$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4639ed81-b251-325c-bc80-03c5a280e04a.roa File: 4639ed81-b251-325c-bc80-03c5a280e04a.roa (raw, json) Hash identifier: sKSWibPQau02dlDoWbxXatg22+m88HN9J4uM0VMT8Pc= Subject key identifier: 38:D8:D2:B1:D8:1D:35:29:86:BA:7A:3A:B1:67:33:FB:7A:E2:61:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D67DFB8823770A39C5A6E9A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4639ed81-b251-325c-bc80-03c5a280e04a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 63949 IP address blocks: 172.238.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b8:82:37:70:a3:9c:5a:6e:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=c882d69a-c08e-4d90-b451-c5513318ec66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:c2:68:da:5d:6c:51:bb:2f:05:01:0a:8a: 18:f1:cd:84:76:43:ba:80:c4:f9:46:86:e0:69:19: 4b:62:2b:ac:37:e5:44:32:1a:ca:6b:92:9e:b3:83: d0:db:56:52:d8:2c:35:58:e7:16:81:69:9a:04:82: a6:b6:21:eb:20:f2:b1:29:36:02:d7:51:33:94:23: 20:b4:1d:42:38:35:92:27:b1:80:2b:bc:1f:a0:28: dd:2e:f2:87:32:59:fb:76:90:41:d4:28:f7:2c:4a: 89:44:78:c8:ad:df:e0:bd:e1:f0:17:fa:6e:97:54: 58:e4:84:48:d8:b1:7b:35:60:3b:55:85:80:ac:0a: 70:bd:56:cf:a1:84:eb:dc:cd:ae:72:7d:7d:49:17: 69:04:9a:93:f4:0b:4b:55:86:12:87:77:02:d9:2b: 1a:74:93:83:54:0d:6a:60:41:b3:55:07:80:4a:37: 09:b4:1a:eb:3b:28:7c:6d:cb:aa:2d:d2:f7:29:dc: 7c:22:3b:62:c7:bf:74:c5:e7:09:fd:57:ce:52:eb: 68:8d:d6:ff:26:fb:cd:04:b5:75:c5:25:cc:b7:da: 8f:d0:0f:41:c0:4b:7f:5c:5c:f6:e4:1e:03:12:3d: cd:b5:ff:8a:cd:53:a0:f4:20:70:29:3b:c6:59:45: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:D2:B1:D8:1D:35:29:86:BA:7A:3A:B1:67:33:FB:7A:E2:61:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4639ed81-b251-325c-bc80-03c5a280e04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.238.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8c:e0:97:ea:71:77:ad:f8:45:a1:5f:18:4d:ef:1f:c5:9a: 88:6c:fd:90:0c:f7:fe:ab:27:71:18:09:06:23:af:f1:e0:83: de:18:70:2c:06:e2:c7:09:82:36:af:35:ec:9f:b0:7b:dc:08: 01:9f:66:f6:32:89:5a:c0:be:c0:78:4d:8a:f7:05:6c:c2:34: 5e:f8:1a:65:89:d2:9e:dc:34:ef:38:9e:28:87:67:0d:58:2d: f3:6b:d3:b1:56:01:0b:2c:d5:ed:9d:04:69:11:a9:ea:67:6e: cb:0f:ea:d0:96:c6:4b:a1:95:ac:b2:12:2d:0a:9f:83:23:f2: b5:e7:54:ea:71:8d:f3:c8:b1:72:00:dd:3c:c1:98:85:fe:1b: 0f:99:89:96:a5:e9:f2:27:82:b0:ad:aa:48:2d:2d:a7:47:88: 97:59:27:1f:86:70:0e:61:ce:65:c1:7a:72:17:56:65:aa:7e: 48:25:93:7b:99:59:24:bb:1c:b6:24:b7:25:c1:98:07:25:66: 52:db:96:b9:8d:57:aa:5a:c0:06:0f:c6:fd:dd:f1:a0:3f:6d: 8c:85:c7:db:35:5a:68:27:73:d6:43:18:ef:0c:52:01:cb:38: 81:e7:a0:a8:ec:04:dc:ee:67:a0:09:2b:67:cb:f0:12:ab:65: 4d:47:49:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37iCN3CjnFpumgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk Yzg4MmQ2OWEtYzA4ZS00ZDkwLWI0NTEtYzU1MTMzMThlYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfnCaNpdbFG7LwUBCooY8c2EdkO6gMT5Robg aRlLYiusN+VEMhrKa5Kes4PQ21ZS2Cw1WOcWgWmaBIKmtiHrIPKxKTYC11EzlCMg tB1CODWSJ7GAK7wfoCjdLvKHMln7dpBB1Cj3LEqJRHjIrd/gveHwF/pul1RY5IRI 2LF7NWA7VYWArApwvVbPoYTr3M2ucn19SRdpBJqT9AtLVYYSh3cC2SsadJODVA1q YEGzVQeASjcJtBrrOyh8bcuqLdL3Kdx8Ijtix790xecJ/VfOUutojdb/JvvNBLV1 xSXMt9qP0A9BwEt/XFz25B4DEj3Ntf+KzVOg9CBwKTvGWUXpgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjY0rHYHTUphrp6OrFnM/t64mFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDYzOWVkODEtYjI1MS0z MjVjLWJjODAtMDNjNWEyODBlMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2M4JfqcXet+EWhXxhN7x/Fmohs/ZAM9/6rJ3EYCQYjr/Hgg94YcCwG 4scJgjavNeyfsHvcCAGfZvYyiVrAvsB4TYr3BWzCNF74GmWJ0p7cNO84niiHZw1Y LfNr07FWAQss1e2dBGkRqepnbssP6tCWxkuhlayyEi0Kn4Mj8rXnVOpxjfPIsXIA 3TzBmIX+Gw+ZiZal6fIngrCtqkgtLadHiJdZJx+GcA5hzmXBenIXVmWqfkglk3uZ WSS7HLYktyXBmAclZlLblrmNV6pawAYPxv3d8aA/bYyFx9s1Wmgnc9ZDGO8MUgHL OIHnoKjsBNzuZ6AJK2fL8BKrZU1HSVE= -----END CERTIFICATE-----Generated at Fri Apr 17 04:02:05 2026 by rpki-client