$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa File: d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json) Hash identifier: Oi2nVQc8eLYsdXqNXjB2mQNl0jqZj9fHMbAM829Qn/g= Subject key identifier: 40:14:1C:FD:81:64:4F:97:95:F1:2F:8F:50:E1:2E:0B:53:C6:D7:65 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584CB551E4FEE79949B63921CFE0 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 396905 IP address blocks: 138.43.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:e4:fe:e7:99:49:b6:39:21:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=cab74a10-c7e8-4d40-884d-7b2f2d270496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:65:9b:00:4e:34:b8:96:d4:84:e8:80:59: 51:f4:79:8e:65:46:7d:da:ce:d1:ba:65:50:83:f9: 49:11:04:8a:f6:32:c4:5f:a7:99:09:3d:f0:4e:0d: 47:c1:82:69:5c:a3:c0:cb:d8:f3:5c:ed:32:bf:9f: 97:fb:b9:ab:99:99:1c:7e:57:b2:5d:44:16:7e:35: dc:7d:29:f4:e2:ef:0f:3a:cd:25:8f:9f:cb:96:db: 0f:40:06:fa:06:18:9e:cc:f1:a5:6f:6c:68:8d:5e: 84:03:77:57:27:c5:e8:94:c0:d2:c2:8b:c9:c3:3c: 70:8e:14:69:f3:92:e7:af:b5:3e:ae:a4:55:7e:1b: 84:5d:9c:9a:7d:88:1f:1a:57:14:ba:af:da:41:fd: bc:f3:8d:f5:63:3d:44:99:95:21:27:20:5e:70:0a: 4e:80:9f:cb:c1:f0:f7:d3:63:cc:3d:c4:03:2d:22: 09:6b:93:93:11:da:f8:c1:f2:14:ff:0d:4c:ba:bc: 9a:da:a6:b7:ab:1d:ba:46:e3:45:7e:47:c9:48:a8: d1:0a:22:ea:39:11:49:fc:79:ef:a9:0b:c0:e8:bc: 54:f3:ea:69:a6:6f:4a:9b:09:ab:0f:19:07:ff:72: 7d:40:71:85:9d:78:83:14:31:28:a5:3c:79:f4:79: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:1C:FD:81:64:4F:97:95:F1:2F:8F:50:E1:2E:0B:53:C6:D7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 138.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7b:43:d9:af:e4:eb:d3:b1:38:da:ba:65:54:dc:da:e1:f1: 2c:b0:11:7b:45:d6:c7:60:73:84:2e:37:68:d4:36:e1:8f:d0: 7b:6c:de:82:6c:5f:ce:4e:60:4a:35:46:f2:0a:a1:3f:9b:6c: 79:1d:60:38:bf:2d:cf:38:b0:1f:50:bb:65:9e:53:c4:12:b2: 49:16:b1:48:17:f3:4f:72:8d:36:5c:ff:8c:36:eb:3f:53:1a: 13:6e:37:0f:09:6f:c2:9f:cf:62:aa:e6:dd:51:be:f8:27:84: 2b:17:aa:83:75:ad:f7:09:4e:94:9f:e8:64:2e:91:e1:97:2e: f3:c9:2b:fe:ef:4c:e3:c9:18:80:a8:c1:96:c0:0c:84:55:52: 1a:84:77:6b:99:d7:2e:20:f9:72:d9:fa:52:f3:78:fc:92:89: 55:d0:85:15:a7:a7:85:c8:6f:9e:5a:ff:2c:62:6e:82:29:e5: ae:5f:ae:d3:23:69:fe:de:dd:72:4a:69:46:1d:08:b5:d0:90: 6a:6b:e2:57:56:e2:52:db:0d:a6:bc:30:fa:5f:2b:0d:84:a4: 88:eb:a2:0e:38:43:bd:7e:a9:d7:f0:29:bb:53:bf:03:9f:3c: 82:6f:d0:c6:01:5d:e6:34:57:df:9e:54:c7:be:53:8f:ff:c1: 0c:28:a1:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UeT+55lJtjkhz+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk Y2FiNzRhMTAtYzdlOC00ZDQwLTg4NGQtN2IyZjJkMjcwNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVxlmwBONLiW1ITogFlR9HmOZUZ92s7RumVQ g/lJEQSK9jLEX6eZCT3wTg1HwYJpXKPAy9jzXO0yv5+X+7mrmZkcfleyXUQWfjXc fSn04u8POs0lj5/LltsPQAb6BhiezPGlb2xojV6EA3dXJ8XolMDSwovJwzxwjhRp 85Lnr7U+rqRVfhuEXZyafYgfGlcUuq/aQf288431Yz1EmZUhJyBecApOgJ/LwfD3 02PMPcQDLSIJa5OTEdr4wfIU/w1Murya2qa3qx26RuNFfkfJSKjRCiLqORFJ/Hnv qQvA6LxU8+pppm9KmwmrDxkH/3J9QHGFnXiDFDEopTx59HliswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAUHP2BZE+XlfEvj1DhLgtTxtdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp7Q9mv5OvTsTjaumVU3Nrh8SywEXtF1sdgc4QuN2jUNuGP0Hts3oJs X85OYEo1RvIKoT+bbHkdYDi/Lc84sB9Qu2WeU8QSskkWsUgX809yjTZc/4w26z9T GhNuNw8Jb8Kfz2Kq5t1RvvgnhCsXqoN1rfcJTpSf6GQukeGXLvPJK/7vTOPJGICo wZbADIRVUhqEd2uZ1y4g+XLZ+lLzePySiVXQhRWnp4XIb55a/yxiboIp5a5frtMj af7e3XJKaUYdCLXQkGpr4ldW4lLbDaa8MPpfKw2EpIjrog44Q71+qdfwKbtTvwOf PIJv0MYBXeY0V9+eVMe+U4//wQwooTE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:29:53 2026 by rpki-client