$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa File: c993d273-204c-3af8-95dc-bc8d56df4008.roa (raw, json) Hash identifier: 10yp9h1O1pIRbFENAG2Umi/WtBb7UOQKPiuNE0+C9SI= Subject key identifier: AC:1F:4D:44:2E:54:6F:55:A0:27:83:70:A3:DD:C6:A7:F0:BD:D1:68 Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Certificate serial: 010D0C9F4328584D5E1A6BED6518D404AA5A0400 Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 395347 IP address blocks: 138.43.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6b:ed:65:18:d4:04:aa:5a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=5a453d91-b5af-41db-9e48-402b5dcb5461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f8:b4:80:e7:34:cf:09:9d:a3:a5:e8:e3:00: 52:ac:d1:1b:d1:fb:5c:7c:bc:4a:93:b7:2b:f9:76: 8b:96:40:f8:af:ae:d6:ea:46:f9:72:39:59:d3:28: 49:e5:83:f8:3f:91:5e:da:c8:63:45:ee:41:36:38: 1f:39:b9:96:a4:fa:d5:7c:3b:59:cd:54:07:4b:36: 07:15:9d:a6:24:c8:e7:c8:aa:d4:52:27:42:ae:df: 50:61:6a:20:f7:bc:76:46:60:0a:26:c1:99:a8:b2: 64:cb:8d:59:99:c8:5c:86:9d:dc:42:e0:4f:45:c5: 3d:d5:0c:60:eb:42:05:c7:52:ca:f0:72:9d:38:1c: 1a:aa:e4:e0:f8:c2:64:07:38:72:2a:fd:e0:17:3f: e8:47:8a:44:39:8a:34:9a:59:9c:5e:70:9f:33:ab: 17:05:3c:2d:c2:29:4d:e9:c5:98:d7:02:41:cf:30: 06:52:71:f0:06:5f:90:66:fd:b5:d0:b3:07:c4:4d: 1e:a9:b4:80:85:83:7d:20:ec:c2:99:c3:93:8a:21: 51:70:36:26:4c:22:8c:78:44:87:e8:29:65:4e:e4: 82:e6:39:b2:9f:34:a7:2b:6a:3f:d3:96:c6:d9:59: cf:b5:f8:9d:b5:40:65:4f:bd:24:8c:1f:9a:71:63: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:4D:44:2E:54:6F:55:A0:27:83:70:A3:DD:C6:A7:F0:BD:D1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl X509v3 Authority Key Identifier: keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer sbgp-ipAddrBlock: critical IPv4: 138.43.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:93:8e:ce:67:51:7f:0e:49:e8:61:a5:f2:ee:bc:36:c6:90: 6f:c6:dd:e3:42:a0:6d:56:71:96:f7:e3:9b:64:e7:0b:9d:c8: 10:9e:af:67:9c:ee:7a:68:04:ef:26:fd:25:ab:e9:6a:a9:70: f2:27:6d:a1:c7:1f:21:71:69:81:0d:fa:a1:b9:94:6a:31:9f: 37:86:4c:d5:d0:19:26:70:ac:1d:25:fb:85:cb:b2:d4:5e:9b: 0c:72:56:ee:53:eb:90:ee:79:a6:19:52:d2:4b:f8:6a:7d:be: ea:42:37:6d:66:e5:16:cb:0d:ec:a2:f1:b2:69:93:5e:e7:35: f2:1c:85:9a:2f:c5:57:53:7b:0e:5f:b5:b6:49:ab:22:ef:e3: a3:a4:3f:ca:28:bb:8e:09:d1:1a:a9:9c:9a:fc:ef:81:a5:d5: 10:2e:84:75:8d:11:31:d9:76:54:3b:32:87:ca:a3:ca:a6:43: 07:0c:88:0c:df:b9:bb:3e:5e:dc:52:a7:9e:05:e9:dd:49:ef: 2a:98:1d:0b:f7:89:1a:5d:08:2b:ea:24:ae:22:ce:34:a6:c2: f5:d8:b3:c1:e2:35:07:c0:b5:de:80:84:fe:ab:31:03:c7:e5: 40:a9:e4:f0:94:e4:93:4a:f1:d1:7f:71:36:40:45:ef:04:bc: 29:e2:47:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmvtZRjUBKpaBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjODA1ZDUtNThhNC00NTNlLWIxNmUtYzY3N2NjYjZi NDZkMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NWE0NTNkOTEtYjVhZi00MWRiLTllNDgtNDAyYjVkY2I1NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/i0gOc0zwmdo6Xo4wBSrNEb0ftcfLxKk7cr +XaLlkD4r67W6kb5cjlZ0yhJ5YP4P5Fe2shjRe5BNjgfObmWpPrVfDtZzVQHSzYH FZ2mJMjnyKrUUidCrt9QYWog97x2RmAKJsGZqLJky41Zmchchp3cQuBPRcU91Qxg 60IFx1LK8HKdOBwaquTg+MJkBzhyKv3gFz/oR4pEOYo0mlmcXnCfM6sXBTwtwilN 6cWY1wJBzzAGUnHwBl+QZv210LMHxE0eqbSAhYN9IOzCmcOTiiFRcDYmTCKMeESH 6CllTuSC5jmynzSnK2o/05bG2VnPtfidtUBlT70kjB+acWN2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwfTUQuVG9VoCeDcKPdxqfwvdFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4 MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3Y2NiNmI0NmQvYzk5M2QyNzMtMjA0Yy0z YWY4LTk1ZGMtYmM4ZDU2ZGY0MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjdjODA1ZDUtNThhNC00NTNlLWIx NmUtYzY3N2NjYjZiNDZkL2I3YzgwNWQ1LTU4YTQtNDUzZS1iMTZlLWM2NzdjY2I2 YjQ2ZC5jcmwwHwYDVR0jBBgwFoAUwQai+A2zt5NMcjsfcCq0j0hSr9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3 Y2NiNmI0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiivwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqTjs5nUX8OSehhpfLuvDbGkG/G3eNCoG1WcZb345tk5wudyBCer2ec 7npoBO8m/SWr6WqpcPInbaHHHyFxaYEN+qG5lGoxnzeGTNXQGSZwrB0l+4XLstRe mwxyVu5T65DueaYZUtJL+Gp9vupCN21m5RbLDeyi8bJpk17nNfIchZovxVdTew5f tbZJqyLv46OkP8oou44J0RqpnJr874Gl1RAuhHWNETHZdlQ7MofKo8qmQwcMiAzf ubs+XtxSp54F6d1J7yqYHQv3iRpdCCvqJK4izjSmwvXYs8HiNQfAtd6AhP6rMQPH 5UCp5PCU5JNK8dF/cTZARe8EvCniRwA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:28 2026 by rpki-client