$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa File: e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa (raw, json) Hash identifier: ZP0CH0vbmFoFZbfABQ8NvbTvREGJdZldRLcy5eGZ6VY= Subject key identifier: 60:D7:2E:C7:66:04:68:DF:B6:0A:E8:E4:E9:BF:ED:7F:29:41:58:75 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584D60E504C2B84A65812EBE4980 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 19257 IP address blocks: 138.229.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:04:c2:b8:4a:65:81:2e:be:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=a1ca849d-b6b9-4bec-bed2-1fc6b7941dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:9e:58:0a:b5:f8:70:83:f8:38:18:06:0e: d1:f6:29:e8:6e:f0:42:72:3c:7b:13:6d:0c:d1:b8: 91:d8:74:d4:0a:3e:06:df:68:dd:3f:dd:7e:18:fa: b0:0d:9a:a3:fc:d6:da:1f:83:8f:aa:7c:d3:ce:ab: da:8a:62:29:9a:32:da:5c:b3:a0:24:f5:98:3a:f9: 4e:fe:6d:68:c5:64:f7:a0:33:7c:40:96:3b:98:97: 8a:ce:9a:87:84:cf:e4:c3:84:e3:2f:89:8a:11:f7: 48:b1:61:5b:2d:07:ba:01:09:8b:15:dd:42:34:33: b9:77:13:3e:6c:f7:b1:c4:53:ca:67:0a:34:ed:20: 81:d9:fa:52:92:dc:9d:43:6e:49:ec:7a:1c:66:51: 64:be:5e:3f:37:87:63:2d:43:c5:7a:f3:a3:14:ef: 8b:79:4d:3c:fd:d9:4c:bd:1c:d7:05:6a:13:3a:bd: 72:5c:88:c1:99:34:79:4e:2c:c2:1c:e5:59:f7:79: fb:43:a0:8a:3d:bd:bc:97:ed:3a:15:c2:5f:e3:94: a4:6a:04:14:42:d9:9b:24:5d:04:87:11:ab:e9:35: 5d:9d:5b:3b:31:0e:37:23:b2:c0:31:b3:5f:60:11: a6:51:eb:c8:8d:13:c8:08:22:29:e4:a2:77:86:f9: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:2E:C7:66:04:68:DF:B6:0A:E8:E4:E9:BF:ED:7F:29:41:58:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 138.229.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c7:e1:14:0a:14:6e:45:e8:1e:d7:e5:80:a9:b9:15:66:48: 4a:7d:83:1c:bf:5b:00:39:22:5a:de:60:3e:1e:c1:12:99:8f: c5:c1:67:f5:ee:1c:26:fc:b4:e2:25:d9:ec:ad:39:5e:af:3c: 8f:58:b7:ea:7c:30:88:85:a3:d4:cd:72:9c:c3:30:5f:72:c8: 33:b9:8e:3c:4b:18:ec:5a:12:0f:45:dc:76:57:ea:38:94:61: e8:80:8a:dc:4a:ce:77:02:ed:76:e6:dc:98:a4:5f:7d:2c:b9: 68:a8:49:4a:be:af:35:48:f3:8c:ac:5d:ce:0e:a5:64:31:bd: e8:43:8d:72:73:c3:42:4c:8c:99:2d:18:c8:c0:0f:c0:cb:f7: 02:53:ae:43:52:9c:1e:6e:45:e8:88:48:4d:50:89:b0:95:ba: 62:12:df:7a:6f:b2:75:6d:7d:cd:43:95:c1:73:66:2b:81:22: a9:b4:ff:54:85:1c:d3:7c:d1:2a:29:ee:02:ba:d0:5d:a8:f4: a4:91:83:48:4d:89:f1:fd:85:4b:86:0d:ef:be:d8:00:33:95: ed:c1:93:66:52:fb:ec:81:ce:55:d6:8d:6e:78:cd:63:77:37: 21:73:79:79:c8:17:a5:46:d0:42:9d:52:3c:6e:e8:b2:7f:10: c6:7f:91:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QTCuEplgS6+SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YTFjYTg0OWQtYjZiOS00YmVjLWJlZDItMWZjNmI3OTQxZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln2eWAq1+HCD+DgYBg7R9inobvBCcjx7E20M 0biR2HTUCj4G32jdP91+GPqwDZqj/NbaH4OPqnzTzqvaimIpmjLaXLOgJPWYOvlO /m1oxWT3oDN8QJY7mJeKzpqHhM/kw4TjL4mKEfdIsWFbLQe6AQmLFd1CNDO5dxM+ bPexxFPKZwo07SCB2fpSktydQ25J7HocZlFkvl4/N4djLUPFevOjFO+LeU08/dlM vRzXBWoTOr1yXIjBmTR5TizCHOVZ93n7Q6CKPb28l+06FcJf45SkagQUQtmbJF0E hxGr6TVdnVs7MQ43I7LAMbNfYBGmUevIjRPICCIp5KJ3hvnRZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDXLsdmBGjftgro5Om/7X8pQVh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvZTg4NzRkYmItYmVmNi0z YWE5LWFmMzMtZTA0NTVmY2Q5ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiuVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjH4RQKFG5F6B7X5YCpuRVmSEp9gxy/WwA5IlreYD4ewRKZj8XBZ/Xu HCb8tOIl2eytOV6vPI9Yt+p8MIiFo9TNcpzDMF9yyDO5jjxLGOxaEg9F3HZX6jiU YeiAitxKzncC7Xbm3JikX30suWioSUq+rzVI84ysXc4OpWQxvehDjXJzw0JMjJkt GMjAD8DL9wJTrkNSnB5uReiISE1QibCVumIS33pvsnVtfc1DlcFzZiuBIqm0/1SF HNN80Sop7gK60F2o9KSRg0hNifH9hUuGDe++2AAzle3Bk2ZS++yBzlXWjW54zWN3 NyFzeXnIF6VG0EKdUjxu6LJ/EMZ/kRg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:57:00 2026 by rpki-client