$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa File: 2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa (raw, json) Hash identifier: RR6aPHBWB5tBt7Htd4J/rrqqPJFYxzfqLscAkUiKKpc= Subject key identifier: 54:F7:5F:9A:3C:63:AD:99:DD:CF:61:8C:E1:72:6B:D2:F6:BD:EF:A0 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF99645CE3F895139F44EF0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:96:45:ce:3f:89:51:39:f4:4e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0f23bbd8-9ed8-4f85-83cc-7e679a86853f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:d2:51:be:ab:ef:3b:28:4a:bb:55:11:93: c2:1c:fd:95:b3:79:45:68:5e:ec:77:c6:fe:69:b3: bb:33:3c:7c:ec:78:28:24:38:d8:66:2c:8f:c8:97: 64:29:e9:21:92:b1:dc:f8:b6:fb:2d:ca:9e:bc:18: de:7d:4e:a2:14:c3:20:01:4c:39:4e:52:d9:d3:28: 6f:0a:e1:fc:d9:bf:5d:fa:14:6f:9e:0d:2b:e1:e3: e5:7b:01:ff:2f:d1:c0:67:87:9e:ec:05:96:cf:23: 1f:1e:87:b1:b6:39:37:5b:6d:92:95:6c:c1:27:5c: aa:a7:08:f0:b0:30:05:07:ea:17:80:49:2e:87:6c: c4:10:4a:16:af:b1:a0:4a:3f:f8:33:c2:af:dc:a7: 7b:b0:50:ac:c3:7d:60:6a:a2:a6:e5:3d:ac:49:d1: 43:b0:9c:87:39:0a:55:3f:21:d4:5d:1e:e2:f2:74: f0:11:29:71:48:3f:b1:c8:0a:2e:77:46:c8:2f:66: 9b:0d:b3:a8:77:63:b7:b2:a1:49:51:49:d8:f0:d3: 07:a7:1b:c6:18:10:03:ae:28:79:63:05:05:9d:49: b3:9d:b6:69:ac:26:4f:7a:0a:fb:d2:3d:69:fa:b2: cc:ce:e4:9d:7d:52:30:4e:ab:ce:3b:46:36:c2:61: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:5F:9A:3C:63:AD:99:DD:CF:61:8C:E1:72:6B:D2:F6:BD:EF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ae:16:ff:5a:dc:cd:2f:92:de:7f:35:c5:58:ad:6b:14:1d: 8c:8a:a1:2e:d6:b1:e5:bb:29:00:ec:9e:da:d0:78:00:94:64: 43:b8:8d:b8:e4:a4:6c:67:ca:c1:73:2c:f1:a8:89:0e:31:b6: c6:32:9d:74:15:7e:e3:87:d6:d3:b1:2b:61:27:c3:41:32:1d: e1:10:e5:3d:a3:34:4e:f0:e7:ae:37:33:7a:cd:ab:c6:32:bc: bf:a0:b7:85:39:12:47:d6:61:eb:55:9d:2e:85:6e:12:57:54: ea:ca:02:91:a7:27:d2:74:d8:9c:85:44:e9:b7:5c:77:be:20: e8:78:b5:5d:c1:f3:44:71:f0:8c:cb:ce:94:4e:35:6d:0d:74: 2b:96:59:83:07:f3:e0:32:46:84:e4:bf:86:c5:22:51:d8:39: d1:26:c2:41:42:29:8e:f9:c4:de:a4:52:99:f3:36:e4:03:5c: 6a:16:06:21:48:ab:37:43:26:32:80:88:14:fa:50:24:da:d4: c4:41:9a:76:b5:ba:04:fa:d6:50:ea:51:e1:e9:28:0c:40:3d: b9:d0:12:fd:15:b4:bd:5c:98:fb:a1:75:8f:79:e7:8a:0d:b0: f6:be:f1:6f:fb:84:27:9b:2a:56:f9:8f:e9:03:9d:ae:89:37: 79:92:cb:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZZFzj+JUTn0TvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGYyM2JiZDgtOWVkOC00Zjg1LTgzY2MtN2U2NzlhODY4NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIfSUb6r7zsoSrtVEZPCHP2Vs3lFaF7sd8b+ abO7Mzx87HgoJDjYZiyPyJdkKekhkrHc+Lb7LcqevBjefU6iFMMgAUw5TlLZ0yhv CuH82b9d+hRvng0r4ePlewH/L9HAZ4ee7AWWzyMfHoextjk3W22SlWzBJ1yqpwjw sDAFB+oXgEkuh2zEEEoWr7GgSj/4M8Kv3Kd7sFCsw31gaqKm5T2sSdFDsJyHOQpV PyHUXR7i8nTwESlxSD+xyAoud0bIL2abDbOod2O3sqFJUUnY8NMHpxvGGBADrih5 YwUFnUmznbZprCZPegr70j1p+rLMzuSdfVIwTqvOO0Y2wmH3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT3X5o8Y62Z3c9hjOFya9L2ve+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMmU3NDFjMDQtNmE2Yy0z MjVmLThhOTEtZmE0YmQwYjhmZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2uFv9a3M0vkt5/NcVYrWsUHYyKoS7WseW7KQDsntrQeACUZEO4jbjk pGxnysFzLPGoiQ4xtsYynXQVfuOH1tOxK2Enw0EyHeEQ5T2jNE7w5643M3rNq8Yy vL+gt4U5EkfWYetVnS6FbhJXVOrKApGnJ9J02JyFROm3XHe+IOh4tV3B80Rx8IzL zpRONW0NdCuWWYMH8+AyRoTkv4bFIlHYOdEmwkFCKY75xN6kUpnzNuQDXGoWBiFI qzdDJjKAiBT6UCTa1MRBmna1ugT61lDqUeHpKAxAPbnQEv0VtL1cmPuhdY9554oN sPa+8W/7hCebKlb5j+kDna6JN3mSy4k= -----END CERTIFICATE-----Generated at Wed May 13 05:28:17 2026 by rpki-client