$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/53fc97a4-becf-39e9-8a43-32d7ec627c47.roa File: 53fc97a4-becf-39e9-8a43-32d7ec627c47.roa (raw, json) Hash identifier: XNrRpcUlN17sAqGBmTmMGJGaRzQFJSJP371KJXV3goY= Subject key identifier: B2:B3:05:5E:01:98:11:37:A2:21:55:E6:A0:89:EE:53:60:39:CA:44 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D86957BF27634FB75CAEC0700 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/53fc97a4-becf-39e9-8a43-32d7ec627c47.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.2.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7b:f2:76:34:fb:75:ca:ec:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=eeeed9ab-58e9-463f-b869-9524facde09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:72:62:5e:b5:47:85:d3:e5:6f:a6:6f:65: 74:c3:1e:72:78:c5:68:76:8c:07:93:c5:cd:e5:4e: 7e:c1:ec:f9:57:1f:7e:26:b6:4d:b7:17:ac:aa:9d: 46:50:c9:e2:ab:9b:f0:b2:a8:c0:8e:90:7c:bf:9d: 3d:8b:a5:b2:f9:ba:95:af:d2:3e:01:2b:79:44:38: 44:fa:7c:f1:c7:05:29:94:c3:d7:90:e3:38:11:80: 05:49:04:a2:e6:33:30:85:b4:2c:52:56:ed:67:1e: ff:6c:42:d4:5e:5d:60:fe:5b:8b:71:c5:b3:89:23: 15:b6:a5:6a:25:ca:82:83:03:8c:9c:6f:aa:04:e6: e2:ac:c4:a9:ba:e7:37:b2:60:b4:94:8a:bc:4d:19: e1:00:da:0c:41:a7:9c:a5:ac:fb:08:d0:7c:89:0f: fa:50:ff:ee:43:15:2e:1e:77:e4:10:99:6a:26:a6: 65:eb:24:99:6a:13:44:61:05:f8:eb:a2:06:3e:31: 9f:e7:c8:18:53:bf:e3:57:ee:d1:ca:45:e8:aa:ed: 78:cf:53:d7:a2:bc:f4:0f:69:34:90:a4:8a:5b:39: 77:4d:57:ac:8c:49:df:04:eb:db:63:d9:9c:33:46: 7c:2f:5e:91:d2:f0:43:1b:50:6c:f5:23:85:30:40: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B3:05:5E:01:98:11:37:A2:21:55:E6:A0:89:EE:53:60:39:CA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/53fc97a4-becf-39e9-8a43-32d7ec627c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:51:66:c8:cc:db:65:69:81:48:12:26:fd:77:d9:22:4f:ae: 60:30:c6:d6:51:90:cb:5c:bc:74:5e:02:db:58:70:05:07:f3: 92:03:f3:b1:58:e2:12:1e:fd:9f:14:4e:47:bf:45:f9:86:fc: 6e:10:dd:94:e4:aa:c5:e6:db:fd:d0:e1:91:06:ad:3a:70:f3: dd:7c:5b:75:40:00:64:8d:66:59:c4:db:2a:98:9c:1a:b4:29: a2:17:bb:0c:81:92:49:c8:9b:cf:f9:9a:77:eb:1e:d6:21:49: e9:d3:c6:d2:9c:ac:b7:3a:c0:bd:00:f0:17:66:54:ec:29:82: 01:27:cc:ff:26:1e:c6:46:9b:3f:69:9c:cb:65:c7:d9:1e:e9: a0:41:50:f9:5b:5d:3d:f7:59:f5:cd:70:70:4b:1f:d8:71:ca: f6:9a:6e:2f:99:fa:98:fa:60:e6:0a:8b:91:52:37:a7:0d:40: a8:20:cb:bc:59:7d:47:74:e8:20:a3:3a:17:cc:31:84:0a:c3: 46:5c:70:16:44:e7:40:70:b6:6c:d7:f6:fa:fb:a4:0d:4f:03: 44:76:10:ef:2d:da:c2:c0:77:37:30:c8:6c:e0:f4:15:d7:3b: a2:0c:a5:96:63:f5:bb:17:19:c9:85:01:fc:16:79:48:e2:ae: 21:d5:aa:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXvydjT7dcrsBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZWVlZWQ5YWItNThlOS00NjNmLWI4NjktOTUyNGZhY2RlMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUFyYl61R4XT5W+mb2V0wx5yeMVodowHk8XN 5U5+wez5Vx9+JrZNtxesqp1GUMniq5vwsqjAjpB8v509i6Wy+bqVr9I+ASt5RDhE +nzxxwUplMPXkOM4EYAFSQSi5jMwhbQsUlbtZx7/bELUXl1g/luLccWziSMVtqVq JcqCgwOMnG+qBObirMSpuuc3smC0lIq8TRnhANoMQaecpaz7CNB8iQ/6UP/uQxUu HnfkEJlqJqZl6ySZahNEYQX466IGPjGf58gYU7/jV+7RykXoqu14z1PXorz0D2k0 kKSKWzl3TVesjEnfBOvbY9mcM0Z8L16R0vBDG1Bs9SOFMEDotwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKzBV4BmBE3oiFV5qCJ7lNgOcpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNTNmYzk3YTQtYmVjZi0z OWU5LThhNDMtMzJkN2VjNjI3YzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRRZsjM22VpgUgSJv132SJPrmAwxtZRkMtcvHReAttYcAUH85ID87FY 4hIe/Z8UTke/RfmG/G4Q3ZTkqsXm2/3Q4ZEGrTpw8918W3VAAGSNZlnE2yqYnBq0 KaIXuwyBkknIm8/5mnfrHtYhSenTxtKcrLc6wL0A8BdmVOwpggEnzP8mHsZGmz9p nMtlx9ke6aBBUPlbXT33WfXNcHBLH9hxyvaabi+Z+pj6YOYKi5FSN6cNQKggy7xZ fUd06CCjOhfMMYQKw0ZccBZE50BwtmzX9vr7pA1PA0R2EO8t2sLAdzcwyGzg9BXX O6IMpZZj9bsXGcmFAfwWeUjiriHVqi0= -----END CERTIFICATE-----Generated at Fri Apr 17 21:25:07 2026 by rpki-client