$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa File: de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa (raw, json) Hash identifier: LP71M2HIQ5aoVybqPIV4c3e/gtccuzrDAsKDRAEikO8= Subject key identifier: E0:DD:12:A3:56:5F:78:C5:BB:24:D1:39:C2:9B:E5:F0:5E:C5:F7:67 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F497376C09741C0F1AE0C5A40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 138.199.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:76:c0:97:41:c0:f1:ae:0c:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=502df5a0-2632-4b8e-8066-be763689e9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:d4:31:ed:12:a7:cf:46:1a:6a:bc:6f:61: 8a:26:b0:60:ad:10:84:20:a6:3b:44:5d:8e:04:75: bf:24:5c:ec:74:3f:79:48:89:6c:21:8d:80:05:fc: e1:df:e1:5b:ba:1f:45:24:8d:b0:af:07:3e:c8:70: 56:e4:62:9d:21:08:aa:6b:5d:25:c1:25:be:b7:82: d5:b6:ac:cf:b6:43:78:6d:41:26:6b:c0:32:07:4d: aa:ed:fc:c5:ad:8e:0f:fd:8e:b9:9a:33:99:17:12: 49:32:01:11:12:e9:63:1e:75:54:50:17:e5:f9:64: 93:8f:08:e0:9d:6d:e1:2a:4d:28:e7:14:b3:05:d4: d5:df:9d:39:f7:30:e0:ad:c9:f5:1a:97:59:a1:7d: b2:0e:f6:53:0a:5b:78:d3:7e:32:a0:1d:67:e4:dd: e1:27:57:bc:01:59:ec:22:2b:6b:99:a3:5a:52:93: d8:70:a8:49:47:4a:de:bf:26:d3:87:36:d7:e9:c4: 62:5d:d1:bf:92:9b:22:8f:42:5f:17:4c:07:10:f2: 83:f3:f1:24:09:06:a9:4e:9f:d0:cf:45:b0:4e:f0: 4f:29:c2:05:81:53:da:45:8d:25:5d:62:57:e5:d5: 08:5d:e1:19:76:6a:80:07:73:d3:1e:d7:d0:2d:a4: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:12:A3:56:5F:78:C5:BB:24:D1:39:C2:9B:E5:F0:5E:C5:F7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:23:f0:9d:d4:29:f3:20:f1:4a:f4:50:fa:53:bf:ca:da:24: 9f:c5:42:f8:28:2f:e4:eb:35:d6:22:b2:ba:ef:79:67:b1:5d: 15:3d:52:47:b5:f1:0d:42:cc:90:74:c0:1e:43:11:8e:6d:ed: db:3a:19:4f:e4:31:85:88:88:45:07:50:ec:48:ce:a9:6f:ce: 24:f1:b4:e3:71:b6:1f:23:05:d2:e9:09:5b:97:58:82:f4:ed: cb:e4:2e:0b:dc:7a:8b:88:33:8a:1a:d5:15:de:b9:0d:17:da: 9f:ee:69:87:4c:d1:13:c6:28:dd:63:8a:d0:d8:9f:34:dd:09: ab:42:7d:74:05:fb:43:d1:83:a8:93:18:3a:af:7a:c7:da:c0: c5:95:d5:40:cf:61:df:47:23:7c:e1:bb:d9:7d:df:11:69:d1: 51:00:70:24:5d:1a:ac:42:0f:68:ab:b6:bb:fc:77:67:20:33: 8c:71:06:23:50:14:a9:e9:13:2e:ca:cf:df:0c:e1:43:e3:75: 5e:85:3d:a1:3b:ea:92:9c:d0:1a:c1:a1:77:15:af:d7:89:df: 64:45:ac:91:be:6f:f0:44:ac:a3:86:85:b0:cc:6f:be:a6:1f: 32:8f:6a:b5:ec:2b:ba:ab:d6:72:e4:7d:3f:9d:68:07:db:84: f4:98:56:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3bAl0HA8a4MWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTAyZGY1YTAtMjYzMi00YjhlLTgwNjYtYmU3NjM2ODllOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk3UMe0Sp89GGmq8b2GKJrBgrRCEIKY7RF2O BHW/JFzsdD95SIlsIY2ABfzh3+Fbuh9FJI2wrwc+yHBW5GKdIQiqa10lwSW+t4LV tqzPtkN4bUEma8AyB02q7fzFrY4P/Y65mjOZFxJJMgEREuljHnVUUBfl+WSTjwjg nW3hKk0o5xSzBdTV35059zDgrcn1GpdZoX2yDvZTClt4034yoB1n5N3hJ1e8AVns IitrmaNaUpPYcKhJR0revybThzbX6cRiXdG/kpsij0JfF0wHEPKD8/EkCQapTp/Q z0WwTvBPKcIFgVPaRY0lXWJX5dUIXeEZdmqAB3PTHtfQLaRy/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODdEqNWX3jFuyTROcKb5fBexfdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGU3ZmNiZjctZDVmMy0z NzRlLWExNDktMTQzOWNlNmMzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0j8J3UKfMg8Ur0UPpTv8raJJ/FQvgoL+TrNdYisrrveWexXRU9Uke1 8Q1CzJB0wB5DEY5t7ds6GU/kMYWIiEUHUOxIzqlvziTxtONxth8jBdLpCVuXWIL0 7cvkLgvceouIM4oa1RXeuQ0X2p/uaYdM0RPGKN1jitDYnzTdCatCfXQF+0PRg6iT GDqvesfawMWV1UDPYd9HI3zhu9l93xFp0VEAcCRdGqxCD2irtrv8d2cgM4xxBiNQ FKnpEy7Kz98M4UPjdV6FPaE76pKc0BrBoXcVr9eJ32RFrJG+b/BErKOGhbDMb76m HzKParXsK7qr1nLkfT+daAfbhPSYVgk= -----END CERTIFICATE-----Generated at Fri Oct 2 10:20:45 2026 by rpki-client