$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa File: e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa (raw, json) Hash identifier: IlVxxby29V6KTY4u4h1yhLJ+tFMRGWDCJEJn0MRotiM= Subject key identifier: 31:55:D5:0A:1F:CD:FD:73:ED:B5:A0:6A:EF:9A:2C:78:22:1C:42:C8 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5EC7A13A70B4D7C2485F40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.1.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c7:a1:3a:70:b4:d7:c2:48:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=220983d9-f879-4bd0-ae64-d95d63952f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:8a:7f:49:30:05:60:e7:64:7b:69:fc:da: bf:70:4e:6c:9e:fb:24:06:84:f0:a5:d3:b4:25:f0: 87:c7:93:45:b1:dc:84:7d:81:06:29:5d:ac:59:bd: f5:b6:4b:b4:0d:a7:f2:be:c2:6c:e0:ab:0e:af:26: e4:b0:81:53:81:f0:d0:97:6f:1d:af:d2:9f:0c:28: 97:04:f3:c3:7d:a6:2e:18:99:71:a8:00:a5:b2:83: c6:e8:2b:25:7b:00:02:63:09:48:b6:8a:54:65:a6: 53:18:d4:c6:eb:38:7c:9a:0a:e8:93:70:53:41:25: 1a:ee:6e:7e:9d:87:39:7b:f5:7f:2d:74:7b:8d:31: e3:16:03:a8:cd:6c:2f:c0:69:9f:12:16:aa:2f:41: fc:6f:12:e9:10:b7:39:3d:1d:e4:7f:f0:c5:fe:ff: d0:f7:31:ec:87:73:8f:e7:d0:50:6e:ec:3d:33:13: 4c:1f:62:c0:b0:40:f6:67:42:4b:ef:d2:09:15:28: 85:0b:64:0b:90:4c:32:46:a8:28:a6:48:08:91:ab: dd:27:48:60:ba:e1:00:6c:d2:08:67:b5:e6:a3:1c: 88:18:58:70:90:73:93:f6:9c:a4:a2:00:4a:f8:9f: 80:70:3c:56:51:75:68:c7:78:46:40:29:69:68:b5: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:D5:0A:1F:CD:FD:73:ED:B5:A0:6A:EF:9A:2C:78:22:1C:42:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:63:27:db:6b:21:3f:42:d1:91:ec:0c:da:cc:07:d4:90:20: ac:88:84:94:9e:ea:9a:e5:84:fb:e0:a1:13:e4:6c:82:ad:87: 7e:49:06:d2:dc:b6:6e:5c:15:7e:41:c8:14:60:24:03:eb:98: d0:27:af:04:24:98:c2:3d:c3:56:41:eb:99:2d:a8:3d:1c:d7: 47:6d:0b:17:4d:e9:b3:93:ff:89:d7:8a:e6:63:d7:7e:2f:fa: 44:b5:f9:98:81:d0:50:e7:88:b0:22:d7:60:e0:51:d2:76:1b: b5:9c:e4:d5:c7:40:0c:a4:fa:a8:a6:ec:20:cf:de:d1:3a:9f: 93:3c:1a:0f:46:95:ed:4b:0b:6f:42:1e:6e:12:e0:01:fa:5b: 38:bc:a4:63:f4:f9:a4:1d:de:26:13:3b:2c:79:fc:94:10:f3: b2:a7:8f:b2:19:d5:38:78:d9:a1:70:85:a9:1c:d9:e6:80:26: bb:b3:ab:e8:83:10:f0:ff:82:9a:fc:83:98:2f:40:d6:75:ca: 7a:6b:b1:82:88:7e:86:67:71:0c:d9:4e:d5:22:bd:41:18:90: e3:dc:43:4d:03:ec:67:64:00:65:28:97:7d:55:03:b4:e4:c1: 5e:02:41:cc:50:21:5b:69:15:0e:fb:8c:7b:bf:a3:0e:78:3b: ed:f3:df:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsehOnC018JIX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjIwOTgzZDktZjg3OS00YmQwLWFlNjQtZDk1ZDYzOTUyZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwWKf0kwBWDnZHtp/Nq/cE5snvskBoTwpdO0 JfCHx5NFsdyEfYEGKV2sWb31tku0DafyvsJs4KsOrybksIFTgfDQl28dr9KfDCiX BPPDfaYuGJlxqAClsoPG6CslewACYwlItopUZaZTGNTG6zh8mgrok3BTQSUa7m5+ nYc5e/V/LXR7jTHjFgOozWwvwGmfEhaqL0H8bxLpELc5PR3kf/DF/v/Q9zHsh3OP 59BQbuw9MxNMH2LAsED2Z0JL79IJFSiFC2QLkEwyRqgopkgIkavdJ0hguuEAbNII Z7XmoxyIGFhwkHOT9pykogBK+J+AcDxWUXVox3hGQClpaLUwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFV1Qofzf1z7bWgau+aLHgiHELIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTZiOTIxNWItOWYyMC0z Y2M2LWI3NTUtNjIzYWEzYTFhNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtjJ9trIT9C0ZHsDNrMB9SQIKyIhJSe6prlhPvgoRPkbIKth35JBtLc tm5cFX5ByBRgJAPrmNAnrwQkmMI9w1ZB65ktqD0c10dtCxdN6bOT/4nXiuZj134v +kS1+ZiB0FDniLAi12DgUdJ2G7Wc5NXHQAyk+qim7CDP3tE6n5M8Gg9Gle1LC29C Hm4S4AH6Wzi8pGP0+aQd3iYTOyx5/JQQ87Knj7IZ1Th42aFwhakc2eaAJruzq+iD EPD/gpr8g5gvQNZ1ynprsYKIfoZncQzZTtUivUEYkOPcQ00D7GdkAGUol31VA7Tk wV4CQcxQIVtpFQ77jHu/ow54O+3z38M= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:21 2026 by rpki-client