$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa File: d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa (raw, json) Hash identifier: 9iP1/yfH2Gu+q4KvHZaGHYA0nUNCGqBDKL2vs4jyyss= Subject key identifier: 8E:DA:69:C6:24:FA:A3:9B:7F:FE:65:43:7F:C6:D9:A0:40:1C:8B:61 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584D91C01AD1FB52984714808340 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 15267 IP address blocks: 138.129.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1a:d1:fb:52:98:47:14:80:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=59f50844-34b3-48ce-af00-a7e5740c2beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:05:cd:e1:27:59:86:f3:cc:23:43:38:40:8d: 4a:76:65:5f:a6:b4:d6:34:22:05:2b:63:66:72:f0: 68:79:36:c3:f0:bc:10:84:61:b0:71:b7:1a:76:0a: 68:74:01:2e:ea:b1:16:35:04:d1:a0:3f:18:bd:4d: 14:c5:91:e2:e5:16:e2:18:c8:8a:bd:da:c9:0c:9e: b8:5a:bf:07:8f:cb:35:32:96:fc:9a:1c:e7:9c:af: e7:b2:25:54:f7:cc:18:cd:16:8a:e7:f1:e3:87:ba: aa:24:d2:7a:86:88:80:e5:ad:58:03:3b:06:52:d2: 15:42:ac:ff:22:5f:58:98:00:f1:82:13:45:c0:26: 1b:94:59:5b:55:24:c5:de:9a:85:83:68:b1:a9:52: e3:34:cb:ac:cf:6e:3c:38:70:9d:75:c4:12:7a:1c: d4:31:1e:ce:fb:09:09:4c:a9:54:a1:96:9f:0c:6d: 6e:aa:1a:7a:78:65:91:7d:80:8e:ed:df:ad:6c:f9: 8f:d7:d1:d3:a4:90:48:e4:55:2b:2f:81:f2:b9:7f: 55:4c:fe:03:77:33:20:b4:fe:5b:92:e5:66:ac:df: 27:d5:2c:b9:c0:d7:45:30:eb:b7:8d:db:05:4f:22: a3:62:e0:ca:45:b4:03:f4:29:9f:39:3c:fe:ae:3e: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:69:C6:24:FA:A3:9B:7F:FE:65:43:7F:C6:D9:A0:40:1C:8B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f1:a5:0a:2b:c9:4c:0c:6f:0f:11:f7:71:d5:78:ab:d0:b7: 1b:89:72:33:f0:03:f5:c6:f0:2d:3b:a0:e3:34:85:4c:2f:ec: d6:0d:49:05:b8:41:80:a1:74:8b:99:bd:3c:fd:fe:60:eb:0d: d1:fc:00:f6:43:62:39:1f:dc:0f:e6:bd:f4:4e:43:e1:70:8b: 18:13:59:bf:46:97:e3:28:18:d4:6c:2e:03:ff:d5:91:3d:b2: 0e:44:85:39:f3:07:b7:51:54:34:a0:e2:f1:ea:a1:56:6c:fb: ce:23:6b:9d:ca:d1:87:eb:02:95:14:44:7f:6f:8d:b4:8e:62: 36:37:00:7b:af:dd:a0:5b:7c:77:8e:23:72:0c:c4:bd:4c:d1: dc:66:fd:1b:1d:78:3c:0f:33:37:ee:07:36:fd:46:c2:bd:1d: 5a:40:a4:08:77:fd:75:cf:60:62:30:23:2f:6d:52:20:17:79: 97:f4:0b:e7:16:b9:4b:7f:bc:f1:e3:b0:70:4c:9e:11:be:c1: 84:29:7b:34:be:47:e5:bc:96:52:29:c7:06:64:ab:2a:34:1f: 04:1d:98:63:79:64:4c:1f:9a:ee:38:35:7a:35:9e:11:86:88: e9:19:44:dd:dc:45:7c:5e:d1:23:7d:59:0d:23:72:44:20:39: 36:dc:c1:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBrR+1KYRxSAg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NTlmNTA4NDQtMzRiMy00OGNlLWFmMDAtYTdlNTc0MGMyYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQXN4SdZhvPMI0M4QI1KdmVfprTWNCIFK2Nm cvBoeTbD8LwQhGGwcbcadgpodAEu6rEWNQTRoD8YvU0UxZHi5RbiGMiKvdrJDJ64 Wr8Hj8s1Mpb8mhznnK/nsiVU98wYzRaK5/Hjh7qqJNJ6hoiA5a1YAzsGUtIVQqz/ Il9YmADxghNFwCYblFlbVSTF3pqFg2ixqVLjNMusz248OHCddcQSehzUMR7O+wkJ TKlUoZafDG1uqhp6eGWRfYCO7d+tbPmP19HTpJBI5FUrL4HyuX9VTP4DdzMgtP5b kuVmrN8n1Sy5wNdFMOu3jdsFTyKjYuDKRbQD9CmfOTz+rj5JgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7aacYk+qObf/5lQ3/G2aBAHIthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZDFjMjk4MGEtMWRhZC0z ZmUwLThhNDgtMzg3MjljZDViYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDioEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvxpQoryUwMbw8R93HVeKvQtxuJcjPwA/XG8C07oOM0hUwv7NYNSQW4 QYChdIuZvTz9/mDrDdH8APZDYjkf3A/mvfROQ+FwixgTWb9Gl+MoGNRsLgP/1ZE9 sg5EhTnzB7dRVDSg4vHqoVZs+84ja53K0YfrApUURH9vjbSOYjY3AHuv3aBbfHeO I3IMxL1M0dxm/RsdeDwPMzfuBzb9RsK9HVpApAh3/XXPYGIwIy9tUiAXeZf0C+cW uUt/vPHjsHBMnhG+wYQpezS+R+W8llIpxwZkqyo0HwQdmGN5ZEwfmu44NXo1nhGG iOkZRN3cRXxe0SN9WQ0jckQgOTbcwY0= -----END CERTIFICATE-----Generated at Wed May 13 09:21:53 2026 by rpki-client