$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7287235e-6e19-31c3-9e9f-d55a13e5e683.roa File: 7287235e-6e19-31c3-9e9f-d55a13e5e683.roa (raw, json) Hash identifier: OpT25QeBTk7uCtktFehe8IpASqebLjcd1K8yCPonmRE= Subject key identifier: F7:1D:9A:E8:94:49:A8:07:39:B1:3E:C5:B8:CC:7B:F8:A3:FC:77:5B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A94E9083A9905CBE55F80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7287235e-6e19-31c3-9e9f-d55a13e5e683.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 138.1.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:94:e9:08:3a:99:05:cb:e5:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=78150336-0c32-48b2-a23e-b21984c1a283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:03:06:be:19:7d:8c:f0:98:a7:35:12:03: d4:ab:5a:4f:b3:04:11:eb:c5:c5:64:e9:dc:25:f4: 20:ed:4c:1f:3d:18:e3:a6:47:57:d7:07:70:67:fc: 71:35:b6:53:54:fc:e7:69:a8:47:4d:0c:1d:0c:a1: 67:d6:04:7b:1c:a6:6c:ec:29:f3:6f:2b:ca:d8:ff: c3:20:cf:01:2f:0d:f4:c9:f2:de:f2:a4:82:0c:4a: 24:cc:36:4d:25:a6:b9:e4:38:ca:59:a7:28:06:2a: 37:5d:c7:c6:96:d1:dc:04:f4:41:a7:f0:7d:08:ef: 7a:6d:08:9a:c9:1d:24:42:76:ad:5f:31:8e:f0:5a: 40:1d:c5:19:00:fa:fd:46:1a:0e:da:86:30:40:f6: 68:55:b9:6e:a0:d4:02:85:11:7c:79:33:47:db:9f: 2d:27:b6:00:23:d0:69:3f:7e:62:fb:5b:e5:f4:3e: b1:a3:7f:e9:3d:69:44:45:79:82:20:49:85:9e:4d: ac:9c:f7:be:dc:a0:3c:d2:80:3f:e9:90:5c:c9:1b: 1a:a7:96:53:64:13:da:2d:ca:c7:60:97:d5:00:70: 3a:ed:3b:55:a8:e3:cf:0c:5f:a6:2f:8f:6f:78:70: ee:0d:3e:b7:01:c5:81:2b:8e:9c:df:51:e3:ab:8a: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1D:9A:E8:94:49:A8:07:39:B1:3E:C5:B8:CC:7B:F8:A3:FC:77:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7287235e-6e19-31c3-9e9f-d55a13e5e683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:eb:3f:ed:69:56:c0:8c:3f:29:e5:f6:06:cc:3b:26:ea:50: c6:12:26:73:9a:4c:89:0f:ea:be:3a:37:83:ce:19:c9:5a:d5: f2:9a:68:d5:7d:54:1a:79:60:e3:0a:e1:66:36:2f:29:a2:4f: 7d:fc:ed:e2:9e:48:13:77:9a:1c:68:cd:cf:d3:07:df:6e:86: 7c:49:e3:b9:04:18:e6:58:f7:4f:89:0d:bc:5e:ee:3e:1d:80: a9:06:f8:5f:92:47:11:4b:47:18:2c:e1:cb:27:8b:70:1c:c5: 37:c1:1d:bb:81:0c:f4:18:d3:b2:7f:fb:67:6b:28:25:e3:e2: 8a:71:6e:32:2e:33:ce:b3:9d:b9:44:5b:29:88:b0:45:a3:3b: 1c:48:40:86:03:db:84:23:29:1c:f6:61:6a:2a:ae:fd:e0:85: 00:a1:1f:90:9b:9b:48:b7:63:fa:bd:26:91:d1:4e:d6:f4:cf: 9f:db:ec:aa:95:1e:cb:50:6c:00:a0:46:f4:67:ed:63:c3:fd: fd:1e:4d:0f:90:b6:0f:4d:2b:57:29:7b:fd:7a:5b:c7:62:8e: 0b:d2:3d:00:5a:99:d2:55:8f:f2:1b:5a:09:96:26:a2:13:b7: 15:14:98:0e:9b:12:d3:cd:0e:29:04:f9:97:9a:1f:a9:08:88: f6:81:03:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpTpCDqZBcvlX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NzgxNTAzMzYtMGMzMi00OGIyLWEyM2UtYjIxOTg0YzFhMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGgDBr4ZfYzwmKc1EgPUq1pPswQR68XFZOnc JfQg7UwfPRjjpkdX1wdwZ/xxNbZTVPznaahHTQwdDKFn1gR7HKZs7CnzbyvK2P/D IM8BLw30yfLe8qSCDEokzDZNJaa55DjKWacoBio3XcfGltHcBPRBp/B9CO96bQia yR0kQnatXzGO8FpAHcUZAPr9RhoO2oYwQPZoVbluoNQChRF8eTNH258tJ7YAI9Bp P35i+1vl9D6xo3/pPWlERXmCIEmFnk2snPe+3KA80oA/6ZBcyRsap5ZTZBPaLcrH YJfVAHA67TtVqOPPDF+mL49veHDuDT63AcWBK46c31Hjq4oJ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcdmuiUSagHObE+xbjMe/ij/HdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNzI4NzIzNWUtNmUxOS0z MWMzLTllOWYtZDU1YTEzZTVlNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvrP+1pVsCMPynl9gbMOybqUMYSJnOaTIkP6r46N4POGcla1fKaaNV9 VBp5YOMK4WY2LymiT3387eKeSBN3mhxozc/TB99uhnxJ47kEGOZY90+JDbxe7j4d gKkG+F+SRxFLRxgs4csni3AcxTfBHbuBDPQY07J/+2drKCXj4opxbjIuM86znblE WymIsEWjOxxIQIYD24QjKRz2YWoqrv3ghQChH5Cbm0i3Y/q9JpHRTtb0z5/b7KqV HstQbACgRvRn7WPD/f0eTQ+Qtg9NK1cpe/16W8dijgvSPQBamdJVj/IbWgmWJqIT txUUmA6bEtPNDikE+ZeaH6kIiPaBAx8= -----END CERTIFICATE-----Generated at Wed May 13 10:45:36 2026 by rpki-client