$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa File: 8f4fd58a-3135-3fa4-8496-60e3143a2363.roa (raw, json) Hash identifier: a7bryeVjnJun4cJrOsFJhbD2kjB9VZXT2KddIl1z3/g= Subject key identifier: 16:EF:63:F0:15:7C:6C:EB:98:08:5C:52:D6:4B:7E:34:D7:E4:14:7E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5E6EBCE93CEAF1700B1100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:6e:bc:e9:3c:ea:f1:70:0b:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ea851c6c-60ab-4edc-9eb2-260c4506ea14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:0c:0b:e8:36:1a:79:9a:e8:93:40:7e:fe: a3:1f:ab:47:ef:45:8d:37:bd:65:03:aa:a4:66:b0: 96:ef:a2:7b:8a:75:32:39:df:1c:bf:33:b2:3a:a0: 3c:1d:e4:8c:b3:1b:a5:80:27:b1:d6:43:7b:3b:4c: 7f:a0:5e:9e:13:d0:18:3b:42:d8:2a:cf:99:b5:05: 9f:8d:0c:61:ea:a4:a4:11:66:b3:c8:7f:17:c9:c8: 13:f1:74:84:16:3c:3a:27:a3:f8:72:c8:a6:d6:31: 60:26:ea:1c:24:5c:f1:f6:13:96:88:f0:53:6d:f8: 0f:c3:ff:bc:4c:f0:0d:db:18:26:a1:e2:46:0c:01: 23:48:41:82:11:14:62:06:ac:2d:f7:8a:5c:0e:68: 23:3d:c3:eb:89:40:1e:5b:1f:40:cd:39:45:a9:2b: 5c:99:fa:7e:be:51:76:3e:9f:bf:f4:1c:22:b0:80: c9:78:b8:0b:6d:d5:3a:c3:ce:90:51:8f:7b:c3:e3: f1:e4:e8:c0:62:7d:60:84:99:8e:33:56:ed:b5:0f: 3f:ed:8b:41:28:8d:8e:59:ee:6d:77:94:e7:73:de: 45:e1:f3:db:92:e7:65:dc:aa:96:6e:78:e8:cd:30: 5e:e2:ca:f0:d8:6f:a8:12:cd:ea:42:59:d7:b3:f3: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:63:F0:15:7C:6C:EB:98:08:5C:52:D6:4B:7E:34:D7:E4:14:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:35:83:1c:57:2d:ef:16:6b:3a:c1:00:71:84:c5:61:7f:94: ad:02:17:c1:a2:87:59:8d:85:de:82:11:34:4d:d5:66:35:5a: ea:95:1d:04:24:aa:c0:04:ef:1d:6b:2f:f0:7a:49:3a:1b:d9: d4:e5:0b:14:75:fd:82:bf:d7:10:8d:8d:e1:12:cf:f2:da:7b: b7:ac:8b:c3:1e:ce:df:d6:c4:bd:ca:2f:50:d2:0c:ea:3e:aa: 15:3f:89:56:6b:0b:d9:1f:5c:86:1c:7f:a7:4b:f1:a7:88:c8: 42:b5:5d:f9:05:34:42:2c:fe:08:20:a1:31:9c:1a:2a:24:a8: 81:33:85:57:5e:1a:15:19:53:36:4e:e2:06:3a:a9:00:5e:d8: 23:05:b0:9d:0d:9c:49:41:4c:a8:ba:3c:3f:96:fa:19:76:12: 2e:cd:37:28:2c:78:4c:b1:8f:3b:78:67:13:78:12:52:eb:79: cc:dc:7a:75:40:86:af:4a:52:69:9e:59:eb:ab:aa:af:f0:87: 36:10:b2:0c:43:cb:f8:52:e7:70:00:c7:82:79:a0:ec:68:67: bd:7d:11:14:7c:79:c9:e0:f0:40:e6:9c:db:36:49:16:64:e3: 79:53:6a:f6:a1:2a:ef:25:d9:ed:f1:81:2f:89:e6:24:30:bc: d2:e2:e6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXm686Tzq8XALEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWE4NTFjNmMtNjBhYi00ZWRjLTllYjItMjYwYzQ1MDZlYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMMC+g2Gnma6JNAfv6jH6tH70WNN71lA6qk ZrCW76J7inUyOd8cvzOyOqA8HeSMsxulgCex1kN7O0x/oF6eE9AYO0LYKs+ZtQWf jQxh6qSkEWazyH8XycgT8XSEFjw6J6P4csim1jFgJuocJFzx9hOWiPBTbfgPw/+8 TPAN2xgmoeJGDAEjSEGCERRiBqwt94pcDmgjPcPriUAeWx9AzTlFqStcmfp+vlF2 Pp+/9BwisIDJeLgLbdU6w86QUY97w+Px5OjAYn1ghJmOM1bttQ8/7YtBKI2OWe5t d5Tnc95F4fPbkudl3KqWbnjozTBe4srw2G+oEs3qQlnXs/Mt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbvY/AVfGzrmAhcUtZLfjTX5BR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOGY0ZmQ1OGEtMzEzNS0z ZmE0LTg0OTYtNjBlMzE0M2EyMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk1gxxXLe8WazrBAHGExWF/lK0CF8Gih1mNhd6CETRN1WY1WuqVHQQk qsAE7x1rL/B6STob2dTlCxR1/YK/1xCNjeESz/Lae7esi8Mezt/WxL3KL1DSDOo+ qhU/iVZrC9kfXIYcf6dL8aeIyEK1XfkFNEIs/gggoTGcGiokqIEzhVdeGhUZUzZO 4gY6qQBe2CMFsJ0NnElBTKi6PD+W+hl2Ei7NNygseEyxjzt4ZxN4ElLreczcenVA hq9KUmmeWeurqq/whzYQsgxDy/hS53AAx4J5oOxoZ719ERR8ecng8EDmnNs2SRZk 43lTavahKu8l2e3xgS+J5iQwvNLi5rM= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:00 2026 by rpki-client