$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa File: 38818ab6-c191-3c2a-a66e-deace084450d.roa (raw, json) Hash identifier: IDGrZk227QPR/4HZaQ3Bmj3y7LEG/flOUQ70B6GtLD8= Subject key identifier: BF:66:99:72:14:4F:0A:82:79:C9:FE:9A:CA:57:2F:70:6B:39:C2:B4 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF97D05CC228E22D1013480 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:7d:05:cc:22:8e:22:d1:01:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bd598dfe-9c91-4935-8d4c-3e66099dcdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:0e:c4:6f:7a:9b:4f:0e:0d:ca:1f:23:19: 6b:86:d3:be:7f:5f:e9:ea:a2:30:86:ab:c8:ac:2e: a5:2e:b0:b2:95:3a:f9:37:81:88:c1:60:08:9b:67: a5:aa:da:c3:7c:10:bc:bc:2a:da:87:b8:a8:9e:ec: ff:9d:e0:5f:bf:1d:ea:ac:24:2a:0a:c3:49:29:0a: 78:3f:f2:8a:f0:99:25:9a:80:b5:87:59:d2:9d:52: cb:77:cd:0d:3d:85:16:90:a8:bb:dc:cc:b1:5f:df: 3b:e3:4a:e7:73:0d:4c:71:b8:80:e6:2c:84:5f:66: 85:27:a0:32:ce:75:23:0d:2a:5b:b6:1c:9c:71:b7: d7:66:4a:69:31:ec:4d:6f:81:4a:2d:61:14:af:f0: 5e:6b:33:e2:50:5a:a7:60:9f:11:f5:a4:9e:5b:f4: 4a:6b:91:d7:b4:dc:67:44:e6:01:9d:3d:13:bf:4c: bf:c4:c0:e1:49:5e:42:f1:23:86:44:f0:52:cc:40: 9a:cd:75:89:f2:02:48:54:4c:7d:0f:9b:74:0d:98: 88:83:fe:66:c5:ef:42:21:82:4a:ba:8f:05:4b:aa: 7b:57:8e:a4:fd:b0:1b:93:82:50:fb:8c:71:f7:a0: 3a:fa:c5:2b:92:ab:2a:5a:e7:9a:96:54:16:b4:ef: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:99:72:14:4F:0A:82:79:C9:FE:9A:CA:57:2F:70:6B:39:C2:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:09:7a:85:43:32:04:4d:8b:c9:b0:84:11:cf:57:bc:9d:e8: 09:d0:e8:4c:80:97:d9:6d:4e:26:26:44:f5:cc:1d:07:64:8e: 25:4b:bc:ec:de:5f:5a:36:4d:c6:2f:a4:00:81:30:c9:ee:0c: af:ae:84:05:04:3e:02:68:7e:60:c7:d7:7c:09:b6:19:a0:b6: 75:31:94:6e:b9:db:c4:a3:64:b2:e6:f1:2f:76:14:3f:e1:2b: cd:64:3c:89:fd:fe:ba:33:ef:a8:d5:32:e0:f7:7a:11:43:6c: d3:6c:12:0b:07:17:ac:4c:ad:f4:07:72:a8:bb:5c:8e:8a:19: 64:d4:cf:a7:11:a6:c2:8c:44:57:35:20:42:a8:b4:07:28:dd: 2e:f9:3a:95:4d:75:d2:ef:04:03:7b:b8:1c:da:fb:19:6e:52: ab:99:ab:61:8f:04:40:49:fd:29:9e:46:85:08:b8:fe:00:d4: 0b:51:98:d2:db:8c:f7:4d:e0:80:e8:ee:8a:12:84:5b:f9:d5: 63:11:9d:43:bd:c9:27:72:0b:c6:3b:92:17:85:4a:39:73:c8: bd:cd:44:f2:2f:87:52:c7:4f:9a:7a:e9:78:df:56:7a:a2:2b: 4f:78:f0:fd:fc:f7:14:b1:fa:7c:6a:55:bb:3d:3c:3b:6c:47: 19:6b:35:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+X0FzCKOItEBNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmQ1OThkZmUtOWM5MS00OTM1LThkNGMtM2U2NjA5OWRjZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ecOxG96m08ODcofIxlrhtO+f1/p6qIwhqvI rC6lLrCylTr5N4GIwWAIm2elqtrDfBC8vCrah7ionuz/neBfvx3qrCQqCsNJKQp4 P/KK8JklmoC1h1nSnVLLd80NPYUWkKi73MyxX98740rncw1McbiA5iyEX2aFJ6Ay znUjDSpbthyccbfXZkppMexNb4FKLWEUr/BeazPiUFqnYJ8R9aSeW/RKa5HXtNxn ROYBnT0Tv0y/xMDhSV5C8SOGRPBSzECazXWJ8gJIVEx9D5t0DZiIg/5mxe9CIYJK uo8FS6p7V46k/bAbk4JQ+4xx96A6+sUrkqsqWueallQWtO+xWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9mmXIUTwqCecn+mspXL3BrOcK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzg4MThhYjYtYzE5MS0z YzJhLWE2NmUtZGVhY2UwODQ0NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0JeoVDMgRNi8mwhBHPV7yd6AnQ6EyAl9ltTiYmRPXMHQdkjiVLvOze X1o2TcYvpACBMMnuDK+uhAUEPgJofmDH13wJthmgtnUxlG6528SjZLLm8S92FD/h K81kPIn9/roz76jVMuD3ehFDbNNsEgsHF6xMrfQHcqi7XI6KGWTUz6cRpsKMRFc1 IEKotAco3S75OpVNddLvBAN7uBza+xluUquZq2GPBEBJ/SmeRoUIuP4A1AtRmNLb jPdN4IDo7ooShFv51WMRnUO9ySdyC8Y7kheFSjlzyL3NRPIvh1LHT5p66XjfVnqi K0948P389xSx+nxqVbs9PDtsRxlrNUY= -----END CERTIFICATE-----Generated at Wed May 13 11:23:09 2026 by rpki-client