$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa File: 1547736e-3c24-37d0-88de-b5cdfe869e96.roa (raw, json) Hash identifier: B3ByaWIpzn4GeLG5T2Tn9GPPtgGApqIGjShc/nwpkIY= Subject key identifier: 43:13:A7:02:71:F7:05:4E:AD:22:1B:78:A9:4D:28:7F:01:99:CF:B3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A9121EB6AE0F230EDD400 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 138.1.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:91:21:eb:6a:e0:f2:30:ed:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=a0cb8a12-30b9-403f-8523-309122964292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f3:4c:e1:fb:1a:45:d4:9c:1b:80:93:21:8c: dc:5a:1a:cf:0e:2b:ba:10:6c:9a:bd:23:68:45:47: 25:d7:c9:4f:c8:d2:b5:15:66:75:1a:e2:bd:8e:49: e2:aa:fa:e1:5a:c6:07:e5:92:44:d0:08:83:08:71: a5:47:22:cb:c7:d6:f4:4d:e0:aa:22:ac:7f:c0:52: 09:55:14:38:9f:ab:69:d0:da:69:e0:e7:e3:a8:aa: 8c:7c:41:d5:d4:c7:a5:bb:2d:83:62:be:98:3f:9e: 05:38:14:ae:4c:5e:db:de:98:92:01:53:00:d1:62: 38:1a:28:d5:e2:85:87:be:a8:6f:19:81:21:8c:26: 68:09:cc:b5:19:74:96:9e:3c:ad:d7:c6:80:2c:af: 8f:8e:72:e6:14:4c:83:43:62:f7:ce:db:a8:31:4c: df:a6:42:66:f3:ce:42:4a:19:76:3d:a9:4d:bc:43: 29:63:59:db:69:f8:f9:d2:ab:8f:91:c0:9d:ab:d0: d0:fb:e3:fa:30:d5:16:15:f4:bf:2f:37:8b:11:1e: 17:2d:0b:88:1a:47:58:41:eb:44:a1:38:a7:f9:1d: af:8c:7a:1b:b3:c4:9e:99:37:b7:2e:44:c0:c3:4a: ae:97:32:15:44:18:1d:4a:38:2f:e0:af:c7:fc:5a: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:13:A7:02:71:F7:05:4E:AD:22:1B:78:A9:4D:28:7F:01:99:CF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:84:c1:90:0e:cc:b3:81:64:e3:a8:d1:32:01:33:e7:ba:22: 78:76:59:58:ae:4e:08:d9:4f:33:d6:61:9d:9b:17:c6:08:8b: d6:29:bb:af:c7:07:4e:ba:5d:6c:13:b8:68:82:f6:a2:1d:70: f9:ff:37:d5:f5:fd:ce:b6:37:de:52:97:ba:b9:0c:bb:ba:e3: 44:3c:ad:b7:18:66:4d:ee:ce:23:a2:38:c6:2f:4b:99:d0:a6: 00:ff:48:e6:d4:40:05:ca:33:60:dd:3d:d9:51:f5:b6:4b:1f: fc:04:cc:33:f4:cd:44:5a:b3:2f:7e:a6:11:c6:d3:71:a4:51: 42:a6:48:8d:86:6d:f2:32:09:2f:5f:97:b5:b2:7e:a2:f8:3e: e4:f7:f0:1d:00:1c:54:27:cb:1e:ba:60:cb:7e:1c:90:c4:79: 8c:fe:f2:f7:85:bd:56:da:57:75:3f:a4:00:55:0e:dc:bd:e6: eb:88:51:3e:78:f5:15:79:ba:62:6c:48:ab:ac:1f:0e:c1:fe: cf:7b:ef:d2:c3:ab:7a:0b:88:55:12:42:05:55:05:7a:e7:10: 66:99:10:14:78:96:f2:3b:f3:f4:95:ea:21:f1:c8:c9:42:ca: 12:b7:70:63:46:0c:27:c3:dd:cf:d8:08:dc:c2:07:e6:b5:c8: 05:e5:61:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpEh62rg8jDt1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YTBjYjhhMTItMzBiOS00MDNmLTg1MjMtMzA5MTIyOTY0MjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPNM4fsaRdScG4CTIYzcWhrPDiu6EGyavSNo RUcl18lPyNK1FWZ1GuK9jkniqvrhWsYH5ZJE0AiDCHGlRyLLx9b0TeCqIqx/wFIJ VRQ4n6tp0Npp4OfjqKqMfEHV1Meluy2DYr6YP54FOBSuTF7b3piSAVMA0WI4GijV 4oWHvqhvGYEhjCZoCcy1GXSWnjyt18aALK+PjnLmFEyDQ2L3ztuoMUzfpkJm885C Shl2PalNvEMpY1nbafj50quPkcCdq9DQ++P6MNUWFfS/LzeLER4XLQuIGkdYQetE oTin+R2vjHobs8SemTe3LkTAw0qulzIVRBgdSjgv4K/H/FrRewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMTpwJx9wVOrSIbeKlNKH8Bmc+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTU0NzczNmUtM2MyNC0z N2QwLTg4ZGUtYjVjZGZlODY5ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaEwZAOzLOBZOOo0TIBM+e6Inh2WViuTgjZTzPWYZ2bF8YIi9Ypu6/H B066XWwTuGiC9qIdcPn/N9X1/c62N95Sl7q5DLu640Q8rbcYZk3uziOiOMYvS5nQ pgD/SObUQAXKM2DdPdlR9bZLH/wEzDP0zURasy9+phHG03GkUUKmSI2GbfIyCS9f l7WyfqL4PuT38B0AHFQnyx66YMt+HJDEeYz+8veFvVbaV3U/pABVDty95uuIUT54 9RV5umJsSKusHw7B/s9779LDq3oLiFUSQgVVBXrnEGaZEBR4lvI78/SV6iHxyMlC yhK3cGNGDCfD3c/YCNzCB+a1yAXlYd0= -----END CERTIFICATE-----Generated at Wed May 13 15:37:55 2026 by rpki-client