$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/3b5a3f18-2a5e-3b44-bd48-8e8bc338a265.roa File: 3b5a3f18-2a5e-3b44-bd48-8e8bc338a265.roa (raw, json) Hash identifier: hGGBCGdxhOM6IUpkX1/XhQ92q3ufCud6j9hvXLBoLzc= Subject key identifier: 49:6B:B2:E9:74:2A:30:41:42:01:E1:78:03:FF:2E:45:5E:57:1C:14 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584D91C01BB7D84DBD8CFDA9A380 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/3b5a3f18-2a5e-3b44-bd48-8e8bc338a265.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 15267 IP address blocks: 138.129.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1b:b7:d8:4d:bd:8c:fd:a9:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=d37d14bd-1b85-42ac-a1f8-542ef2d4d1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ff:94:7e:82:ce:11:ab:ba:56:84:70:ad:dd: fa:27:aa:84:e6:b3:68:56:16:21:b1:f5:8b:55:11: 3c:b0:1c:af:ac:cb:d7:96:e1:38:77:11:04:4f:24: ea:a2:a6:a2:d4:28:43:6c:0d:85:72:cf:ed:e1:48: 55:75:88:94:6a:29:4a:8e:bd:4a:79:dc:e9:86:ac: 43:88:2d:56:2a:e9:5d:13:82:46:24:cc:99:92:b9: 21:a1:48:7b:0f:7e:e1:ef:c8:76:18:ba:a7:35:4f: e4:7a:04:89:e9:d6:d3:ce:da:48:e9:be:13:a1:d2: eb:2d:6d:77:83:ab:d2:e3:64:8b:04:b4:67:20:30: dd:18:b4:f4:59:f3:43:44:28:74:bd:24:04:9f:df: ef:cc:9a:ca:66:f5:32:3f:1a:43:9c:78:af:46:fe: a4:2f:22:83:02:90:ca:c3:0d:60:ec:54:9e:a3:eb: 3b:2c:69:a1:cd:7e:5e:08:29:02:97:63:4f:6c:64: 5e:48:11:af:a1:0f:35:3e:87:7c:29:2a:14:9f:97: a3:20:c6:23:10:72:48:ed:8c:b5:0e:e5:35:1e:d2: 7b:f1:f7:2f:d7:0e:75:f3:a5:b5:23:58:60:8e:70: 95:ca:b6:e4:41:df:82:25:a5:50:b8:59:19:54:ce: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:B2:E9:74:2A:30:41:42:01:E1:78:03:FF:2E:45:5E:57:1C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/3b5a3f18-2a5e-3b44-bd48-8e8bc338a265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5b:1a:97:72:be:ee:26:b7:b0:1b:c7:af:cd:16:1c:55:bc: 4b:f5:c3:0c:02:e7:d4:b9:f1:55:61:de:62:6c:91:d3:1a:0f: 2b:13:34:a2:f9:f3:35:5f:f5:20:fb:ee:af:2c:25:44:cd:86: 2a:76:b7:d4:08:bb:b6:09:4a:36:54:25:08:a9:38:81:78:b7: b5:8c:bf:cd:5c:1f:a0:3f:9a:ff:3c:c2:50:55:87:d3:df:0e: d1:f7:95:63:95:7f:8c:92:42:c0:98:a2:8d:82:ff:6f:32:93: 70:fa:b7:63:90:b5:96:18:c3:6d:d5:e2:e6:c4:16:59:d3:63: 01:fd:8c:86:1c:e7:a4:99:14:c2:62:7c:cb:4c:ed:97:8d:6a: 05:f9:9c:aa:3a:a8:44:3f:52:f7:7e:72:3e:ac:9b:a0:45:0a: ec:05:1c:ab:12:9e:99:bc:d8:f9:b2:cd:f6:9b:83:19:d2:95: 8b:3c:5c:8f:aa:24:c5:1e:0e:45:4a:29:d8:06:dd:8b:f1:88: a4:b0:9d:98:57:dc:45:1f:90:87:61:be:27:55:81:02:57:5c: e3:a0:6d:96:18:45:84:55:97:10:94:ea:53:5a:87:53:f1:e2: fc:6e:0b:05:23:13:64:fe:87:b1:f4:a5:78:da:93:32:5b:e0: 6c:4d:6a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBu32E29jP2po4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZDM3ZDE0YmQtMWI4NS00MmFjLWExZjgtNTQyZWYyZDRkMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P+UfoLOEau6VoRwrd36J6qE5rNoVhYhsfWL VRE8sByvrMvXluE4dxEETyTqoqai1ChDbA2Fcs/t4UhVdYiUailKjr1KedzphqxD iC1WKuldE4JGJMyZkrkhoUh7D37h78h2GLqnNU/kegSJ6dbTztpI6b4TodLrLW13 g6vS42SLBLRnIDDdGLT0WfNDRCh0vSQEn9/vzJrKZvUyPxpDnHivRv6kLyKDApDK ww1g7FSeo+s7LGmhzX5eCCkCl2NPbGReSBGvoQ81Pod8KSoUn5ejIMYjEHJI7Yy1 DuU1HtJ78fcv1w5186W1I1hgjnCVyrbkQd+CJaVQuFkZVM5veQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElrsul0KjBBQgHheAP/LkVeVxwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvM2I1YTNmMTgtMmE1ZS0z YjQ0LWJkNDgtOGU4YmMzMzhhMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioEfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFbGpdyvu4mt7Abx6/NFhxVvEv1wwwC59S58VVh3mJskdMaDysTNKL5 8zVf9SD77q8sJUTNhip2t9QIu7YJSjZUJQipOIF4t7WMv81cH6A/mv88wlBVh9Pf DtH3lWOVf4ySQsCYoo2C/28yk3D6t2OQtZYYw23V4ubEFlnTYwH9jIYc56SZFMJi fMtM7ZeNagX5nKo6qEQ/Uvd+cj6sm6BFCuwFHKsSnpm82PmyzfabgxnSlYs8XI+q JMUeDkVKKdgG3YvxiKSwnZhX3EUfkIdhvidVgQJXXOOgbZYYRYRVlxCU6lNah1Px 4vxuCwUjE2T+h7H0pXjakzJb4GxNauA= -----END CERTIFICATE-----Generated at Wed May 13 09:41:12 2026 by rpki-client