$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa File: 4c9f1b4e-8311-3d71-9b79-a652244709a6.roa (raw, json) Hash identifier: O/9UcEJ56wULi5NTW0V/dDSa/umdPm4LRjWMxnSMmn4= Subject key identifier: 2B:E3:C9:A7:2F:98:A3:3C:A8:C9:22:B5:80:98:DA:A5:21:8F:39:97 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF99C4FE57EED363526B7C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.2.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:9c:4f:e5:7e:ed:36:35:26:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9b238e8c-2f4c-4d94-af71-096f29521171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:fb:ec:db:d2:00:22:92:d0:e1:52:a9:13: 35:e7:db:52:09:30:25:24:a6:5a:61:10:c4:87:de: b6:c1:27:96:c2:c3:54:c9:aa:74:ce:b3:c7:0c:32: 83:61:5b:42:b1:23:2a:4a:ea:0e:d3:3f:9c:a2:2a: e7:5e:a5:8d:4f:63:52:51:64:fe:e5:22:5a:fe:25: 60:bc:5e:50:0a:89:e3:65:6c:5c:1c:0e:a9:4e:b8: b2:54:04:8b:e8:13:2e:7b:50:b3:23:57:96:7c:b7: 7a:a6:9c:55:7f:11:86:3e:04:9a:3e:cc:bc:ce:87: 4d:fa:76:64:01:1b:e3:68:b6:8c:9a:2a:d7:1c:15: b2:15:80:05:d9:f2:78:a8:c7:bf:31:e9:e7:3a:67: 32:00:9f:dc:92:43:cf:d2:8f:f9:8e:db:e4:35:6e: e6:92:cf:27:45:0e:66:5b:97:47:ce:68:8e:4b:39: 74:5b:c2:c9:e4:21:3f:6e:9c:62:9b:46:3c:b0:59: 5b:0f:20:70:07:8c:ff:c1:99:7c:6c:6f:40:e2:b8: d9:46:5f:33:d7:98:cc:37:50:5d:36:a2:0f:13:c2: c1:36:63:32:15:c7:ca:90:67:35:e8:6e:9a:13:9f: 29:46:20:06:54:27:4a:a4:bb:3e:d8:72:f6:90:2c: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:C9:A7:2F:98:A3:3C:A8:C9:22:B5:80:98:DA:A5:21:8F:39:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6b:db:3f:08:ce:7f:a0:d1:f2:5b:5d:22:97:6e:cb:9e:81: 96:17:32:9c:e4:62:26:a5:8a:5c:4a:ab:fd:02:05:91:94:a1: 2f:b4:45:12:69:e0:60:8c:ad:03:c1:e1:73:06:46:a1:1c:18: 2d:25:d3:fa:82:42:c0:01:1e:ae:f4:e4:46:8d:92:86:c6:ca: a4:ec:b1:bf:c4:53:2a:9a:b2:98:9d:9a:0d:60:2d:02:57:a7: e9:65:86:5b:79:43:4b:55:b4:b2:36:be:cb:83:58:81:ce:7c: 11:5f:40:dd:28:b8:1f:02:7a:44:50:c7:28:73:68:f6:34:2b: c0:f0:aa:30:72:6e:ac:1d:d5:40:2a:cf:6f:eb:7b:f1:85:22: 7f:6f:9f:36:d9:f3:02:c8:25:17:2e:51:eb:12:36:d7:cc:17: d3:c9:c9:2d:8d:ce:37:77:b4:cc:04:60:91:06:c1:1e:6e:49: 5a:b5:06:4c:6c:f5:ca:85:12:b0:00:10:0d:50:8f:b5:a2:10: 16:32:24:fa:c2:ab:ab:e7:a7:d2:72:2d:fa:ef:61:d7:39:8e: 1b:97:22:42:72:d3:84:24:43:73:f6:0a:b8:4d:b6:a1:71:36: d8:44:da:8c:81:57:ee:29:f8:a4:23:76:cf:9a:db:60:7c:90: f9:35:b8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZxP5X7tNjUmt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWIyMzhlOGMtMmY0Yy00ZDk0LWFmNzEtMDk2ZjI5NTIxMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7H77NvSACKS0OFSqRM159tSCTAlJKZaYRDE h962wSeWwsNUyap0zrPHDDKDYVtCsSMqSuoO0z+coirnXqWNT2NSUWT+5SJa/iVg vF5QConjZWxcHA6pTriyVASL6BMue1CzI1eWfLd6ppxVfxGGPgSaPsy8zodN+nZk ARvjaLaMmirXHBWyFYAF2fJ4qMe/MennOmcyAJ/ckkPP0o/5jtvkNW7mks8nRQ5m W5dHzmiOSzl0W8LJ5CE/bpxim0Y8sFlbDyBwB4z/wZl8bG9A4rjZRl8z15jMN1Bd NqIPE8LBNmMyFcfKkGc16G6aE58pRiAGVCdKpLs+2HL2kCyH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvjyacvmKM8qMkitYCY2qUhjzmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGM5ZjFiNGUtODMxMS0z ZDcxLTliNzktYTY1MjI0NDcwOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGigKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVr2z8Izn+g0fJbXSKXbsuegZYXMpzkYialilxKq/0CBZGUoS+0RRJp 4GCMrQPB4XMGRqEcGC0l0/qCQsABHq705EaNkobGyqTssb/EUyqaspidmg1gLQJX p+llhlt5Q0tVtLI2vsuDWIHOfBFfQN0ouB8CekRQxyhzaPY0K8DwqjBybqwd1UAq z2/re/GFIn9vnzbZ8wLIJRcuUesSNtfMF9PJyS2Nzjd3tMwEYJEGwR5uSVq1Bkxs 9cqFErAAEA1Qj7WiEBYyJPrCq6vnp9JyLfrvYdc5jhuXIkJy04QkQ3P2CrhNtqFx NthE2oyBV+4p+KQjds+a22B8kPk1uEM= -----END CERTIFICATE-----Generated at Wed May 13 09:04:38 2026 by rpki-client