$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa File: 67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa (raw, json) Hash identifier: QkPRy558hFV7TCR7d9aNPzFZqHny5rfOvo8ONpz35cI= Subject key identifier: 24:03:51:C5:E6:2B:2A:21:1F:7B:FA:D4:1D:D2:0B:2B:B9:FF:71:C7 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF554BFC9ED104EE2D4D980 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:54:bf:c9:ed:10:4e:e2:d4:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b13d9fcd-36bd-45bc-8e59-6c15c2786226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:df:41:8d:3b:f7:e4:68:0c:ab:fa:43:94: 1e:9e:c2:2e:f3:53:d3:93:88:54:be:9c:86:5c:b4: a9:c7:97:fc:a4:3b:4a:93:16:ab:13:90:c2:53:0d: e5:80:b7:d3:de:20:9e:20:b0:1c:7c:81:e3:18:39: f7:f3:65:00:c7:da:a5:94:a5:de:fa:1b:51:42:06: 9c:0e:47:a5:55:b2:00:dd:8d:09:b4:74:63:61:2e: 28:aa:22:e3:f3:8e:e6:6d:dd:1b:4b:4f:2c:fe:e9: 95:bd:87:0d:6c:aa:df:d6:c8:e9:5f:f0:9b:71:ce: f7:64:6c:00:90:df:93:4e:3b:31:d9:32:cf:8e:7c: 6c:e5:5e:52:70:38:e9:df:fe:29:6e:ec:2b:5e:d9: 46:3e:41:ff:d3:7e:ca:60:c4:ed:15:9a:d2:02:52: 5e:08:d5:30:42:c3:ab:5e:e9:5b:5f:eb:c4:79:1f: dc:fa:6b:72:de:1d:21:1a:42:6b:17:b5:d5:37:7e: 0f:44:10:f0:9f:e7:c8:8e:5b:79:a1:fa:a4:11:0a: 76:70:30:2a:72:55:c1:cb:26:90:18:0a:11:64:26: ab:da:6b:04:8d:7e:43:23:29:eb:cd:a5:62:8d:85: b1:2d:3a:68:63:9f:da:5c:2e:87:d7:6b:1b:5d:6a: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:03:51:C5:E6:2B:2A:21:1F:7B:FA:D4:1D:D2:0B:2B:B9:FF:71:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a2:74:21:a5:4f:25:9b:3e:81:1f:76:44:ea:ae:6f:c0:e4: af:8d:82:15:5b:4a:f0:0d:cf:0e:0a:48:9f:69:e7:8c:06:c7: d7:25:df:e1:5f:48:9f:78:0c:01:56:3a:53:89:5a:47:0a:8d: a7:be:00:7f:fd:9b:64:3a:42:ca:8f:c6:cb:4d:d8:52:c9:e5: 8c:7f:a8:38:2a:ab:05:5e:91:4e:34:48:27:7b:a4:15:af:08: a9:d1:ff:b0:5d:1f:a6:40:99:d3:9f:6f:08:2b:9e:e0:25:86: 3d:75:e9:f4:a4:15:4c:65:d3:b0:b0:18:67:22:ba:96:f1:0d: ed:f7:a0:d9:80:50:c6:7b:67:23:a7:25:cb:0f:b7:28:80:dc: 17:75:d0:9e:9a:3c:c2:28:28:f5:41:b4:a5:06:cc:48:88:51: df:a9:f5:4e:b2:cb:75:e9:42:87:ac:7f:74:05:15:40:1f:03: a5:5d:54:ff:5a:2c:17:39:a2:94:35:2b:e5:e2:06:8d:93:7f: 27:4b:b3:db:cb:5c:bd:ae:73:56:7c:3b:fc:af:05:22:a3:d7: 01:01:22:5d:91:33:02:33:e2:27:fb:91:eb:33:2c:dd:8d:22: bf:0c:70:49:38:fe:ea:08:78:4d:26:6a:6c:46:e4:25:bf:de: ae:a9:8a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VS/ye0QTuLU2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjEzZDlmY2QtMzZiZC00NWJjLThlNTktNmMxNWMyNzg2MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoDfQY079+RoDKv6Q5QensIu81PTk4hUvpyG XLSpx5f8pDtKkxarE5DCUw3lgLfT3iCeILAcfIHjGDn382UAx9qllKXe+htRQgac DkelVbIA3Y0JtHRjYS4oqiLj847mbd0bS08s/umVvYcNbKrf1sjpX/Cbcc73ZGwA kN+TTjsx2TLPjnxs5V5ScDjp3/4pbuwrXtlGPkH/037KYMTtFZrSAlJeCNUwQsOr XulbX+vEeR/c+mty3h0hGkJrF7XVN34PRBDwn+fIjlt5ofqkEQp2cDAqclXByyaQ GAoRZCar2msEjX5DIynrzaVijYWxLTpoY5/aXC6H12sbXWpsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQDUcXmKyohH3v61B3SCyu5/3HHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjcwMThiODAtNzRmNi0z ZTlhLTk0ODMtZjNjZjNiN2U4YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOidCGlTyWbPoEfdkTqrm/A5K+NghVbSvANzw4KSJ9p54wGx9cl3+Ff SJ94DAFWOlOJWkcKjae+AH/9m2Q6QsqPxstN2FLJ5Yx/qDgqqwVekU40SCd7pBWv CKnR/7BdH6ZAmdOfbwgrnuAlhj116fSkFUxl07CwGGciupbxDe33oNmAUMZ7ZyOn JcsPtyiA3Bd10J6aPMIoKPVBtKUGzEiIUd+p9U6yy3XpQoesf3QFFUAfA6VdVP9a LBc5opQ1K+XiBo2TfydLs9vLXL2uc1Z8O/yvBSKj1wEBIl2RMwIz4if7keszLN2N Ir8McEk4/uoIeE0mamxG5CW/3q6piug= -----END CERTIFICATE-----Generated at Wed May 13 13:59:35 2026 by rpki-client