$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa File: 1ddd6058-8bac-3231-9bed-094a75781a5d.roa (raw, json) Hash identifier: /PlMDgbHq1xWmP/yZB5db6KKHRv6tmFhCDE+kgU5hFg= Subject key identifier: E0:62:85:ED:2C:41:64:E5:EA:C3:36:FD:1E:A4:8F:D3:E5:15:E1:27 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584CCED5DAB6D25E82A07A34C980 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa Signing time: Mon 09 Feb 2026 17:22:03 +0000 ROA not before: Mon 09 Feb 2026 17:22:03 +0000 ROA not after: Sun 10 May 2026 16:22:03 +0000 asID: 30029 IP address blocks: 57.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:d5:da:b6:d2:5e:82:a0:7a:34:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Feb 9 17:22:03 2026 GMT Not After : May 10 16:22:03 2026 GMT Subject: CN=798720a9-6bac-4771-9f99-93a59c6d8fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:02:b5:bd:54:d5:89:7d:fb:6b:7c:dc:de:b0: 91:1a:55:0c:a6:6b:b1:d9:ad:5f:8d:cd:d5:56:43: 43:9d:8c:ed:96:3c:ef:6f:fa:d6:68:ce:3d:c8:02: 34:16:40:11:97:7c:70:77:0c:ff:0c:93:55:c6:08: 23:28:45:34:e4:f8:dc:7c:f4:5f:af:ad:01:4b:77: 2a:a9:2d:99:82:13:4d:f5:61:af:b2:f7:06:7e:c4: 3c:6d:0e:13:60:4a:f7:5c:ea:3b:00:19:73:3c:24: 69:94:d1:4d:59:bf:8e:f3:4f:dd:3a:98:dd:5c:de: db:8c:d9:66:bf:65:b7:3e:6e:c0:02:0b:77:15:0f: f4:31:b0:c2:3d:bf:4d:8a:25:43:88:03:34:8c:40: 13:7c:5d:77:36:86:24:15:6f:39:d5:84:a2:90:bc: 23:9f:47:6a:8d:df:1c:d4:11:aa:b9:ac:5d:4e:59: 0d:62:ea:4c:0a:8f:bc:e2:19:c3:73:3c:74:07:3d: a2:74:a2:4e:89:28:b8:c8:37:a7:37:f5:47:75:3b: fc:71:ca:21:49:fd:69:22:b9:ae:b5:63:b3:07:26: 09:3d:0c:25:bc:6f:ec:8c:1a:dc:63:c0:27:c3:31: e7:68:e0:bb:48:4b:70:f4:97:95:65:81:80:06:57: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:62:85:ED:2C:41:64:E5:EA:C3:36:FD:1E:A4:8F:D3:E5:15:E1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 57.138.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a0:f5:3a:26:6b:f7:5d:79:69:d9:7c:b6:ed:fb:5b:cc:24: e9:f7:8c:8d:a2:cd:fb:64:89:19:15:b6:da:3e:f2:99:68:39: 9b:ef:32:ff:04:4c:d4:8e:41:e4:3d:67:48:12:df:ee:21:26: 04:ae:69:38:b5:44:fd:5e:64:1a:62:12:48:c7:f3:01:05:22: 46:0c:44:58:6e:5b:f5:a8:a2:2e:e8:e9:95:27:80:01:2f:c3: 73:71:e3:47:66:e7:07:0f:2a:2d:d8:be:a7:53:fb:d8:c0:07: d5:17:05:91:a7:fd:bf:eb:f4:6f:80:25:0a:04:e1:36:ba:56: 61:59:5d:f2:50:06:ba:61:70:3f:c0:da:d2:b8:ed:86:b0:4f: bf:e1:cd:e0:20:81:13:57:36:57:6e:45:0a:19:b4:90:a7:7d: 97:f0:1f:07:23:6a:b9:8a:3c:80:8b:9e:af:e6:ff:7c:d7:7e: 93:20:45:31:d4:a2:69:31:a9:8c:5d:41:f0:24:e2:af:35:08: 8c:b2:80:40:b4:e6:5a:5e:aa:03:96:4c:8d:0e:51:bf:0f:a3: cf:b2:42:ca:90:47:da:fc:b2:02:b8:c1:fb:08:cd:c7:91:7f: 96:6b:0d:ce:21:97:97:9f:c3:25:4a:ac:89:1c:04:de:b7:69: a6:2a:a2:11 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzO1dq20l6CoHo0yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDIwOTE3MjIwM1oXDTI2MDUxMDE2MjIwM1owLzEtMCsGA1UEAxMk Nzk4NzIwYTktNmJhYy00NzcxLTlmOTktOTNhNTljNmQ4ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwK1vVTViX37a3zc3rCRGlUMpmux2a1fjc3V VkNDnYztljzvb/rWaM49yAI0FkARl3xwdwz/DJNVxggjKEU05PjcfPRfr60BS3cq qS2ZghNN9WGvsvcGfsQ8bQ4TYEr3XOo7ABlzPCRplNFNWb+O80/dOpjdXN7bjNlm v2W3Pm7AAgt3FQ/0MbDCPb9NiiVDiAM0jEATfF13NoYkFW851YSikLwjn0dqjd8c 1BGquaxdTlkNYupMCo+84hnDczx0Bz2idKJOiSi4yDenN/VHdTv8ccohSf1pIrmu tWOzByYJPQwlvG/sjBrcY8AnwzHnaOC7SEtw9JeVZYGABldWKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOBihe0sQWTl6sM2/R6kj9PlFeEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMWRkZDYwNTgtOGJhYy0z MjMxLTliZWQtMDk0YTc1NzgxYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOYowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYqD1OiZr9115adl8tu37W8wk6feMjaLN+2SJGRW22j7ymWg5m+8y/wRM 1I5B5D1nSBLf7iEmBK5pOLVE/V5kGmISSMfzAQUiRgxEWG5b9aiiLujplSeAAS/D c3HjR2bnBw8qLdi+p1P72MAH1RcFkaf9v+v0b4AlCgThNrpWYVld8lAGumFwP8Da 0rjthrBPv+HN4CCBE1c2V25FChm0kKd9l/AfByNquYo8gIuer+b/fNd+kyBFMdSi aTGpjF1B8CTirzUIjLKAQLTmWl6qA5ZMjQ5Rvw+jz7JCypBH2vyyArjB+wjNx5F/ lmsNziGXl5/DJUqsiRwE3rdppiqiEQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:43:46 2026 by rpki-client