$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa File: 87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa (raw, json) Hash identifier: t56cSPxhoQ7VJFCJ3uUSh2vjvGpP0gVxHABAfnVI1CI= Subject key identifier: 96:D0:43:FB:32:84:D6:F9:4F:9E:7C:CA:BF:48:97:5C:25:55:2F:B2 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D7F9AA110657112DFA9DDF900 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 138.2.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a1:10:65:71:12:df:a9:dd:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=db1989d1-43a6-4536-a98b-4cad1d1ef293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e1:b2:7b:93:72:30:73:44:25:f8:7b:a0:bf: e2:f8:c0:a9:3b:9e:57:a9:ad:81:14:7f:c4:84:54: 97:b8:f3:07:88:86:0f:ba:c7:1c:f1:41:a8:b6:a3: 70:f0:e1:30:0e:69:08:07:31:8b:8b:35:74:75:eb: 25:13:eb:e3:99:c1:c6:cf:45:1d:6f:10:4a:62:a3: 07:fc:38:8b:0f:c0:b8:f8:e0:0f:d8:0a:50:77:00: 85:a6:af:57:28:09:9b:db:44:cd:c1:c0:26:1e:ac: e8:dc:d2:13:a8:71:a8:5b:90:39:73:97:8c:4a:9c: 17:2f:77:a2:cf:f3:bd:f8:67:bb:7d:ed:8a:c2:4b: 5c:5e:15:d7:5c:d1:3f:4c:5d:02:ee:c0:48:9a:db: 34:29:2f:ae:4c:33:63:79:e7:b5:1e:27:7c:8b:f5: 3d:6e:f1:53:2e:af:a8:26:bb:2e:15:52:7c:b4:fe: 7c:5d:c8:7b:f0:2f:07:31:1e:b1:8a:7a:56:dc:1e: 2e:ff:15:7b:37:f3:fa:66:21:e9:84:55:42:93:3d: 4e:6d:78:6e:7a:6b:40:71:2e:cb:82:3a:6c:72:03: f3:1f:dc:15:3f:eb:df:98:00:0f:c2:73:bd:c5:a5: f5:e3:88:39:40:c7:34:5c:a2:a7:3b:84:7c:2c:75: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:43:FB:32:84:D6:F9:4F:9E:7C:CA:BF:48:97:5C:25:55:2F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:90:4c:60:ff:52:0e:18:95:44:15:18:1c:88:a2:0a:02:30: a4:38:0c:a6:84:ed:35:53:ef:76:df:31:f1:58:0e:8d:13:87: 2e:22:f0:40:88:4f:c9:d1:ae:00:66:a8:e0:24:96:c1:39:d6: 0c:5a:44:fa:1d:0f:d1:21:ae:a7:38:b2:b8:b4:e2:f5:58:2c: 6f:b2:05:1c:c7:2a:b5:1b:8e:67:30:5d:ab:f3:62:4b:ff:1c: 01:14:35:c4:5d:5e:b6:58:c8:0b:45:c9:3e:91:35:ac:37:cf: 31:a1:c3:a7:34:7e:b7:8d:f1:0b:28:6d:28:11:b4:51:f3:5c: 91:a2:92:1a:48:25:d9:01:fa:b8:f3:19:72:4e:26:25:70:24: f0:a5:3a:eb:05:c9:64:91:0f:23:1d:18:a0:f4:6d:b2:34:89: 8f:7f:75:25:87:20:54:28:d8:b6:fd:2b:18:0e:b7:56:53:eb: ae:65:1b:e4:78:91:e3:0c:18:80:29:79:3f:4a:44:b1:96:6f: 4f:d8:c4:17:af:f2:e3:fa:dc:fc:72:7d:10:3c:03:21:c4:08: 3a:3d:cd:61:88:6d:16:ba:80:7b:b0:11:b7:31:74:07:8b:66: 5c:ec:f2:8a:7a:c9:7a:82:14:2e:3a:d9:2b:43:4a:bd:87:2d: c5:b0:10:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqEQZXES36nd+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGIxOTg5ZDEtNDNhNi00NTM2LWE5OGItNGNhZDFkMWVmMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOGye5NyMHNEJfh7oL/i+MCpO55Xqa2BFH/E hFSXuPMHiIYPuscc8UGotqNw8OEwDmkIBzGLizV0deslE+vjmcHGz0UdbxBKYqMH /DiLD8C4+OAP2ApQdwCFpq9XKAmb20TNwcAmHqzo3NITqHGoW5A5c5eMSpwXL3ei z/O9+Ge7fe2KwktcXhXXXNE/TF0C7sBImts0KS+uTDNjeee1Hid8i/U9bvFTLq+o JrsuFVJ8tP58Xch78C8HMR6xinpW3B4u/xV7N/P6ZiHphFVCkz1ObXhuemtAcS7L gjpscgPzH9wVP+vfmAAPwnO9xaX144g5QMc0XKKnO4R8LHU5xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbQQ/syhNb5T558yr9Il1wlVS+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODc1MDNhMjAtZjdiOS0z MzgyLWE3ZWQtYWM2YTY0OWY3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyQTGD/Ug4YlUQVGByIogoCMKQ4DKaE7TVT73bfMfFYDo0Thy4i8ECI T8nRrgBmqOAklsE51gxaRPodD9Ehrqc4sri04vVYLG+yBRzHKrUbjmcwXavzYkv/ HAEUNcRdXrZYyAtFyT6RNaw3zzGhw6c0freN8QsobSgRtFHzXJGikhpIJdkB+rjz GXJOJiVwJPClOusFyWSRDyMdGKD0bbI0iY9/dSWHIFQo2Lb9KxgOt1ZT665lG+R4 keMMGIApeT9KRLGWb0/YxBev8uP63PxyfRA8AyHECDo9zWGIbRa6gHuwEbcxdAeL Zlzs8op6yXqCFC462StDSr2HLcWwELM= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:28 2026 by rpki-client