$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ef967cdc-4376-38ae-86dd-fc3297eab736.roa File: ef967cdc-4376-38ae-86dd-fc3297eab736.roa (raw, json) Hash identifier: tbyNBs1Kcsa1oXkewFceq96ba4xwTTLHvO9NMbM1Ljs= Subject key identifier: EC:11:0D:00:CC:EC:BE:76:0E:8B:F3:54:72:78:35:3A:C8:9F:18:98 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584E8F5501F3749A3621EAC22300 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ef967cdc-4376-38ae-86dd-fc3297eab736.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 400662 IP address blocks: 57.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:01:f3:74:9a:36:21:ea:c2:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=e2480299-fa9e-4d6c-bbf1-a89d3240b3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:d6:78:a9:c7:f5:18:4a:a1:d6:ba:7e:d5: 9d:32:c7:de:4e:79:9a:19:f0:5c:16:e3:ed:88:3f: ac:1a:c6:cd:95:45:6f:1c:18:3c:b2:cb:9a:ff:0a: 4a:e3:6b:cc:53:b2:af:40:67:1a:67:49:b8:61:06: 7b:9f:3c:d1:34:c6:05:a3:c4:0c:fa:a4:07:93:74: f3:d8:53:0c:a5:60:9e:69:3c:fb:ba:f7:c4:ed:51: a8:cf:5e:07:f2:7b:1b:ac:bf:87:28:e8:a2:04:c5: f6:07:d4:aa:47:51:9e:00:ac:20:4b:30:12:1d:ca: 14:5a:f8:30:3d:61:fc:a1:e6:78:7e:f9:a4:55:0c: ce:89:af:50:23:00:87:04:3a:b1:87:96:9b:f5:53: 9e:f5:eb:3f:56:4c:6c:bd:df:ca:4f:23:87:a5:2a: 14:b8:d3:c8:e4:d2:38:d9:b0:83:25:3e:b1:5b:f9: 18:b5:fd:d8:d7:51:d4:42:2e:03:2a:33:24:49:83: c6:e1:86:61:53:07:a3:56:61:5f:0b:b9:47:d9:84: 81:49:34:71:a0:43:9a:30:53:d9:71:12:af:dc:18: e7:cf:6e:d8:6a:90:f3:8f:a2:55:0e:f5:4a:03:ae: 13:cc:56:7b:37:f9:5d:4d:b1:ef:83:38:fd:86:0e: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:11:0D:00:CC:EC:BE:76:0E:8B:F3:54:72:78:35:3A:C8:9F:18:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ef967cdc-4376-38ae-86dd-fc3297eab736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 57.138.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fc:c2:97:e7:c3:8c:53:a2:c6:8d:57:48:a9:c6:db:67:9e: 6c:e9:d6:f5:1d:3a:8c:3d:c8:c9:93:4a:75:e1:2c:0b:3e:2f: 79:fc:72:d5:24:34:7e:9b:43:c3:28:7a:1b:b1:62:02:a8:5c: 11:0f:0c:2b:08:8b:0b:d1:a2:5d:db:d1:7f:89:cf:ba:33:82: bb:1f:68:cd:88:f9:ee:e4:c8:60:4c:7a:8c:d0:4b:ce:7b:37: 04:ab:25:68:52:8b:c1:70:c7:51:bf:fa:85:b2:d0:0e:db:95: 48:fd:f0:24:29:48:31:a2:aa:9b:64:f9:0b:d7:22:cb:26:77: 28:8b:a9:0b:25:76:7f:21:e4:bc:69:ec:c4:c7:4b:1e:f5:f8: 8f:28:a2:59:67:c8:b3:39:6d:e1:5e:1c:d2:86:47:b0:eb:1d: 38:80:29:b6:35:eb:da:88:1b:2d:fc:e2:af:1f:3c:11:3e:f0: c7:46:2e:1f:75:1f:2a:1e:03:7b:81:c4:dd:42:20:88:75:2e: 5d:2d:0e:19:30:e6:79:f5:db:a7:3b:83:0f:77:60:46:4a:ae: 34:0f:af:85:b6:ba:f0:dc:1a:24:96:27:cb:2b:50:1a:0e:0d: 80:1f:71:6f:50:fe:6a:b8:56:59:e1:ec:09:0a:7d:37:89:33: 30:43:bc:45 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6PVQHzdJo2IerCIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZTI0ODAyOTktZmE5ZS00ZDZjLWJiZjEtYTg5ZDMyNDBiM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaTWeKnH9RhKoda6ftWdMsfeTnmaGfBcFuPt iD+sGsbNlUVvHBg8ssua/wpK42vMU7KvQGcaZ0m4YQZ7nzzRNMYFo8QM+qQHk3Tz 2FMMpWCeaTz7uvfE7VGoz14H8nsbrL+HKOiiBMX2B9SqR1GeAKwgSzASHcoUWvgw PWH8oeZ4fvmkVQzOia9QIwCHBDqxh5ab9VOe9es/Vkxsvd/KTyOHpSoUuNPI5NI4 2bCDJT6xW/kYtf3Y11HUQi4DKjMkSYPG4YZhUwejVmFfC7lH2YSBSTRxoEOaMFPZ cRKv3Bjnz27YapDzj6JVDvVKA64TzFZ7N/ldTbHvgzj9hg5LjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOwRDQDM7L52DovzVHJ4NTrInxiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvZWY5NjdjZGMtNDM3Ni0z OGFlLTg2ZGQtZmMzMjk3ZWFiNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOYowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAE/zCl+fDjFOixo1XSKnG22eebOnW9R06jD3IyZNKdeEsCz4vefxy1SQ0 fptDwyh6G7FiAqhcEQ8MKwiLC9GiXdvRf4nPujOCux9ozYj57uTIYEx6jNBLzns3 BKslaFKLwXDHUb/6hbLQDtuVSP3wJClIMaKqm2T5C9ciyyZ3KIupCyV2fyHkvGns xMdLHvX4jyiiWWfIszlt4V4c0oZHsOsdOIAptjXr2ogbLfzirx88ET7wx0YuH3Uf Kh4De4HE3UIgiHUuXS0OGTDmefXbpzuDD3dgRkquNA+vhba68NwaJJYnyytQGg4N gB9xb1D+arhWWeHsCQp9N4kzMEO8RQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:23:10 2026 by rpki-client