$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa File: 064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa (raw, json) Hash identifier: Zu124MJ29rs6vl1YV6FeJcBa1n8kHq5HBM1D+o7NkRA= Subject key identifier: EF:4B:7F:D8:F5:22:7D:39:C6:17:75:1F:CD:A8:31:18:50:1F:90:C8 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF9969DA010235A45086380 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:96:9d:a0:10:23:5a:45:08:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=65059396-686a-41a2-9755-ebc54c0c4261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:1a:ca:7b:0d:32:ca:df:87:a0:b2:0a:87: 6a:08:9d:57:53:64:f3:c7:8c:45:c1:58:d5:ab:2e: e6:e3:ef:ee:cb:9a:34:aa:20:e6:82:98:41:91:df: 40:2e:b3:af:93:bd:85:ec:f4:f2:0a:c9:09:d2:86: fc:59:1f:d6:bc:c2:56:e9:9b:1f:5d:e2:e9:2f:f2: 4b:7e:c3:cc:aa:34:67:5f:6b:23:ad:42:3a:46:f4: b6:3b:f6:51:ba:b4:72:d2:af:75:86:fd:2f:c5:02: 5a:0a:d0:07:e4:14:c0:af:f7:5f:c0:91:51:fb:77: 6b:26:d2:d4:7a:25:b6:3b:c4:7f:d5:0c:fd:4a:26: 56:ed:98:49:65:14:d1:21:fa:f8:ec:47:67:a6:d5: 48:8c:ca:0e:a3:a6:0c:e0:4c:05:92:70:51:46:55: e8:97:ff:2d:04:9b:3a:19:76:9c:e6:6f:f9:af:cc: b8:7a:3f:cc:c8:e5:82:bb:68:35:20:d8:60:6b:cc: 56:30:9f:41:71:87:9d:97:16:5b:7c:5a:e7:d8:9a: a6:e9:ff:3e:49:64:81:9c:f5:ed:67:ce:93:bb:63: 72:10:28:99:5f:a5:b0:ef:52:92:40:8e:56:69:85: cf:ef:a2:02:04:13:ef:ea:d9:76:18:48:91:94:62: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4B:7F:D8:F5:22:7D:39:C6:17:75:1F:CD:A8:31:18:50:1F:90:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:84:fd:99:7a:54:76:ef:c9:eb:9e:ac:77:a7:13:45:d9:2e: 3b:19:3a:b5:02:c0:ad:40:b8:1e:1f:22:5a:f7:16:88:34:98: 97:82:c0:38:87:6f:46:49:f9:33:7b:f6:a5:8f:4a:17:56:3d: 23:d2:81:b3:ca:3e:51:b5:ae:e2:88:bf:39:5f:4d:cd:a8:e3: 7c:53:1e:db:5e:42:a6:5f:72:8e:13:2b:b4:e0:04:6a:f5:1a: a5:c5:17:b5:4f:6a:09:65:ab:24:d9:72:01:33:f0:cb:e6:62: e8:a8:82:b5:6f:45:59:7f:fb:95:dc:d7:19:5d:23:18:c8:c6: 69:08:2b:16:06:29:9a:75:2e:38:05:1f:58:0d:d9:5c:06:36: 6e:83:3c:6c:6d:ec:38:2f:40:5c:5c:49:2e:24:e7:4d:be:3c: 2a:09:11:59:37:12:1b:8d:a6:be:86:16:71:f7:fe:68:ca:bf: c3:d9:af:ee:35:7e:8f:68:8c:41:0f:77:1a:bb:70:18:63:a4: 96:dd:48:92:3d:5e:67:cb:8c:f1:68:65:1c:02:98:b3:1c:32: 7a:4a:ea:46:8a:35:31:db:e4:7d:62:8c:bc:3f:f7:c5:e2:d8: 2b:51:b8:1a:bc:33:e9:66:d5:d9:37:63:4a:0d:1c:3d:e4:d2: 61:9d:2d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZadoBAjWkUIY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjUwNTkzOTYtNjg2YS00MWEyLTk3NTUtZWJjNTRjMGM0MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwaynsNMsrfh6CyCodqCJ1XU2Tzx4xFwVjV qy7m4+/uy5o0qiDmgphBkd9ALrOvk72F7PTyCskJ0ob8WR/WvMJW6ZsfXeLpL/JL fsPMqjRnX2sjrUI6RvS2O/ZRurRy0q91hv0vxQJaCtAH5BTAr/dfwJFR+3drJtLU eiW2O8R/1Qz9SiZW7ZhJZRTRIfr47EdnptVIjMoOo6YM4EwFknBRRlXol/8tBJs6 GXac5m/5r8y4ej/MyOWCu2g1INhga8xWMJ9BcYedlxZbfFrn2Jqm6f8+SWSBnPXt Z86Tu2NyECiZX6Ww71KSQI5WaYXP76ICBBPv6tl2GEiRlGKu5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9Lf9j1In05xhd1H82oMRhQH5DIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDY0ZjMxY2ItYjhlZC0z NzYxLTk2NmUtZDEzMDZmN2EzYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyE/Zl6VHbvyeuerHenE0XZLjsZOrUCwK1AuB4fIlr3Fog0mJeCwDiH b0ZJ+TN79qWPShdWPSPSgbPKPlG1ruKIvzlfTc2o43xTHtteQqZfco4TK7TgBGr1 GqXFF7VPagllqyTZcgEz8MvmYuiogrVvRVl/+5Xc1xldIxjIxmkIKxYGKZp1LjgF H1gN2VwGNm6DPGxt7DgvQFxcSS4k502+PCoJEVk3EhuNpr6GFnH3/mjKv8PZr+41 fo9ojEEPdxq7cBhjpJbdSJI9XmfLjPFoZRwCmLMcMnpK6kaKNTHb5H1ijLw/98Xi 2CtRuBq8M+lm1dk3Y0oNHD3k0mGdLUw= -----END CERTIFICATE-----Generated at Wed May 13 09:24:33 2026 by rpki-client