$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa File: d5fd832c-a195-3503-924b-73624a4aef1e.roa (raw, json) Hash identifier: 4nq42um5SfcZfe09oL797I627VmR2TVgUcxuc9DI/cQ= Subject key identifier: 46:C6:E7:DB:6A:99:1E:29:69:0A:8F:3D:87:30:85:4C:48:4F:1B:CB Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D6AAA64BF56173D81E7D1E100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 138.2.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:64:bf:56:17:3d:81:e7:d1:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=9c210cb7-485f-417d-9c5d-11aa3f251112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:92:5b:83:dd:dd:49:ef:36:42:66:5b:02: f3:0a:06:e3:b2:7c:4f:1c:19:96:82:e6:f4:82:f2: c4:58:06:70:04:ad:21:34:b5:7d:ad:35:0e:f9:1d: 40:fb:fa:29:2f:11:a4:e6:e1:0b:82:5c:d3:16:b3: 6c:de:cf:da:d0:9e:4d:44:2f:45:58:9c:d5:b8:54: de:30:ec:7e:a2:9b:2c:75:3d:6a:d0:fe:1e:81:4b: de:2f:50:8e:1c:3b:fe:be:e8:9a:06:1d:19:5e:9d: ab:a6:58:97:b9:c8:c8:fd:77:6e:ed:6c:1d:b8:99: 1d:09:9b:d5:db:b4:3e:a5:a2:bb:07:73:8d:aa:14: 0c:82:20:88:ae:d2:fc:47:69:df:20:42:18:1b:27: 01:70:90:49:0f:49:78:c0:3a:da:6c:3d:a3:1e:01: 3a:59:32:19:eb:f3:db:24:3a:1a:33:fe:41:1e:19: 85:be:da:c0:8b:ba:69:b3:9c:2a:fd:a4:ca:7e:48: b4:47:64:f3:a5:a8:7e:b0:ae:10:67:38:c9:d1:26: 1c:1d:87:a1:33:5f:74:68:1e:1c:a4:3c:fc:6d:61: 97:95:22:42:75:b9:8f:c6:58:34:8b:32:a2:26:10: 97:ea:f2:40:47:b5:7d:e1:8f:49:63:44:f4:21:a5: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:E7:DB:6A:99:1E:29:69:0A:8F:3D:87:30:85:4C:48:4F:1B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cf:08:33:7d:7a:97:5a:9e:6a:11:b4:29:15:85:af:1c:e1: 93:64:ac:7d:e7:32:51:f5:a6:6e:a7:c2:aa:cb:d1:be:a1:b1: 92:bc:d5:e1:51:9b:fb:45:eb:99:32:1f:dd:29:50:0d:f7:42: bd:9e:52:11:ea:11:4b:0e:45:81:fe:6d:20:82:77:e6:7f:dc: 6d:a9:6b:7d:54:3e:ae:b5:0e:8c:b7:7f:39:f5:73:38:04:02: 04:0a:bc:ca:e3:19:ec:a6:2e:af:2b:3a:27:e5:1f:d4:c1:da: 22:c0:36:38:0d:f8:8c:59:d8:bc:d4:30:66:36:6c:9f:16:49: 6d:eb:aa:bc:dc:00:0c:53:84:90:e2:f3:ab:d2:d1:4f:6c:28: 8f:03:b6:3f:cf:21:ef:e5:87:ec:6b:8f:3d:8b:c8:10:49:fc: 9e:1d:95:b0:09:05:d0:36:3e:c5:53:b6:8d:b0:d7:cf:98:33: 27:5c:c3:51:7b:bb:8e:cf:cf:12:de:59:97:8f:e9:76:34:9b: 29:30:db:c8:93:b3:ca:b4:24:84:85:63:56:2b:7e:de:cd:b1: 0d:8a:22:95:03:68:bf:e3:11:c6:8b:15:3b:b8:cd:0f:a8:02: 76:7d:39:7b:53:10:71:4c:65:da:c3:7d:a6:87:91:f8:ce:8e: d0:8a:e3:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmS/Vhc9gefR4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OWMyMTBjYjctNDg1Zi00MTdkLTljNWQtMTFhYTNmMjUxMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl6SW4Pd3UnvNkJmWwLzCgbjsnxPHBmWgub0 gvLEWAZwBK0hNLV9rTUO+R1A+/opLxGk5uELglzTFrNs3s/a0J5NRC9FWJzVuFTe MOx+opssdT1q0P4egUveL1COHDv+vuiaBh0ZXp2rpliXucjI/Xdu7WwduJkdCZvV 27Q+paK7B3ONqhQMgiCIrtL8R2nfIEIYGycBcJBJD0l4wDrabD2jHgE6WTIZ6/Pb JDoaM/5BHhmFvtrAi7pps5wq/aTKfki0R2Tzpah+sK4QZzjJ0SYcHYehM190aB4c pDz8bWGXlSJCdbmPxlg0izKiJhCX6vJAR7V94Y9JY0T0IaWMoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbG59tqmR4paQqPPYcwhUxITxvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDVmZDgzMmMtYTE5NS0z NTAzLTkyNGItNzM2MjRhNGFlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTPCDN9epdanmoRtCkVha8c4ZNkrH3nMlH1pm6nwqrL0b6hsZK81eFR m/tF65kyH90pUA33Qr2eUhHqEUsORYH+bSCCd+Z/3G2pa31UPq61Doy3fzn1czgE AgQKvMrjGeymLq8rOiflH9TB2iLANjgN+IxZ2LzUMGY2bJ8WSW3rqrzcAAxThJDi 86vS0U9sKI8Dtj/PIe/lh+xrjz2LyBBJ/J4dlbAJBdA2PsVTto2w18+YMydcw1F7 u47PzxLeWZeP6XY0mykw28iTs8q0JISFY1Yrft7NsQ2KIpUDaL/jEcaLFTu4zQ+o AnZ9OXtTEHFMZdrDfaaHkfjOjtCK48w= -----END CERTIFICATE-----Generated at Mon Apr 13 14:40:45 2026 by rpki-client