDNtE7mHAkyoFSaTT7OxFhIDadSGoWPQLbLA7d68H9Dm2 YrMek+OVRDezQliMoO4o+BVcqnTFbkcC4LKD1Kr1waJZxJWvfSVJNQ6UqVR04CUz bnOisKvnBEx6GTxBSQVszMG0UJ+YTUE= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:11 2026 by rpki-client