$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa File: e166c054-c750-3fa9-ae7d-80d1294357cc.roa (raw, json) Hash identifier: o+qX719VAmOJAh9+cjbgbGRA7Z2uE8yJot/mPBoTYD8= Subject key identifier: E6:FB:05:66:00:22:D4:A3:BD:BC:55:D7:A2:56:23:A4:AB:DF:AB:DC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EB73BB69A68ECE03D7FA4 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:b7:3b:b6:9a:68:ec:e0:3d:7f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=696601d3-6c39-40ea-a37c-6527e0894b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:31:c1:b7:84:b8:5a:50:c2:9b:a5:f6:42: 52:e7:1a:a9:82:35:6d:fe:07:f8:e3:e3:18:cd:37: 85:68:7d:3a:af:ab:9b:78:84:3e:6d:1b:93:e6:f7: 75:38:db:74:77:96:b6:03:d3:f0:2c:6d:fa:28:a8: e0:67:e3:13:88:3a:1a:25:75:d6:b0:61:03:00:99: e4:f0:a5:e6:77:d7:78:c0:69:32:e0:a1:49:91:1d: f6:15:30:d2:0b:a0:c9:92:08:6d:33:16:d7:2e:4c: cc:6a:d4:a9:3c:7c:e7:0c:e9:42:da:8f:dc:50:8f: 7e:5f:32:80:af:81:0f:f2:56:65:6c:bf:99:50:6e: c8:dc:80:85:96:ce:3f:05:7d:dc:8d:a1:b3:66:2e: 52:25:01:62:9f:a7:16:9d:f7:aa:9c:7d:bc:ed:90: d3:01:50:1d:21:f8:31:f6:44:00:95:34:8d:bd:f3: ef:96:e0:77:3a:5d:eb:1f:07:4d:58:23:44:8d:10: 16:c0:4e:45:81:26:14:9b:a5:b7:e7:d4:ca:12:17: 2c:53:af:78:9a:bb:bb:d5:ab:39:96:d5:68:aa:8d: 3e:c4:83:c5:11:af:fc:d5:e1:1f:81:ea:e4:30:f1: 91:3a:a4:42:2d:e2:4b:b7:f3:d2:00:39:df:9c:07: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FB:05:66:00:22:D4:A3:BD:BC:55:D7:A2:56:23:A4:AB:DF:AB:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d9:ef:83:21:a5:9c:32:ba:88:72:6a:9c:e8:e4:47:ca:01: ea:c3:60:73:5c:97:3a:45:e1:2b:97:2d:bc:9b:55:e4:6d:d5: 7d:34:14:ac:f8:2e:38:40:98:81:b2:24:9f:d1:66:91:60:1a: 01:d7:d9:38:c7:02:9c:c0:73:11:db:4d:e0:4b:68:7c:a4:d7: de:d1:2c:ef:e2:5b:ca:33:d8:58:54:48:dd:3e:4a:c5:3a:32: bd:64:50:3a:60:45:e5:fe:ad:8b:4e:3c:aa:d9:f5:f1:34:fb: 44:82:4b:d8:79:47:6b:08:92:a7:51:0b:46:56:c6:19:d7:bd: 60:5c:06:c0:8c:6e:3c:c0:67:67:28:e6:4b:5e:02:e2:a3:ac: 9a:45:d4:16:91:be:65:51:4b:3a:a7:8a:6c:15:7e:61:a3:fb: 9b:3d:a1:85:74:e6:94:c5:e6:da:26:c0:ee:a4:fa:e4:1f:21: b5:a6:88:71:e5:9d:f1:56:b8:9a:61:78:9d:8f:74:7b:e6:3f: a9:c4:dd:49:7b:f4:32:44:0c:4d:ee:cf:73:16:2a:e5:6f:64: 8e:24:a6:4e:c4:93:22:e3:bc:74:c1:19:9f:0c:3c:c4:ae:46: 05:66:6e:24:30:76:13:c0:b0:4f:c5:d5:83:bc:6b:cc:e6:8c: 85:17:8c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXrc7tppo7OA9f6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Njk2NjAxZDMtNmMzOS00MGVhLWEzN2MtNjUyN2UwODk0YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPIxwbeEuFpQwpul9kJS5xqpgjVt/gf44+MY zTeFaH06r6ubeIQ+bRuT5vd1ONt0d5a2A9PwLG36KKjgZ+MTiDoaJXXWsGEDAJnk 8KXmd9d4wGky4KFJkR32FTDSC6DJkghtMxbXLkzMatSpPHznDOlC2o/cUI9+XzKA r4EP8lZlbL+ZUG7I3ICFls4/BX3cjaGzZi5SJQFin6cWnfeqnH287ZDTAVAdIfgx 9kQAlTSNvfPvluB3Ol3rHwdNWCNEjRAWwE5FgSYUm6W359TKEhcsU694mru71as5 ltVoqo0+xIPFEa/81eEfgerkMPGROqRCLeJLt/PSADnfnAdEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb7BWYAItSjvbxV16JWI6Sr36vcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTE2NmMwNTQtYzc1MC0z ZmE5LWFlN2QtODBkMTI5NDM1N2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjZ74MhpZwyuohyapzo5EfKAerDYHNclzpF4SuXLbybVeRt1X00FKz4 LjhAmIGyJJ/RZpFgGgHX2TjHApzAcxHbTeBLaHyk197RLO/iW8oz2FhUSN0+SsU6 Mr1kUDpgReX+rYtOPKrZ9fE0+0SCS9h5R2sIkqdRC0ZWxhnXvWBcBsCMbjzAZ2co 5kteAuKjrJpF1BaRvmVRSzqnimwVfmGj+5s9oYV05pTF5tomwO6k+uQfIbWmiHHl nfFWuJpheJ2PdHvmP6nE3Ul79DJEDE3uz3MWKuVvZI4kpk7EkyLjvHTBGZ8MPMSu RgVmbiQwdhPAsE/F1YO8a8zmjIUXjNQ= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:47 2026 by rpki-client