$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa File: 1ddd6058-8bac-3231-9bed-094a75781a5d.roa (raw, json) Hash identifier: 8BN9dJ8K5shk9VK2p2Ev84Fcf17DqbRzTnDwz4GJlmE= Subject key identifier: E9:33:30:93:A4:EC:D1:92:EA:3B:DE:B8:9D:99:D8:B0:7D:C4:32:C0 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F31B7B8675E99495B31E8C180 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 30029 IP address blocks: 57.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:b8:67:5e:99:49:5b:31:e8:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=533e7d3d-2311-4855-870e-cb9ad381d777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:3d:2c:d6:31:16:60:d7:97:2d:f4:5d:7e: 4d:2d:e4:b6:a7:b3:59:fb:df:0c:bf:99:89:9f:ef: 4d:ce:d9:c5:8c:b1:5e:8a:35:45:b8:bf:99:63:a7: 7d:cd:f0:26:b5:4e:7b:e8:d6:f8:47:2f:53:5d:cf: 75:b4:72:05:91:e7:1d:4a:e6:7b:b8:cf:ff:10:66: 36:23:03:f7:ce:b3:0d:f0:14:de:27:8e:26:aa:d2: 70:48:5e:47:89:d4:68:8b:6f:c5:42:d9:3a:c8:69: d6:cc:77:14:ad:b5:6c:b0:32:6e:68:6e:54:67:5a: 05:68:c9:03:98:a0:70:d9:29:cb:fa:d9:d1:67:12: 6f:cc:48:d8:a3:77:a4:57:b2:44:e3:1f:16:0b:47: 7d:30:5c:6e:bf:86:e4:c6:6e:39:7d:68:57:34:f8: a9:96:3f:ec:6c:6b:98:3d:4f:64:79:c0:fb:ef:7b: c8:91:b5:5f:d9:e2:f2:b3:31:03:5b:8e:a4:ad:28: ae:89:a5:b1:f2:7d:4c:19:33:84:96:ce:37:4e:d3: a9:f1:4d:bd:83:b9:53:d1:64:ae:cb:9e:6e:d7:cf: 9f:2e:43:93:0b:85:37:be:59:68:11:9e:49:c7:99: e3:87:3d:17:4c:5e:40:d4:f6:41:a0:0a:f8:51:62: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:33:30:93:A4:EC:D1:92:EA:3B:DE:B8:9D:99:D8:B0:7D:C4:32:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 57.138.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ce:35:e8:46:c4:87:e2:a2:64:a7:13:41:84:7a:25:64:ec: 78:a2:2f:73:20:a9:67:30:cd:55:e4:14:64:73:60:c7:43:ae: 3c:10:69:3e:97:57:20:80:29:7d:7a:f3:28:ae:2c:69:46:7c: ef:4a:69:b4:98:d8:b8:43:32:07:5b:f3:43:08:b4:76:6d:26: 36:e6:5b:72:75:f6:bc:a7:5c:cf:0b:d4:1b:b2:0f:ef:24:19: e1:1c:89:68:49:b3:62:09:0e:39:4f:2c:18:a0:81:b6:9c:b6: 39:37:99:74:d4:a2:a8:65:7f:d8:e2:ec:e2:a1:bd:5e:81:49: 43:81:2c:e2:56:18:61:c8:5f:f0:ac:72:e3:d0:53:39:70:a9: 3b:20:5d:19:6b:32:c6:7b:16:70:1d:fd:02:7c:4c:9d:6a:37: b9:7d:b3:64:2c:d4:a4:6b:03:31:66:a3:19:17:51:d3:97:ae: 4b:f0:0b:15:33:34:2b:d7:ff:90:f2:8c:5f:57:3b:84:fa:82: ce:a1:a3:34:e3:54:ce:a3:d3:87:50:40:0a:07:21:08:4b:62: 79:e1:38:d2:c4:ce:ea:c4:73:ff:10:90:db:02:da:b9:6e:de: d6:50:07:55:5a:b1:d1:e9:39:c2:29:78:61:20:7f:b4:9a:21: 14:cc:fd:cd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8xt7hnXplJWzHowYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NTMzZTdkM2QtMjMxMS00ODU1LTg3MGUtY2I5YWQzODFkNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiag9LNYxFmDXly30XX5NLeS2p7NZ+98Mv5mJ n+9NztnFjLFeijVFuL+ZY6d9zfAmtU576Nb4Ry9TXc91tHIFkecdSuZ7uM//EGY2 IwP3zrMN8BTeJ44mqtJwSF5HidRoi2/FQtk6yGnWzHcUrbVssDJuaG5UZ1oFaMkD mKBw2SnL+tnRZxJvzEjYo3ekV7JE4x8WC0d9MFxuv4bkxm45fWhXNPiplj/sbGuY PU9kecD773vIkbVf2eLyszEDW46krSiuiaWx8n1MGTOEls43TtOp8U29g7lT0WSu y55u18+fLkOTC4U3vlloEZ5Jx5njhz0XTF5A1PZBoAr4UWKftQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOkzMJOk7NGS6jveuJ2Z2LB9xDLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMWRkZDYwNTgtOGJhYy0z MjMxLTliZWQtMDk0YTc1NzgxYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOYowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARM416EbEh+KiZKcTQYR6JWTseKIvcyCpZzDNVeQUZHNgx0OuPBBpPpdX IIApfXrzKK4saUZ870pptJjYuEMyB1vzQwi0dm0mNuZbcnX2vKdczwvUG7IP7yQZ 4RyJaEmzYgkOOU8sGKCBtpy2OTeZdNSiqGV/2OLs4qG9XoFJQ4Es4lYYYchf8Kxy 49BTOXCpOyBdGWsyxnsWcB39AnxMnWo3uX2zZCzUpGsDMWajGRdR05euS/ALFTM0 K9f/kPKMX1c7hPqCzqGjNONUzqPTh1BACgchCEtieeE40sTO6sRz/xCQ2wLauW7e 1lAHVVqx0ek5wil4YSB/tJohFMz9zQ== -----END CERTIFICATE-----Generated at Tue Sep 29 17:57:46 2026 by rpki-client