$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa File: 17f45e08-575d-331e-8082-276aa8342fa3.roa (raw, json) Hash identifier: TW8vrOQWrcZ+tb/NJIPX9vqXuAteAPzJXVtaB3p09n8= Subject key identifier: C3:32:6E:EF:7B:51:10:42:5F:65:70:84:A2:13:9A:EB:32:BC:D4:30 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF98E09954C6CF2C2E120C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:8e:09:95:4c:6c:f2:c2:e1:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ccdfabb1-ad3a-4b49-ba25-9d50931d39d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:64:18:30:d8:97:11:41:68:56:3a:2c:61:fc: 00:e2:0a:32:fa:15:5e:78:b0:1a:21:41:a5:ee:94: bd:07:61:12:da:a8:33:91:18:6d:3e:6d:f5:0a:63: 6a:03:74:ab:94:99:ba:11:88:4a:92:0c:02:18:e6: a3:33:59:38:31:11:14:11:e6:58:fb:90:72:75:84: 2b:2c:17:94:68:f2:4f:56:32:27:a2:40:f7:0c:f2: 65:fb:43:0d:0b:11:d6:43:bd:b5:6b:68:b6:8e:42: f5:3d:6c:13:ea:5b:88:b2:8c:5d:8d:83:00:3a:25: 3b:dc:55:bc:32:e5:39:93:90:9a:88:36:ab:51:bb: 02:9c:a8:66:5a:18:76:87:13:5e:8e:e7:cf:94:5f: a9:de:e1:17:93:b5:8e:2b:c1:64:9c:18:1d:db:2d: 78:d9:a1:a9:8c:92:41:de:15:c0:58:ad:88:e3:21: ae:b4:50:75:3f:78:5d:89:18:0c:74:5d:c4:d0:76: e7:3a:f2:72:95:4c:f2:bc:39:b5:8a:46:9f:74:c5: dd:cb:fa:cc:12:cb:a2:b7:76:98:0d:c8:2e:39:e0: 11:44:b8:d3:6c:e4:0b:6b:5f:58:c5:58:a7:84:68: 49:84:57:86:8d:bb:3b:a5:1f:58:55:0c:a0:35:8d: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:32:6E:EF:7B:51:10:42:5F:65:70:84:A2:13:9A:EB:32:BC:D4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d9:7a:f2:ef:e2:93:8c:c5:9e:d2:58:13:9a:83:5c:23:99: ee:9d:c7:c0:d1:3a:85:3c:d5:50:35:ed:be:28:74:30:e3:aa: 28:20:28:78:67:9b:e9:b7:b3:85:21:dd:1d:60:8c:22:13:c2: 1a:11:97:a0:94:07:ff:aa:47:59:3c:74:ec:00:5b:32:44:8a: f7:a1:61:39:d8:83:e8:c7:01:fa:c1:99:c4:77:bb:7b:21:38: a7:f6:e6:d5:3b:5c:3f:75:07:f2:c4:22:e7:83:da:a3:ff:ef: 22:3c:ca:b3:82:24:d4:20:d1:c5:0e:67:8b:0a:79:a9:6d:85: b5:94:ad:8b:cf:99:96:95:da:70:8d:ef:fb:8d:ed:04:1a:ed: 12:01:5d:bb:a9:f4:6d:0d:84:ab:5a:dc:be:b2:ed:a5:ee:4f: c8:af:0e:98:c7:1c:61:b8:3f:fc:ad:74:16:f4:28:e1:91:90: 5f:0c:22:9f:81:69:24:54:a4:46:fc:36:f9:8f:76:5e:7f:65: 36:49:0f:ab:31:61:35:8a:29:64:30:cb:84:26:37:a8:68:f0: 1e:cc:c2:01:45:0e:be:69:5a:64:da:5c:48:4f:01:fa:5c:5c: 47:23:65:cf:12:1c:01:02:c8:e9:75:b2:31:72:13:71:36:d6: b2:d6:10:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Y4JlUxs8sLhIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Y2NkZmFiYjEtYWQzYS00YjQ5LWJhMjUtOWQ1MDkzMWQzOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWQYMNiXEUFoVjosYfwA4goy+hVeeLAaIUGl 7pS9B2ES2qgzkRhtPm31CmNqA3SrlJm6EYhKkgwCGOajM1k4MREUEeZY+5BydYQr LBeUaPJPVjInokD3DPJl+0MNCxHWQ721a2i2jkL1PWwT6luIsoxdjYMAOiU73FW8 MuU5k5CaiDarUbsCnKhmWhh2hxNejufPlF+p3uEXk7WOK8FknBgd2y142aGpjJJB 3hXAWK2I4yGutFB1P3hdiRgMdF3E0HbnOvJylUzyvDm1ikafdMXdy/rMEsuit3aY DcguOeARRLjTbOQLa19YxVinhGhJhFeGjbs7pR9YVQygNY0UeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMybu97URBCX2VwhKITmusyvNQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTdmNDVlMDgtNTc1ZC0z MzFlLTgwODItMjc2YWE4MzQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXZevLv4pOMxZ7SWBOag1wjme6dx8DROoU81VA17b4odDDjqiggKHhn m+m3s4Uh3R1gjCITwhoRl6CUB/+qR1k8dOwAWzJEivehYTnYg+jHAfrBmcR3u3sh OKf25tU7XD91B/LEIueD2qP/7yI8yrOCJNQg0cUOZ4sKealthbWUrYvPmZaV2nCN 7/uN7QQa7RIBXbup9G0NhKta3L6y7aXuT8ivDpjHHGG4P/ytdBb0KOGRkF8MIp+B aSRUpEb8NvmPdl5/ZTZJD6sxYTWKKWQwy4QmN6ho8B7MwgFFDr5pWmTaXEhPAfpc XEcjZc8SHAECyOl1sjFyE3E21rLWEBY= -----END CERTIFICATE-----Generated at Wed May 13 09:06:49 2026 by rpki-client