$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa File: 49f816f4-ae4f-3038-a773-b9c47936e35e.roa (raw, json) Hash identifier: zq36+nKtzW3PRth+mAaNQ6k6d9EYrnfoBJagyptK75Y= Subject key identifier: 45:49:B2:E2:99:1D:2E:98:BF:CE:CB:E6:5A:A7:1C:3D:5B:31:0E:4C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A92A248D7F2762F9C5900 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 138.1.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:92:a2:48:d7:f2:76:2f:9c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=dfff2b8e-bfec-4e3c-95cf-9d86622e2ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:cb:9b:c8:7a:1f:f9:bb:3b:0c:6c:a0:0c: bf:1c:77:27:80:98:75:5f:b7:1d:a1:53:a2:f9:f5: 31:b7:4f:21:ba:21:ac:00:43:a4:6f:d7:57:60:a2: 5c:02:d5:37:7f:1e:44:7b:f0:da:8e:29:7b:85:66: 62:56:e4:6e:3a:13:8c:59:cf:56:3e:72:b6:0a:f1: 93:3f:da:e0:20:9f:06:7e:1f:47:73:02:4c:88:74: 0b:f6:cf:11:9e:d6:29:e0:b2:99:d3:7b:7c:29:07: 82:d1:49:32:a2:c7:29:14:d6:f0:47:76:6f:7c:1a: 68:fb:37:ff:48:eb:2a:a4:0a:01:e2:8a:ce:95:b5: dc:fd:b5:eb:e2:f3:df:e7:b9:3a:84:dd:a6:c5:88: c4:19:7c:95:a4:8b:23:b9:20:28:eb:8d:54:42:14: a3:46:08:84:e5:73:c6:bb:6c:6d:a4:d4:2f:35:31: d0:d4:84:2b:65:b5:d9:8a:30:09:e7:9f:5c:52:98: 66:8a:eb:a6:6a:00:36:45:57:6d:0e:72:38:dc:6e: 52:75:39:2b:0c:0e:99:8a:a1:29:3a:3d:1d:54:a0: c3:cf:3b:6f:9d:81:c8:8e:9a:2b:a3:cc:41:31:bc: 3e:3e:31:a8:92:74:e3:58:25:a0:d6:57:7d:2d:d5: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:49:B2:E2:99:1D:2E:98:BF:CE:CB:E6:5A:A7:1C:3D:5B:31:0E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ea:8e:52:b6:47:86:51:58:19:b9:24:f9:dc:ba:9e:22:fe: f3:df:ab:21:0c:2c:5c:fb:32:23:fc:c1:75:ee:bb:ef:53:dd: 9a:d7:e2:f8:bd:58:13:98:04:ac:dc:3e:27:31:0e:65:5c:4b: e2:bd:75:b7:47:f8:e4:47:54:28:d9:b4:e5:2e:a3:40:9a:45: a4:8b:a6:c1:38:b7:cf:51:60:43:e9:78:7f:78:92:9a:a7:e6: 50:1c:bf:ca:03:e5:b5:8b:4b:9d:f8:82:1b:9f:0e:09:cd:51: e5:0f:09:2b:7e:e8:46:d4:ee:b7:1a:76:0c:91:49:2d:6d:b5: 0e:bb:5a:5c:05:c0:02:c2:6c:57:7c:45:5c:9a:3e:5d:4b:86: 7f:58:74:bf:91:00:0e:a7:f5:88:3a:37:19:41:cc:72:66:11: 45:90:d2:5a:3a:85:63:40:0e:d3:f2:33:b6:37:4e:00:96:c0: a5:55:d9:32:82:4b:48:78:dc:c6:5f:0b:01:5c:14:22:24:ae: 7f:8b:cd:9e:84:e6:53:bf:19:3d:92:6e:21:dc:10:43:a6:b0: bf:be:7d:90:6c:ec:a1:26:a9:d8:1e:0d:eb:1f:a1:39:b2:89: 33:8d:68:2b:6f:7c:fc:73:85:cb:9c:59:d8:27:ca:78:9b:ff: 95:5d:a6:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpKiSNfydi+cWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGZmZjJiOGUtYmZlYy00ZTNjLTk1Y2YtOWQ4NjYyMmUyZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+bLm8h6H/m7OwxsoAy/HHcngJh1X7cdoVOi +fUxt08huiGsAEOkb9dXYKJcAtU3fx5Ee/Dajil7hWZiVuRuOhOMWc9WPnK2CvGT P9rgIJ8Gfh9HcwJMiHQL9s8RntYp4LKZ03t8KQeC0UkyoscpFNbwR3ZvfBpo+zf/ SOsqpAoB4orOlbXc/bXr4vPf57k6hN2mxYjEGXyVpIsjuSAo641UQhSjRgiE5XPG u2xtpNQvNTHQ1IQrZbXZijAJ559cUphmiuumagA2RVdtDnI43G5SdTkrDA6ZiqEp Oj0dVKDDzztvnYHIjporo8xBMbw+PjGoknTjWCWg1ld9LdWITwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVJsuKZHS6Yv87L5lqnHD1bMQ5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDlmODE2ZjQtYWU0Zi0z MDM4LWE3NzMtYjljNDc5MzZlMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDqjlK2R4ZRWBm5JPncup4i/vPfqyEMLFz7MiP8wXXuu+9T3ZrX4vi9 WBOYBKzcPicxDmVcS+K9dbdH+ORHVCjZtOUuo0CaRaSLpsE4t89RYEPpeH94kpqn 5lAcv8oD5bWLS534ghufDgnNUeUPCSt+6EbU7rcadgyRSS1ttQ67WlwFwALCbFd8 RVyaPl1Lhn9YdL+RAA6n9Yg6NxlBzHJmEUWQ0lo6hWNADtPyM7Y3TgCWwKVV2TKC S0h43MZfCwFcFCIkrn+LzZ6E5lO/GT2SbiHcEEOmsL++fZBs7KEmqdgeDesfoTmy iTONaCtvfPxzhcucWdgnynib/5Vdpu4= -----END CERTIFICATE-----Generated at Wed May 13 11:23:06 2026 by rpki-client