$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa File: 3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa (raw, json) Hash identifier: NzWb6O6ITr0EEuZMfMDcZwS/XE3BnaQYcuuTStfRf8U= Subject key identifier: 54:C2:F7:8D:58:04:D1:68:51:E3:CB:D6:93:75:37:62:A5:A8:8A:1A Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF98D1B11C866776C0A91C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:8d:1b:11:c8:66:77:6c:0a:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=95aa5da5-f4f6-4d50-848c-3e2dcb72723c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:bd:ba:46:91:6a:2b:47:70:78:1d:72:54: 5f:81:13:3d:67:96:e2:b6:3c:4f:4b:07:d6:86:f2: ce:c3:91:1d:49:29:32:11:df:ba:e0:5f:76:44:40: 59:00:54:41:69:2d:94:9e:36:0c:43:bb:f1:4f:09: 9e:ca:b7:42:22:9d:0b:64:20:dc:c4:93:c9:f3:ce: a4:f9:1b:44:98:e2:b4:57:57:b4:70:42:a1:cd:ef: c9:cc:86:1a:1d:6a:1d:44:ce:1c:a1:df:28:01:e7: 3e:65:9a:8b:89:24:66:7b:04:4d:3e:56:68:f3:f8: f4:cf:6d:a5:ec:8a:d3:26:44:37:a2:d6:22:f7:c5: 51:cf:4e:ce:46:c4:2d:e3:3e:c0:f4:c2:dc:9f:ed: a6:ad:12:c8:05:6d:53:ef:16:ec:52:66:35:a0:75: f1:9d:e5:4f:53:4d:1a:98:21:3c:45:55:48:1a:4c: 7a:e0:5c:d3:0f:0c:12:42:05:c7:a9:88:6d:b8:f5: 30:0d:68:4e:60:96:60:76:d9:53:38:f4:c3:35:f3: 5b:78:61:03:68:5c:05:39:84:32:39:27:2e:56:37: 3e:f0:9f:d0:db:2b:e7:6e:17:53:e2:41:df:4f:e6: 84:44:ed:81:18:3a:76:f4:ee:a3:5e:5f:a0:fb:72: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C2:F7:8D:58:04:D1:68:51:E3:CB:D6:93:75:37:62:A5:A8:8A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:da:c2:2c:8e:76:ce:a0:bd:83:f4:40:ae:70:6e:89:47:c4: e1:c7:4d:5f:3a:0f:5c:92:7b:58:ce:30:18:5b:85:e9:b0:17: 1e:6e:99:be:01:fa:4e:31:2c:33:9d:5b:9e:52:2e:ca:08:89: d5:2d:f7:73:fe:d4:86:5b:19:7b:36:8a:13:cc:5b:b8:7c:ab: 7e:a7:1f:52:a5:c1:15:31:e0:60:28:9f:76:7a:2a:9f:1d:39: c2:76:24:bf:29:bd:fd:ae:e3:e0:76:08:fb:0c:04:33:13:8f: 5c:39:1b:88:a1:b9:24:f5:f8:aa:3f:c5:30:1a:0b:79:e5:99: d1:b9:e3:59:34:16:47:3b:0b:49:a9:5a:07:f8:16:06:0d:3a: fe:59:be:50:72:d8:bd:5a:ac:0d:03:87:8c:2d:98:a6:b7:c8: e1:ae:a8:89:f7:1a:63:ab:6a:91:31:a7:6a:8f:bc:b1:9d:34: 59:08:2d:89:5b:80:f9:16:d7:0a:05:f6:f4:a7:57:0e:0c:6f: 82:de:d0:b2:04:45:4f:df:8f:2d:c6:9c:8c:84:4f:1c:a8:2e: 4f:34:fe:b8:96:e0:3b:23:e0:6f:57:f5:61:70:6b:b1:23:6c: d1:a0:a8:70:08:9c:de:f7:79:60:a9:5b:a6:c8:1a:00:f9:e0: 2d:86:e3:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Y0bEchmd2wKkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTVhYTVkYTUtZjRmNi00ZDUwLTg0OGMtM2UyZGNiNzI3MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgry9ukaRaitHcHgdclRfgRM9Z5bitjxPSwfW hvLOw5EdSSkyEd+64F92REBZAFRBaS2UnjYMQ7vxTwmeyrdCIp0LZCDcxJPJ886k +RtEmOK0V1e0cEKhze/JzIYaHWodRM4cod8oAec+ZZqLiSRmewRNPlZo8/j0z22l 7IrTJkQ3otYi98VRz07ORsQt4z7A9MLcn+2mrRLIBW1T7xbsUmY1oHXxneVPU00a mCE8RVVIGkx64FzTDwwSQgXHqYhtuPUwDWhOYJZgdtlTOPTDNfNbeGEDaFwFOYQy OScuVjc+8J/Q2yvnbhdT4kHfT+aERO2BGDp29O6jXl+g+3JpwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTC941YBNFoUePL1pN1N2KlqIoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2Q5OTRkMmUtOWQ1MS0z YjBiLTgwNjYtNzk4YWI0OWIyZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfawiyOds6gvYP0QK5wbolHxOHHTV86D1ySe1jOMBhbhemwFx5umb4B +k4xLDOdW55SLsoIidUt93P+1IZbGXs2ihPMW7h8q36nH1KlwRUx4GAon3Z6Kp8d OcJ2JL8pvf2u4+B2CPsMBDMTj1w5G4ihuST1+Ko/xTAaC3nlmdG541k0Fkc7C0mp Wgf4FgYNOv5ZvlBy2L1arA0Dh4wtmKa3yOGuqIn3GmOrapExp2qPvLGdNFkILYlb gPkW1woF9vSnVw4Mb4Le0LIERU/fjy3GnIyETxyoLk80/riW4Dsj4G9X9WFwa7Ej bNGgqHAInN73eWCpW6bIGgD54C2G40Y= -----END CERTIFICATE-----Generated at Wed May 13 09:13:21 2026 by rpki-client