$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa File: 37aeddef-dd3b-3dec-801b-e0f9e620765c.roa (raw, json) Hash identifier: rPkuF9eY3WpE+2s54DZrGXtFKO5vqzp9bM9x/BgS5p0= Subject key identifier: 8E:01:CA:D4:BF:81:42:CA:D4:6B:64:A5:54:6A:93:72:83:70:B8:8E Certificate issuer: /CN=719038d9-6923-4e29-8b36-f45b06ce12f8 Certificate serial: 010D0C9F4328584D0A779E4AEF19C0383849D300 Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 393238 IP address blocks: 138.28.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:9e:4a:ef:19:c0:38:38:49:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=4a9e4ae2-38a5-4224-ab52-4fb51d4ad262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:df:88:c8:12:f3:e0:7a:20:79:83:f4:fb: 26:2b:57:d3:e7:94:ef:69:67:bb:54:30:5e:3f:7d: a3:c8:7e:b8:f2:18:50:3b:33:03:48:c4:21:6b:e8: 96:48:18:e8:2a:55:cf:e5:ab:55:52:77:bf:4a:62: 01:78:34:a4:dc:6a:0f:bc:2e:9b:0c:31:b9:a6:7c: ba:61:a5:64:02:46:f1:95:96:f7:4c:1f:57:b8:79: 20:45:c7:c2:56:af:60:5e:35:84:86:d3:41:ac:ff: 52:cd:fc:88:a2:e4:cb:2f:17:59:3d:3d:af:73:30: f8:50:e3:04:f3:66:61:57:cd:2e:cd:ee:c6:dd:1e: 3a:51:e0:72:be:aa:bd:8d:68:95:63:da:35:d4:89: 03:55:f2:8a:c2:5a:98:fa:0a:9a:11:be:c0:13:8b: 62:ee:73:09:53:d6:50:e9:a4:03:de:08:3d:c1:0a: cf:23:41:51:30:fb:05:b0:83:2a:12:83:60:97:37: 21:fe:85:6c:8e:77:8f:52:39:67:5e:37:67:00:3c: ab:a5:6f:b4:e3:f1:06:14:c4:cc:48:3b:72:63:a4: 8d:f8:99:3d:eb:35:77:0c:7b:d9:83:dd:81:b6:c8: 93:65:61:78:92:6f:82:b4:5f:4b:c6:27:f5:78:b9: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:01:CA:D4:BF:81:42:CA:D4:6B:64:A5:54:6A:93:72:83:70:B8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl X509v3 Authority Key Identifier: keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer sbgp-ipAddrBlock: critical IPv4: 138.28.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:bd:8e:a3:c2:02:57:32:f1:a7:06:f7:41:fc:91:3f:50:b3: 28:43:20:3b:09:c4:6f:a8:c9:c2:12:3d:7d:c6:5c:24:f8:da: 26:1e:4b:69:59:83:98:3f:09:08:69:1b:70:81:71:ff:77:b0: 24:f7:62:a0:f5:de:a4:81:fb:c0:33:d7:d3:2d:89:23:7b:ed: ac:a1:0f:b2:4a:74:27:20:8e:60:54:1e:2f:45:4d:de:16:c3: 99:7a:b3:3a:a1:5d:39:62:0d:7a:f3:44:0d:63:58:e2:3c:27: 8b:19:dd:49:b7:70:24:35:30:8b:a9:ef:b0:c0:76:3a:21:af: 32:21:29:a4:65:c8:25:0f:ea:1f:7a:4d:6d:cd:87:75:fc:8d: 46:b7:3a:db:9a:47:89:9a:49:c9:db:50:c8:67:9c:2e:7c:55: 5a:fd:59:5d:4d:27:2a:4e:1c:03:3b:8b:f4:74:c2:7f:94:1a: 32:29:45:5c:41:8b:94:43:c7:44:09:2b:28:a1:80:eb:47:2f: fa:3d:c7:77:77:81:10:57:7a:fc:4a:9b:97:69:0a:c6:db:bd: 35:ac:25:16:79:1a:15:1d:f8:18:9e:85:4b:9b:a0:6a:02:2e: 39:ae:a3:0e:54:69:55:7c:74:8f:90:41:b9:d5:88:bf:d2:1b: 96:7f:4f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd55K7xnAODhJ0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2Ux MmY4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NGE5ZTRhZTItMzhhNS00MjI0LWFiNTItNGZiNTFkNGFkMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7fiMgS8+B6IHmD9PsmK1fT55TvaWe7VDBe P32jyH648hhQOzMDSMQha+iWSBjoKlXP5atVUne/SmIBeDSk3GoPvC6bDDG5pny6 YaVkAkbxlZb3TB9XuHkgRcfCVq9gXjWEhtNBrP9SzfyIouTLLxdZPT2vczD4UOME 82ZhV80uze7G3R46UeByvqq9jWiVY9o11IkDVfKKwlqY+gqaEb7AE4ti7nMJU9ZQ 6aQD3gg9wQrPI0FRMPsFsIMqEoNglzch/oVsjnePUjlnXjdnADyrpW+04/EGFMTM SDtyY6SN+Jk96zV3DHvZg92BtsiTZWF4km+CtF9Lxif1eLnKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4BytS/gULK1GtkpVRqk3KDcLiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MTkw MzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvMzdhZWRkZWYtZGQzYi0z ZGVjLTgwMWItZTBmOWU2MjA3NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzE5MDM4ZDktNjkyMy00ZTI5LThi MzYtZjQ1YjA2Y2UxMmY4LzcxOTAzOGQ5LTY5MjMtNGUyOS04YjM2LWY0NWIwNmNl MTJmOC5jcmwwHwYDVR0jBBgwFoAUd7Dtd6dLz91nSrrpZ2b4HS5vbQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDVi MDZjZTEyZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHihwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO9jqPCAlcy8acG90H8kT9QsyhDIDsJxG+oycISPX3GXCT42iYeS2lZ g5g/CQhpG3CBcf93sCT3YqD13qSB+8Az19MtiSN77ayhD7JKdCcgjmBUHi9FTd4W w5l6szqhXTliDXrzRA1jWOI8J4sZ3Um3cCQ1MIup77DAdjohrzIhKaRlyCUP6h96 TW3Nh3X8jUa3OtuaR4maScnbUMhnnC58VVr9WV1NJypOHAM7i/R0wn+UGjIpRVxB i5RDx0QJKyihgOtHL/o9x3d3gRBXevxKm5dpCsbbvTWsJRZ5GhUd+BiehUuboGoC Ljmuow5UaVV8dI+QQbnViL/SG5Z/Tzg= -----END CERTIFICATE-----Generated at Thu Mar 26 06:30:04 2026 by rpki-client