$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa File: 44005de6-2c73-3965-8b2b-252b2fba62ab.roa (raw, json) Hash identifier: tXvfxLqWz6V5Mp463TYs2WmVzvSUUV5/Bf/cxf/XydQ= Subject key identifier: B6:90:A0:28:07:A8:9A:35:A3:89:AB:F9:F4:70:3F:E6:3D:AA:52:F7 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAA279DF946A032A811BC0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 138.2.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a2:79:df:94:6a:03:2a:81:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=c0462a2b-8945-4877-9110-91495f3bf18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:ca:35:89:d5:d4:8f:65:bd:e1:0d:48:1b: 20:5d:c6:68:7f:48:59:3c:8f:00:cd:9a:73:37:b4: a6:7d:13:9e:a2:84:53:32:77:35:ec:de:53:cb:bc: 3c:0d:ad:39:38:35:28:43:82:f0:dc:2b:f4:66:42: 5d:a5:4e:67:e9:57:23:08:7e:c1:a1:31:b4:12:fe: fa:56:9c:df:a2:ad:9d:55:45:f6:fc:ab:90:3e:c0: 44:8d:ba:46:1b:e1:4d:ea:28:eb:b5:df:9e:35:e6: 83:87:aa:39:52:07:7f:38:ac:e2:29:a1:bf:79:21: af:ad:02:08:32:ac:41:e9:e1:af:12:39:03:54:b7: bb:0f:3b:d5:5f:2a:79:29:87:66:6a:a0:57:8a:b4: 5c:b4:ab:91:ff:a6:2f:cd:fc:6e:bc:f2:d5:e5:ec: 46:13:98:fb:2d:02:44:3e:5b:44:05:8a:43:48:78: ea:cf:e1:42:42:c0:fe:ad:7b:87:d3:a9:1f:60:62: 2d:a3:54:32:c8:de:f1:97:74:f7:e3:ca:0e:ed:be: 23:cf:ee:10:36:d9:a7:53:e7:96:ff:af:79:c5:93: 37:bc:19:a2:a0:cc:47:71:c3:74:b6:5e:09:22:c2: b3:03:1f:75:f5:bb:61:db:34:26:08:cd:06:80:8b: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:A0:28:07:A8:9A:35:A3:89:AB:F9:F4:70:3F:E6:3D:AA:52:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3c:5e:0c:9b:84:38:55:f5:5f:0e:d5:98:77:fa:74:79:c2: 54:58:8b:d2:c5:90:23:86:c0:81:37:fe:23:81:27:21:e8:86: cc:99:4f:12:f5:7e:20:58:c6:83:3a:65:cb:8b:0b:d7:0b:b0: 2f:66:71:cd:75:89:43:b9:fd:64:33:77:60:28:af:d3:4a:c0: 69:f6:a6:d8:06:cc:d5:45:91:ca:a5:59:fd:8d:8f:62:f3:f5: df:45:24:da:ef:ed:86:29:4e:23:95:a4:71:94:98:c9:9f:72: 18:93:10:38:d4:3c:73:4b:98:a2:f8:ce:5d:7a:a9:1f:a4:cc: 07:07:6e:e6:32:48:ab:b3:af:07:b9:df:48:15:7f:c6:9b:03: 29:49:76:34:35:01:69:3f:12:f1:ae:ae:c2:98:0b:b1:b5:b2: 03:62:68:23:45:dd:1a:64:39:c2:d8:9c:8a:21:3c:69:57:32: 56:25:b6:e8:9c:0f:c0:57:55:3b:a5:da:34:de:aa:68:70:3a: 12:e7:9f:f9:bf:4b:95:0e:e9:78:5d:81:27:6c:29:d2:fb:04: 8c:20:d5:66:0b:12:50:8c:23:0d:d4:71:33:5f:3e:10:44:5a: a9:fe:ab:ae:9a:31:7e:70:92:d2:5f:a2:c5:14:62:db:49:48: 50:0f:48:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqJ535RqAyqBG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YzA0NjJhMmItODk0NS00ODc3LTkxMTAtOTE0OTVmM2JmMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB/KNYnV1I9lveENSBsgXcZof0hZPI8AzZpz N7SmfROeooRTMnc17N5Ty7w8Da05ODUoQ4Lw3Cv0ZkJdpU5n6VcjCH7BoTG0Ev76 Vpzfoq2dVUX2/KuQPsBEjbpGG+FN6ijrtd+eNeaDh6o5Ugd/OKziKaG/eSGvrQII MqxB6eGvEjkDVLe7DzvVXyp5KYdmaqBXirRctKuR/6YvzfxuvPLV5exGE5j7LQJE PltEBYpDSHjqz+FCQsD+rXuH06kfYGIto1QyyN7xl3T348oO7b4jz+4QNtmnU+eW /695xZM3vBmioMxHccN0tl4JIsKzAx919bth2zQmCM0GgIsbOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaQoCgHqJo1o4mr+fRwP+Y9qlL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDQwMDVkZTYtMmM3My0z OTY1LThiMmItMjUyYjJmYmE2MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC88XgybhDhV9V8O1Zh3+nR5wlRYi9LFkCOGwIE3/iOBJyHohsyZTxL1 fiBYxoM6ZcuLC9cLsC9mcc11iUO5/WQzd2Aor9NKwGn2ptgGzNVFkcqlWf2Nj2Lz 9d9FJNrv7YYpTiOVpHGUmMmfchiTEDjUPHNLmKL4zl16qR+kzAcHbuYySKuzrwe5 30gVf8abAylJdjQ1AWk/EvGursKYC7G1sgNiaCNF3RpkOcLYnIohPGlXMlYltuic D8BXVTul2jTeqmhwOhLnn/m/S5UO6XhdgSdsKdL7BIwg1WYLElCMIw3UcTNfPhBE Wqn+q66aMX5wktJfosUUYttJSFAPSO0= -----END CERTIFICATE-----Generated at Wed May 13 04:28:56 2026 by rpki-client