$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa File: f8026007-1692-331c-9a2b-cf10e45b808e.roa (raw, json) Hash identifier: etCK6zJOd8vVuZZp7+iTfUgQMmv5D9KzDtfDysAKhwI= Subject key identifier: EA:6D:78:EA:9D:D6:78:25:6B:B7:30:0E:6E:48:74:ED:E2:11:8E:68 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CA5F74C869E727A7427203E00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 138.2.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4c:86:9e:72:7a:74:27:20:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=f6e79b7f-59b6-43d8-b9ab-c9c3074c01bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:8c:ca:17:08:c5:61:be:54:56:48:2a:12: 82:7d:59:8f:d5:b7:1d:7f:a7:c0:45:36:15:f8:f9: 0a:d0:a2:0d:7a:3b:dc:82:cb:a6:61:cd:ab:3c:5f: 71:d9:78:60:43:18:dc:d9:87:3b:08:f6:fe:d9:24: 17:a1:3e:8e:88:7c:a7:d0:13:5a:7e:25:a9:ef:ff: 52:9c:ce:b1:eb:cd:4c:09:e7:1c:6b:e2:3e:96:30: af:ad:b3:ce:da:b0:c2:9b:af:b0:46:05:56:a4:6d: 2f:59:d1:15:f1:a2:2c:c0:61:83:98:2d:17:8e:b5: a8:6d:7c:bf:dc:4b:f4:e0:0b:d0:cc:49:0f:59:02: 48:c4:68:1e:9e:04:ae:9b:2d:40:0a:14:20:30:e0: 5c:14:d1:59:30:f2:39:64:7a:d0:d5:e2:7a:6d:f2: 08:4f:dd:33:22:d8:93:2b:52:eb:08:b9:e7:7b:ce: 7d:9a:e0:e7:5d:10:fc:f1:3e:c6:6c:3a:bd:45:4f: 51:e5:56:fb:58:b3:8d:1a:29:4b:af:29:49:ba:a9: d6:41:fe:38:bf:46:fe:7d:44:6f:b8:7c:ef:94:46: 85:24:68:7a:a7:58:67:9b:d4:f8:27:3b:86:cb:06: d5:75:ac:85:95:bd:01:99:31:48:92:62:6a:a1:ca: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6D:78:EA:9D:D6:78:25:6B:B7:30:0E:6E:48:74:ED:E2:11:8E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2f:96:d3:59:a5:82:54:36:8e:05:dc:1d:9a:be:71:3f:56: 9f:e3:66:17:86:89:c4:6c:5d:0c:65:b0:9c:e9:6d:6c:36:a5: 2f:87:a3:2b:37:8a:92:f8:2e:30:7c:68:dc:55:ee:ce:64:69: a9:13:e7:8c:d6:fa:a7:81:2b:c6:4a:9a:46:30:5d:d8:54:e5: 09:6b:36:e9:5c:87:c0:4a:ef:56:64:52:14:65:cf:ba:6c:24: 53:fa:8b:08:20:3f:ee:c9:92:2a:10:ce:df:aa:7c:60:69:6b: 33:fa:b6:7c:cd:36:21:27:3c:3d:14:4d:db:b3:7c:8d:a3:78: 48:12:ac:da:9d:49:e8:80:91:da:4e:b8:23:07:e8:c8:c4:1a: 90:4b:75:e6:71:e0:a1:81:95:dd:eb:23:95:c3:0e:ac:89:53: e7:89:01:23:fb:0a:b3:07:8f:93:93:14:17:9b:65:9a:75:ad: ac:d4:34:b3:b0:72:73:a6:16:31:7e:8a:04:e3:39:59:a0:fc: 65:34:4f:6c:a3:48:47:5c:5c:ff:0f:54:0a:ec:4e:1b:88:4c: 68:dd:4c:ba:94:bb:32:62:a6:60:06:18:1d:62:28:d6:1e:9b: 58:57:66:20:a0:a2:e0:ed:d6:3f:b8:d3:db:32:aa:b3:47:28: 14:f9:ab:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90yGnnJ6dCcgPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZjZlNzliN2YtNTliNi00M2Q4LWI5YWItYzljMzA3NGMwMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHmMyhcIxWG+VFZIKhKCfVmP1bcdf6fARTYV +PkK0KINejvcgsumYc2rPF9x2XhgQxjc2Yc7CPb+2SQXoT6OiHyn0BNafiWp7/9S nM6x681MCecca+I+ljCvrbPO2rDCm6+wRgVWpG0vWdEV8aIswGGDmC0XjrWobXy/ 3Ev04AvQzEkPWQJIxGgengSumy1AChQgMOBcFNFZMPI5ZHrQ1eJ6bfIIT90zItiT K1LrCLnne859muDnXRD88T7GbDq9RU9R5Vb7WLONGilLrylJuqnWQf44v0b+fURv uHzvlEaFJGh6p1hnm9T4JzuGywbVdayFlb0BmTFIkmJqocobyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpteOqd1ngla7cwDm5IdO3iEY5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjgwMjYwMDctMTY5Mi0z MzFjLTlhMmItY2YxMGU0NWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYvltNZpYJUNo4F3B2avnE/Vp/jZheGicRsXQxlsJzpbWw2pS+Hoys3 ipL4LjB8aNxV7s5kaakT54zW+qeBK8ZKmkYwXdhU5QlrNulch8BK71ZkUhRlz7ps JFP6iwggP+7JkioQzt+qfGBpazP6tnzNNiEnPD0UTduzfI2jeEgSrNqdSeiAkdpO uCMH6MjEGpBLdeZx4KGBld3rI5XDDqyJU+eJASP7CrMHj5OTFBebZZp1razUNLOw cnOmFjF+igTjOVmg/GU0T2yjSEdcXP8PVArsThuITGjdTLqUuzJipmAGGB1iKNYe m1hXZiCgouDt1j+409syqrNHKBT5q6A= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:17 2026 by rpki-client