$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa File: d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json) Hash identifier: NPrZbXdRKvnSfzj9dYhW2dLBjGHHHiSnijhHNiRo6Aw= Subject key identifier: 2A:D4:07:AF:24:38:BD:20:39:3E:46:A7:FA:7F:C1:D5:55:96:13:96 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584E7634D76A57E8D6F8C8B23DE4 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 396905 IP address blocks: 138.43.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:d7:6a:57:e8:d6:f8:c8:b2:3d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=9e0a4df3-94e7-409c-927d-8891551fe708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:33:98:04:53:2d:5a:7c:9b:9d:28:1a:5f:59: a7:18:d6:88:5b:27:69:1e:44:c1:32:15:7b:9d:80: 8c:1a:19:08:40:18:9a:6a:96:28:3d:2c:94:6f:76: 1a:cc:68:be:85:41:ca:af:40:23:d6:11:9b:68:08: 18:e0:ca:e2:73:8a:d0:a1:8c:60:b9:7e:06:62:76: e1:d4:02:6d:8e:80:89:24:7d:20:20:32:1a:3a:b6: 88:35:66:69:d9:91:28:04:bd:85:f6:7d:93:1a:c0: 9b:7e:56:53:84:ba:6e:ab:98:4a:2d:72:48:70:98: 1b:56:5e:03:dd:dd:8a:cb:4f:06:cf:a1:df:cb:09: 73:2d:37:00:14:92:f3:7c:4a:2c:f9:04:35:6d:9d: 74:d4:1c:0c:e1:1b:b4:a3:78:68:e2:5d:30:c2:bd: ef:39:ed:1f:d9:48:13:16:06:c7:00:df:83:8c:73: 78:39:08:6c:b6:f9:a4:4e:7b:f7:ed:ba:cf:41:ff: ba:de:f2:30:ce:95:61:0f:d0:c8:5d:23:14:83:a0: 7b:52:74:00:26:1c:08:ef:85:5d:50:43:d8:ff:84: b7:13:c7:d4:b3:33:e4:36:e5:f9:a9:0d:bb:6e:08: 4b:30:ef:62:d7:2c:17:fb:ab:52:86:53:48:86:e7: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D4:07:AF:24:38:BD:20:39:3E:46:A7:FA:7F:C1:D5:55:96:13:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 138.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:40:72:7b:a7:ed:de:e2:f7:43:67:f1:3e:f7:90:9e:db:8c: 62:bc:fe:14:00:5c:fa:bd:ce:7c:c6:48:e1:96:aa:0b:1a:38: af:90:09:57:dd:ab:fa:f2:b6:a7:1c:92:97:e4:79:19:dc:7b: 1b:f8:ef:56:41:ff:77:7a:02:45:4e:1c:e6:49:57:bd:e8:89: a2:40:c3:ec:20:5a:67:ea:ab:5a:c3:82:63:ab:d2:f1:2c:4b: c1:18:82:c5:ef:33:4b:e5:e4:86:5f:6b:f5:67:a6:14:b7:b2: 5e:e4:4a:76:2d:b3:b1:17:60:ad:ce:6f:e6:86:e8:08:27:fa: f6:52:b5:fe:42:d7:85:c5:4b:7e:2b:95:04:70:d2:ee:33:1a: d8:a9:d9:98:ab:ab:21:1d:74:0b:93:cb:c5:fe:25:79:f3:9a: 56:6f:b5:5c:4f:a1:ba:39:d5:fc:1a:76:2c:1b:c9:90:47:12: e9:95:d4:63:01:0e:ea:12:ac:9b:d7:08:bf:01:23:44:9e:da: 59:41:d3:9d:8c:fb:23:8e:32:50:24:ae:79:34:06:0c:c5:26: 7c:16:60:02:bc:07:4c:9b:70:70:a8:cf:30:29:9b:59:43:4d: a7:e5:62:79:f5:2a:e4:f1:05:8b:ff:0e:d2:84:1a:68:92:b4: 49:78:ca:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNdqV+jW+MiyPeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk OWUwYTRkZjMtOTRlNy00MDljLTkyN2QtODg5MTU1MWZlNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTOYBFMtWnybnSgaX1mnGNaIWydpHkTBMhV7 nYCMGhkIQBiaapYoPSyUb3YazGi+hUHKr0Aj1hGbaAgY4Mric4rQoYxguX4GYnbh 1AJtjoCJJH0gIDIaOraINWZp2ZEoBL2F9n2TGsCbflZThLpuq5hKLXJIcJgbVl4D 3d2Ky08Gz6HfywlzLTcAFJLzfEos+QQ1bZ101BwM4Ru0o3ho4l0wwr3vOe0f2UgT FgbHAN+DjHN4OQhstvmkTnv37brPQf+63vIwzpVhD9DIXSMUg6B7UnQAJhwI74Vd UEPY/4S3E8fUszPkNuX5qQ27bghLMO9i1ywX+6tShlNIhucXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrUB68kOL0gOT5Gp/p/wdVVlhOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJAcnun7d7i90Nn8T73kJ7bjGK8/hQAXPq9znzGSOGWqgsaOK+QCVfd q/rytqcckpfkeRncexv471ZB/3d6AkVOHOZJV73oiaJAw+wgWmfqq1rDgmOr0vEs S8EYgsXvM0vl5IZfa/VnphS3sl7kSnYts7EXYK3Ob+aG6Agn+vZStf5C14XFS34r lQRw0u4zGtip2ZirqyEddAuTy8X+JXnzmlZvtVxPobo51fwadiwbyZBHEumV1GMB DuoSrJvXCL8BI0Se2llB052M+yOOMlAkrnk0BgzFJnwWYAK8B0ybcHCozzApm1lD TaflYnn1KuTxBYv/DtKEGmiStEl4yms= -----END CERTIFICATE-----Generated at Fri Jul 24 03:13:32 2026 by rpki-client