$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4620b2d-b16b-38e1-8230-83a6d33d84b6.roa File: e4620b2d-b16b-38e1-8230-83a6d33d84b6.roa (raw, json) Hash identifier: iYufpGhQr2PLC8ZBB2/lZw5/eLpsN1Pkp0A3hWWP/Y8= Subject key identifier: D7:98:11:2A:F6:FE:A4:F5:4B:A7:F3:F9:3D:17:D7:E1:EC:F3:17:06 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5E8A7F53D13A0113849280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4620b2d-b16b-38e1-8230-83a6d33d84b6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:8a:7f:53:d1:3a:01:13:84:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=749f8a33-7d31-446c-9852-b90f8770ce5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:d8:70:f1:46:ad:ae:c6:64:eb:d6:57:b5: ad:3b:53:36:15:06:50:bf:b4:db:ab:e8:5f:66:f7: 2d:4f:36:e1:b6:bb:0a:44:25:0d:b9:c1:bc:01:6e: f5:59:b5:da:08:01:d7:6c:0b:97:17:13:38:b9:98: 14:49:0e:b1:b9:0c:6b:a1:0a:34:2c:bb:84:5a:e2: bd:b7:ef:23:0d:07:17:03:6a:7c:4f:54:ac:b5:03: f8:ef:2c:eb:08:e8:7b:d0:dd:e9:d8:dc:e9:a8:b3: 57:36:1f:f6:75:df:92:c0:e7:7d:7c:49:35:85:c6: 44:78:bf:c0:c5:66:87:b4:8c:f6:18:13:ae:1d:a8: 3c:d1:75:fd:e3:7e:95:bd:36:4b:52:e2:5e:c8:6e: ae:b3:8b:ee:a2:16:e2:de:5e:1b:bf:3e:bc:8c:a0: c1:39:5e:9f:05:8e:85:88:17:c0:86:1c:70:ad:f1: a3:f6:80:e7:19:6c:4d:5f:d2:23:1a:8e:ae:f2:5c: 88:88:8a:45:3d:cd:2e:be:f5:a3:9a:3c:66:09:22: 71:41:b7:5f:b4:eb:51:74:96:97:f5:9b:57:d3:a6: a8:bd:fa:ef:78:df:35:a3:0e:d3:29:e2:21:d7:ea: 79:dc:31:36:e0:d8:17:b9:a4:5c:34:5c:c8:8f:57: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:11:2A:F6:FE:A4:F5:4B:A7:F3:F9:3D:17:D7:E1:EC:F3:17:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4620b2d-b16b-38e1-8230-83a6d33d84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3f:96:f5:e4:7f:a3:c0:c4:0e:c1:c0:16:ae:2b:e1:17:e9: f8:64:9d:e7:89:af:c1:03:28:ea:49:37:c0:46:e8:f6:93:ef: 4b:92:53:f7:ff:32:fd:48:73:53:db:22:27:17:35:ce:1b:03: f0:6f:1d:0e:1c:d6:2c:a2:58:42:65:23:9d:22:a6:04:05:ed: 23:a4:18:10:5d:a8:98:34:58:32:23:31:2a:7e:4a:c7:8d:9a: b5:f7:c7:fb:40:1c:58:92:4c:2a:a4:dd:e1:96:e6:3f:d2:d9: 76:73:0d:b7:b8:aa:48:9b:35:1d:46:e6:2d:a2:24:85:d1:b1: b9:6f:f9:7d:90:95:59:12:85:02:d8:45:00:9f:5a:93:e3:26: 1f:be:92:b4:57:c7:ef:65:b1:2f:26:b9:50:d5:aa:ff:8f:10: 63:16:43:03:d4:52:b3:ad:7e:c5:ab:a7:a4:d8:a7:f1:36:3c: 4d:f5:c0:22:0f:0e:e5:1e:2c:0d:d8:4a:40:df:63:3f:68:27: d3:2d:c6:39:c7:04:ba:4b:49:70:c6:09:57:e7:6d:ce:76:34: a7:db:15:cc:9b:b0:8e:7b:dd:8d:a9:fe:24:f9:3e:3d:fb:a3: 3d:90:87:4f:0a:b7:70:84:9f:2e:06:49:f8:69:81:76:9e:23: 80:6b:ae:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXop/U9E6AROEkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzQ5ZjhhMzMtN2QzMS00NDZjLTk4NTItYjkwZjg3NzBjZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKfYcPFGra7GZOvWV7WtO1M2FQZQv7Tbq+hf ZvctTzbhtrsKRCUNucG8AW71WbXaCAHXbAuXFxM4uZgUSQ6xuQxroQo0LLuEWuK9 t+8jDQcXA2p8T1SstQP47yzrCOh70N3p2NzpqLNXNh/2dd+SwOd9fEk1hcZEeL/A xWaHtIz2GBOuHag80XX9436VvTZLUuJeyG6us4vuohbi3l4bvz68jKDBOV6fBY6F iBfAhhxwrfGj9oDnGWxNX9IjGo6u8lyIiIpFPc0uvvWjmjxmCSJxQbdftOtRdJaX 9ZtX06aovfrveN81ow7TKeIh1+p53DE24NgXuaRcNFzIj1fBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeYESr2/qT1S6fz+T0X1+Hs8xcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTQ2MjBiMmQtYjE2Yi0z OGUxLTgyMzAtODNhNmQzM2Q4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo/lvXkf6PAxA7BwBauK+EX6fhkneeJr8EDKOpJN8BG6PaT70uSU/f/ Mv1Ic1PbIicXNc4bA/BvHQ4c1iyiWEJlI50ipgQF7SOkGBBdqJg0WDIjMSp+SseN mrX3x/tAHFiSTCqk3eGW5j/S2XZzDbe4qkibNR1G5i2iJIXRsblv+X2QlVkShQLY RQCfWpPjJh++krRXx+9lsS8muVDVqv+PEGMWQwPUUrOtfsWrp6TYp/E2PE31wCIP DuUeLA3YSkDfYz9oJ9MtxjnHBLpLSXDGCVfnbc52NKfbFcybsI573Y2p/iT5Pj37 oz2Qh08Kt3CEny4GSfhpgXaeI4Brrm8= -----END CERTIFICATE-----Generated at Thu Feb 26 06:08:57 2026 by rpki-client