$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa File: f8026007-1692-331c-9a2b-cf10e45b808e.roa (raw, json) Hash identifier: wzowA/u1PRhExtSzfRvbDY8vzNrjWIlAv+9Jjovv9XM= Subject key identifier: E2:AC:2F:6B:31:F7:BF:E9:0A:A6:D7:89:6E:E1:6D:FB:47:B6:C1:AE Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D869579EEEAC69FBB9B0A0340 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 138.2.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:79:ee:ea:c6:9f:bb:9b:0a:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=73f1b41d-1cea-4856-bfa1-d431640c5f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:c9:c2:f1:a9:52:66:c1:54:16:7c:cb:54: 65:7e:7e:b8:c8:ce:7c:e2:ea:1a:b0:1e:79:da:dd: 66:66:b7:f1:e4:82:d3:cf:54:1a:11:99:3a:ce:0c: 40:a8:9d:d7:69:1d:53:cf:69:fe:20:f0:be:b2:f0: 26:da:f8:cf:ab:d4:44:66:16:d1:98:90:8f:4f:c2: 5a:56:0d:81:ec:f8:4f:1e:22:c5:e9:47:5b:13:ce: 7b:a5:2b:ca:19:50:8d:ba:24:f6:90:97:98:17:6d: b5:97:66:ad:98:46:01:27:82:98:df:68:3c:6f:26: 53:19:95:ae:9b:b5:20:8b:98:7b:6d:eb:b5:8a:d1: c3:2b:14:59:25:87:c6:15:af:0d:5b:5b:22:17:d8: ff:ca:cf:12:0b:74:1e:3d:29:78:ce:cb:2b:1e:6a: 80:d6:02:bf:9d:c7:9a:d5:7f:af:a7:07:07:ed:cc: f3:81:6b:4f:72:ac:64:ee:6e:3c:50:ce:93:ea:d1: 5d:08:3f:3c:a5:10:d8:6f:88:f5:d1:88:ec:f7:0b: 2a:bd:7e:5d:65:a4:c8:b2:e4:d7:ce:36:c8:c0:12: 1d:a0:fe:75:9f:5a:1e:63:1e:a8:b0:89:d3:09:a5: 04:79:59:08:6b:2d:42:b9:0d:77:70:40:f2:f1:cb: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AC:2F:6B:31:F7:BF:E9:0A:A6:D7:89:6E:E1:6D:FB:47:B6:C1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:98:8d:b6:ea:2e:1f:17:4d:73:7a:3d:05:35:38:65:44:66: ab:a5:34:f3:22:da:5c:0e:d1:54:7a:89:0c:91:ac:c2:52:ab: 79:ee:67:8f:92:af:ff:ec:14:95:17:79:8b:a9:4c:ce:5d:47: 25:af:ff:2d:75:10:e9:53:fa:84:ee:99:f6:0d:4e:7f:8d:27: f0:22:cf:b1:aa:50:5b:d5:7b:f4:44:ba:46:e3:ae:e0:fb:7f: a9:10:63:82:35:dd:ea:15:28:9c:e0:1a:e6:ca:76:bb:6f:84: ca:c2:fc:70:0c:bc:fd:96:0c:e8:5f:d3:c6:1d:05:a0:6f:a8: ad:e3:31:41:81:b0:47:d7:92:9e:f4:25:e6:98:00:ec:ff:cd: 75:fc:4a:d0:86:93:68:b3:28:d2:9e:d8:67:8d:c8:63:6d:99: a0:14:3c:9a:82:e3:d9:3b:3d:6a:23:f1:8d:e4:3a:e2:ef:51: e1:1d:7c:b1:74:0f:ab:a4:1b:d9:b2:4c:74:92:fe:ec:50:e4: 5f:a9:f0:4e:13:53:03:ce:aa:4c:45:a2:26:a4:50:4f:c4:57: 09:07:08:ff:f9:c1:77:d6:de:11:ee:ef:a3:23:0b:e9:23:a7: 27:86:fd:bc:41:30:c7:8f:f7:d5:e0:27:55:21:6d:c0:80:bf: 91:b0:1a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXnu6safu5sKA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NzNmMWI0MWQtMWNlYS00ODU2LWJmYTEtZDQzMTY0MGM1ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw/JwvGpUmbBVBZ8y1Rlfn64yM584uoasB55 2t1mZrfx5ILTz1QaEZk6zgxAqJ3XaR1Tz2n+IPC+svAm2vjPq9REZhbRmJCPT8Ja Vg2B7PhPHiLF6UdbE857pSvKGVCNuiT2kJeYF221l2atmEYBJ4KY32g8byZTGZWu m7Ugi5h7beu1itHDKxRZJYfGFa8NW1siF9j/ys8SC3QePSl4zssrHmqA1gK/ncea 1X+vpwcH7czzgWtPcqxk7m48UM6T6tFdCD88pRDYb4j10Yjs9wsqvX5dZaTIsuTX zjbIwBIdoP51n1oeYx6osInTCaUEeVkIay1CuQ13cEDy8cvkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKsL2sx97/pCqbXiW7hbftHtsGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjgwMjYwMDctMTY5Mi0z MzFjLTlhMmItY2YxMGU0NWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWYjbbqLh8XTXN6PQU1OGVEZqulNPMi2lwO0VR6iQyRrMJSq3nuZ4+S r//sFJUXeYupTM5dRyWv/y11EOlT+oTumfYNTn+NJ/Aiz7GqUFvVe/REukbjruD7 f6kQY4I13eoVKJzgGubKdrtvhMrC/HAMvP2WDOhf08YdBaBvqK3jMUGBsEfXkp70 JeaYAOz/zXX8StCGk2izKNKe2GeNyGNtmaAUPJqC49k7PWoj8Y3kOuLvUeEdfLF0 D6ukG9myTHSS/uxQ5F+p8E4TUwPOqkxFoiakUE/EVwkHCP/5wXfW3hHu76MjC+kj pyeG/bxBMMeP99XgJ1UhbcCAv5GwGlM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:25:06 2026 by rpki-client