$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa File: 85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa (raw, json) Hash identifier: lLHsEQ80drW536TZrL2bhJszZE0nXFPn7M+RBtz295k= Subject key identifier: 15:E2:E7:48:35:A8:02:5F:6E:B3:67:71:8A:A0:42:DF:83:3B:74:69 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF56B14C2277EE88E26AA40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.1.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6b:14:c2:27:7e:e8:8e:26:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c6b3a2bd-859b-46fe-bbfe-3bd0ff6fda21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ce:a8:ee:d4:ac:29:41:b8:27:e5:2e:98:3e: f0:2b:7e:fc:d3:b7:fb:4d:b8:b0:77:6a:7b:6c:b2: 8f:5d:3c:69:21:40:98:c0:5e:bd:1a:a5:1d:21:1f: 70:28:09:4b:b8:0f:97:b1:01:44:b1:58:3d:b8:9d: 26:20:2d:6e:f3:73:76:a7:78:f3:b4:cb:d2:81:d3: 9f:80:54:ec:91:3c:6a:b1:06:84:fc:e8:d7:dd:b5: 5a:64:b5:43:0a:8e:94:81:51:06:9a:f0:70:e8:bc: 4d:a5:73:2b:9b:5b:68:bd:26:43:15:6d:90:3d:f6: 27:c8:c4:ad:86:ee:0b:02:ca:27:33:cc:06:ec:70: 45:2c:f3:04:c5:ea:ca:36:01:2b:5a:8f:ea:54:18: 17:0b:ae:c9:5c:28:3f:b1:91:d9:b9:e0:a3:79:57: d4:5d:f1:ef:3b:09:fa:20:17:84:17:9a:ac:bc:af: a3:f9:9d:32:b1:d3:4c:e3:69:cf:66:fb:88:c8:dc: 1c:57:2a:fd:12:58:97:8e:50:82:6a:c9:59:7d:54: 46:ed:3b:31:22:a8:3a:57:8b:a6:6d:84:15:f8:15: 07:f0:9e:6b:cd:f3:e9:b0:1f:7a:c0:4d:ba:a9:7c: 4b:0f:22:f0:ac:a9:e3:d6:6b:7c:41:8e:1e:cd:29: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E2:E7:48:35:A8:02:5F:6E:B3:67:71:8A:A0:42:DF:83:3B:74:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8b:7e:5e:8e:ca:46:7f:69:19:3c:ee:f7:03:1b:9e:77:0a: a1:d9:de:d5:5b:ee:f5:f2:16:49:23:c8:b3:13:3e:61:1f:67: 89:b5:70:03:8b:f4:0b:76:d7:dd:0f:e6:b8:db:64:65:2f:f9: 2d:8e:1c:34:86:45:b5:21:30:8c:8f:37:91:dc:01:16:a3:de: 1a:1d:b9:aa:80:98:80:65:1f:be:a4:35:7b:95:7b:55:3c:35: 0a:84:74:dd:e3:3b:23:69:42:79:3b:4f:e6:e9:e6:0a:6e:0f: ba:7c:b2:3a:f4:0c:ab:dd:e2:60:4d:a0:72:96:f9:a1:21:c2: b5:15:65:f1:66:d7:61:2b:0e:93:b6:f8:38:0a:77:1b:1c:3c: 47:d7:0f:86:89:0c:f3:07:79:cb:9e:76:14:c8:93:d4:f4:77: 5d:99:04:26:86:17:1f:fc:22:4d:a0:77:36:5f:1b:be:89:c5: b4:e8:3a:3d:06:ad:16:ed:40:14:5c:b5:cb:4a:30:81:16:52: 66:c5:8c:f6:2f:26:2c:1c:f1:fe:91:03:fe:38:f3:bb:b0:26: 43:5e:29:ff:9b:ea:68:2f:e2:7a:66:01:11:09:15:01:c9:9c: 23:2e:4f:f9:e4:06:05:dd:95:b0:03:d2:63:78:cc:0d:58:ca: 7b:db:7f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WsUwid+6I4mqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzZiM2EyYmQtODU5Yi00NmZlLWJiZmUtM2JkMGZmNmZkYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc6o7tSsKUG4J+UumD7wK37807f7Tbiwd2p7 bLKPXTxpIUCYwF69GqUdIR9wKAlLuA+XsQFEsVg9uJ0mIC1u83N2p3jztMvSgdOf gFTskTxqsQaE/OjX3bVaZLVDCo6UgVEGmvBw6LxNpXMrm1tovSZDFW2QPfYnyMSt hu4LAsonM8wG7HBFLPMExerKNgErWo/qVBgXC67JXCg/sZHZueCjeVfUXfHvOwn6 IBeEF5qsvK+j+Z0ysdNM42nPZvuIyNwcVyr9EliXjlCCaslZfVRG7TsxIqg6V4um bYQV+BUH8J5rzfPpsB96wE26qXxLDyLwrKnj1mt8QY4ezSnO2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXi50g1qAJfbrNncYqgQt+DO3RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODViOWY3YmEtYTUzZC0z NjY1LWJhNGEtYzhhNjgzNWYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaLfl6OykZ/aRk87vcDG553CqHZ3tVb7vXyFkkjyLMTPmEfZ4m1cAOL 9At2190P5rjbZGUv+S2OHDSGRbUhMIyPN5HcARaj3hoduaqAmIBlH76kNXuVe1U8 NQqEdN3jOyNpQnk7T+bp5gpuD7p8sjr0DKvd4mBNoHKW+aEhwrUVZfFm12ErDpO2 +DgKdxscPEfXD4aJDPMHecuedhTIk9T0d12ZBCaGFx/8Ik2gdzZfG76JxbToOj0G rRbtQBRctctKMIEWUmbFjPYvJiwc8f6RA/4487uwJkNeKf+b6mgv4npmAREJFQHJ nCMuT/nkBgXdlbAD0mN4zA1YynvbfyA= -----END CERTIFICATE-----Generated at Wed May 13 06:45:47 2026 by rpki-client