$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa File: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (raw, json) Hash identifier: UuhEdcmEZU94tsekzD/M+U+tsk4Rmc7e+AXzShZxDCU= Subject key identifier: FE:25:F7:F4:CB:88:63:32:FC:27:4D:16:75:36:3E:04:62:8D:C0:E9 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584DCDC5AE46C3747B0F1F9B3200 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 216.120.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:ae:46:c3:74:7b:0f:1f:9b:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=6be610cb-b143-4200-a2b0-ec1a2a9c998d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:db:b3:3f:b7:af:ef:df:46:6f:02:92:59: 35:c6:1a:6b:41:69:62:82:eb:e5:1a:f6:dc:5f:3f: a1:b0:54:9f:e1:de:76:b5:3a:18:87:aa:d1:c2:94: 8a:ab:21:48:c8:72:d9:f0:63:5c:b5:d8:ad:d9:37: 91:f5:48:80:22:a4:78:d6:7a:e7:5e:1f:12:09:4a: 6e:86:bd:47:dc:3a:f2:eb:d2:bc:bc:e0:d4:14:07: a0:43:a7:66:4d:da:3a:55:f3:33:fa:68:4c:ec:4d: 77:eb:b9:2a:a9:23:04:56:85:22:9a:2f:cc:b5:0a: 2f:5d:1c:a0:17:3e:4b:6f:d2:24:c5:66:3f:e6:f2: 5f:96:84:1e:d2:35:97:e8:11:3b:c7:c3:6c:8f:3c: cf:a8:a8:db:a9:73:c7:57:d8:3a:e5:fa:ee:82:ae: 01:05:df:e1:99:40:6e:45:31:d8:0e:77:61:da:cf: 1b:76:c9:b4:2a:66:3b:95:00:93:ef:e6:36:1d:38: bf:ba:01:ed:33:20:b6:0f:b1:ef:be:31:8f:7b:5e: 4e:c1:ea:2a:ef:85:f0:ae:9d:04:22:42:f7:3a:26: 71:01:93:00:c2:cc:61:c5:71:d3:70:b4:00:81:d8: 32:1c:91:53:86:87:b2:26:9f:30:be:56:96:72:52: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:25:F7:F4:CB:88:63:32:FC:27:4D:16:75:36:3E:04:62:8D:C0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: 216.120.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bf:48:e0:a0:dc:38:cd:d9:83:a9:51:d3:2f:1c:c3:fb:a0: 6a:71:11:3e:75:d8:e7:36:5b:0e:cb:55:e1:d0:df:a0:7d:6d: c6:54:f4:9e:16:eb:80:6f:4f:1e:c9:a0:11:1a:dd:f8:fa:48: 03:5c:d3:c9:08:e3:37:d6:8f:f4:21:c2:d8:20:94:51:76:f9: 65:30:81:f5:e6:09:50:ec:89:35:f1:ef:69:ad:57:b8:79:ba: f4:9d:44:52:68:ff:a5:cb:eb:ae:fd:00:38:9f:66:ee:aa:93: fa:7e:95:17:a3:f5:12:2a:f1:0c:8f:c6:0f:be:f8:76:1d:f7: d8:1f:80:70:09:97:5e:6c:b5:71:4a:ad:18:91:3b:51:55:10: da:bc:da:3f:29:1f:3c:ed:32:51:3a:c1:a9:33:7a:09:c5:36: b6:55:5c:60:2f:0d:81:68:54:52:63:97:3b:02:46:57:57:30: 08:86:d3:bc:24:ba:61:73:58:9e:8a:ae:ed:33:ce:7e:3a:a5: d4:58:27:02:a2:e0:82:76:43:de:2f:9c:51:cc:ba:4d:01:37: a6:0b:c1:49:af:a4:4f:b6:a2:39:99:4b:b4:5f:a9:83:38:56: 96:35:c7:84:e6:92:97:65:4f:fb:0c:11:9e:2e:75:30:40:9d: 97:9c:5e:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Nxa5Gw3R7Dx+bMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NmJlNjEwY2ItYjE0My00MjAwLWEyYjAtZWMxYTJhOWM5OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUvbsz+3r+/fRm8Cklk1xhprQWliguvlGvbc Xz+hsFSf4d52tToYh6rRwpSKqyFIyHLZ8GNctdit2TeR9UiAIqR41nrnXh8SCUpu hr1H3Dry69K8vODUFAegQ6dmTdo6VfMz+mhM7E1367kqqSMEVoUimi/MtQovXRyg Fz5Lb9IkxWY/5vJfloQe0jWX6BE7x8NsjzzPqKjbqXPHV9g65frugq4BBd/hmUBu RTHYDndh2s8bdsm0KmY7lQCT7+Y2HTi/ugHtMyC2D7HvvjGPe15Oweoq74Xwrp0E IkL3OiZxAZMAwsxhxXHTcLQAgdgyHJFThoeyJp8wvlaWclLfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4l9/TLiGMy/CdNFnU2PgRijcDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvOTM4ZTFjMTgtNjEyMi0z NzFkLTg2NGUtNTRiMGNjOGZjYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu/SOCg3DjN2YOpUdMvHMP7oGpxET512Oc2Ww7LVeHQ36B9bcZU9J4W 64BvTx7JoBEa3fj6SANc08kI4zfWj/QhwtgglFF2+WUwgfXmCVDsiTXx72mtV7h5 uvSdRFJo/6XL6679ADifZu6qk/p+lRej9RIq8QyPxg+++HYd99gfgHAJl15stXFK rRiRO1FVENq82j8pHzztMlE6wakzegnFNrZVXGAvDYFoVFJjlzsCRldXMAiG07wk umFzWJ6Kru0zzn46pdRYJwKi4IJ2Q94vnFHMuk0BN6YLwUmvpE+2ojmZS7RfqYM4 VpY1x4TmkpdlT/sMEZ4udTBAnZecXts= -----END CERTIFICATE-----Generated at Wed May 13 12:30:18 2026 by rpki-client