$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa File: d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json) Hash identifier: qaaC7pRU/5kLLFtFt6zPWFcam2qu642uqOihZAtbaTI= Subject key identifier: 15:6E:14:BC:FA:DA:3E:1B:42:81:66:09:11:E6:00:EA:4F:F9:32:3C Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584D95F0001471986764D50C0D80 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 396905 IP address blocks: 138.43.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:00:14:71:98:67:64:d5:0c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=2046b910-53b6-475a-b4f7-a58a4cde6923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:f4:92:78:33:bf:07:d1:f4:c8:d0:78:6a: 5f:0f:bd:b4:5f:d1:02:d3:72:dc:36:32:2e:6c:3f: 46:87:ce:24:10:94:72:d4:d8:a6:a3:4c:bb:df:d1: ff:c1:84:59:28:71:fd:b1:33:17:15:6a:69:8a:18: 20:b4:7d:a0:ba:5d:b2:7a:c6:86:08:05:34:c7:53: 88:4c:55:bb:96:f1:f0:ee:61:d1:8d:f2:b0:c0:8c: 12:e5:49:06:d8:31:10:a2:20:65:94:72:17:5e:ea: 30:3f:df:10:f6:30:79:9f:0b:b9:ff:0c:5f:51:6e: a9:cf:f7:54:eb:3c:bc:66:5a:a3:f6:21:1e:17:bb: 03:ef:88:05:09:12:ef:bd:f9:7e:e2:64:1e:a1:d1: 0f:5a:f6:e7:d2:2a:09:e7:03:e9:4e:da:e7:60:e6: 0d:7c:be:e0:17:78:8e:4a:ae:df:50:6e:0a:ab:a9: c5:f7:5c:ee:6c:d7:a0:f0:10:8d:ba:34:dc:4f:11: f7:2c:32:9a:b2:d3:b8:cb:0b:68:43:33:c0:02:18: 9a:04:6b:d8:b3:da:10:f6:47:34:94:c7:09:98:0d: ce:fa:7b:82:c8:f1:5f:23:10:dd:f7:c0:5b:4a:a8: a2:15:ed:b9:88:1a:f1:c5:b7:3e:f1:5a:92:18:86: 93:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6E:14:BC:FA:DA:3E:1B:42:81:66:09:11:E6:00:EA:4F:F9:32:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 138.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:29:55:66:43:22:48:cf:f4:82:9e:ba:37:88:cf:33:0d:4f: 61:74:aa:6f:7f:d0:fe:35:da:b6:98:27:79:0c:d1:3c:0a:7d: dc:b3:f3:90:07:8e:9b:f5:58:ea:14:87:50:cd:f7:b7:1e:7c: 15:b4:e1:62:50:d3:22:de:a6:0d:38:85:19:62:fe:df:3c:84: 4b:b2:69:26:c2:e2:08:14:0a:e0:c6:f1:0f:83:1f:ad:b2:2b: 16:bf:4b:a4:ba:54:6e:c5:b1:07:f7:b9:08:ae:9a:48:16:30: 65:94:1d:5c:6e:0e:63:63:c7:9f:90:06:1e:bd:f7:3b:44:c4: 67:27:5a:9d:1b:04:44:fe:a9:cc:cf:3c:64:35:a0:52:51:58: 67:eb:f3:40:bd:2f:5f:26:09:b2:b4:49:72:fa:63:44:a1:3f: 45:1e:3b:f7:b4:ee:ce:5d:2e:3d:f9:6e:a4:ed:21:9f:cd:5f: 10:72:91:ba:f3:f7:7a:68:d7:fb:56:22:01:d2:b8:e8:8a:66: 3e:71:06:c6:f2:4f:dc:61:44:3b:81:b7:64:ac:d3:6d:80:26: 5b:fa:30:37:07:aa:e5:34:be:f0:6c:cb:4f:db:b4:47:7a:ff: 16:37:fc:d9:23:8b:b6:89:a7:d1:dc:13:5e:7d:0a:ae:2d:0f: df:ff:0a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AAUcZhnZNUMDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MjA0NmI5MTAtNTNiNi00NzVhLWI0ZjctYTU4YTRjZGU2OTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0T0kngzvwfR9MjQeGpfD720X9EC03LcNjIu bD9Gh84kEJRy1Nimo0y739H/wYRZKHH9sTMXFWppihggtH2gul2yesaGCAU0x1OI TFW7lvHw7mHRjfKwwIwS5UkG2DEQoiBllHIXXuowP98Q9jB5nwu5/wxfUW6pz/dU 6zy8Zlqj9iEeF7sD74gFCRLvvfl+4mQeodEPWvbn0ioJ5wPpTtrnYOYNfL7gF3iO Sq7fUG4Kq6nF91zubNeg8BCNujTcTxH3LDKastO4ywtoQzPAAhiaBGvYs9oQ9kc0 lMcJmA3O+nuCyPFfIxDd98BbSqiiFe25iBrxxbc+8VqSGIaTbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVuFLz62j4bQoFmCRHmAOpP+TI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIpVWZDIkjP9IKeujeIzzMNT2F0qm9/0P412raYJ3kM0TwKfdyz85AH jpv1WOoUh1DN97cefBW04WJQ0yLepg04hRli/t88hEuyaSbC4ggUCuDG8Q+DH62y Kxa/S6S6VG7FsQf3uQiumkgWMGWUHVxuDmNjx5+QBh699ztExGcnWp0bBET+qczP PGQ1oFJRWGfr80C9L18mCbK0SXL6Y0ShP0UeO/e07s5dLj35bqTtIZ/NXxBykbrz 93po1/tWIgHSuOiKZj5xBsbyT9xhRDuBt2Ss022AJlv6MDcHquU0vvBsy0/btEd6 /xY3/Nkji7aJp9HcE159Cq4tD9//Cuk= -----END CERTIFICATE-----Generated at Wed May 13 08:32:46 2026 by rpki-client