$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa File: 38d95139-c9aa-35c6-98f7-0599639ee4a3.roa (raw, json) Hash identifier: OqLL4Yf7ch5z8q0Jbop7wwnmfLAEWs/MPxE00bVAL2U= Subject key identifier: 3C:45:83:28:37:38:D9:79:35:C5:36:46:E6:EC:E6:7B:CE:70:66:99 Certificate issuer: /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Certificate serial: 010D0C9F4328584E7E950818E6DBF4E3FA69A200 Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 162.120.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:08:18:e6:db:f4:e3:fa:69:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d84f87a7-dd57-4f8a-957a-49c2f2b24811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:ff:9f:e2:b4:0c:49:f3:1d:97:86:63:64: 2a:20:a6:8d:49:cd:df:cf:e5:f3:9d:d7:a1:7e:92: 46:9e:7a:a1:26:96:31:d4:86:31:12:db:fe:06:0c: 41:84:88:e1:c5:10:ba:f9:6d:90:83:37:bb:39:8e: 4a:45:71:36:71:5e:92:a1:73:0d:23:a5:7b:92:7f: c0:82:6f:00:53:15:a2:46:b5:53:39:e1:82:68:b3: be:92:2c:f4:05:d5:f2:06:fb:5b:7a:5d:f1:76:36: cf:9f:38:63:c5:f0:d9:f8:de:da:55:11:0e:62:0e: bf:71:fb:b0:18:e8:c2:7a:3d:df:c6:bd:c7:17:13: 33:2c:4c:a1:18:89:bc:2f:30:03:ec:2a:fd:a3:32: b9:4f:0b:4a:83:73:8c:a7:96:13:70:03:05:da:12: 3b:8e:ab:ce:ca:5d:70:ce:d6:30:48:8c:d3:35:a5: ac:31:a6:be:16:b5:77:c5:c2:b7:7e:c6:98:11:a6: 73:9e:58:f5:b8:fa:2e:7e:a7:b2:a5:6e:d4:71:aa: 2c:cb:f2:46:b9:23:8b:b6:a3:a0:57:07:07:3b:1b: b5:75:4b:ab:63:20:39:bb:70:7e:f2:72:7f:ac:a6: 77:b4:52:b1:40:9f:7e:c0:c5:5a:00:d7:fc:d4:ad: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:45:83:28:37:38:D9:79:35:C5:36:46:E6:EC:E6:7B:CE:70:66:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl X509v3 Authority Key Identifier: keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer sbgp-ipAddrBlock: critical IPv4: 162.120.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bc:d0:2e:ac:82:1f:51:28:14:7a:88:37:ef:71:f3:c9:83: b9:a0:fa:1a:3f:0f:00:fa:78:10:08:c1:5c:aa:ce:0b:42:bf: bd:90:f1:4c:12:69:4f:62:e0:ec:1f:a8:98:5b:32:43:e5:48: ca:ec:65:c7:f1:99:81:c2:0e:81:68:a3:aa:df:a8:74:4f:31: d8:df:ab:94:36:db:35:1d:6d:11:0b:ab:f4:49:29:ae:98:5c: f0:0a:0b:f8:d9:01:a9:9e:0f:0a:5a:45:d9:bf:c8:00:69:a7: d1:8e:67:c8:da:ca:b0:3f:78:12:80:62:27:f0:58:d5:c8:ba: 2c:79:93:0b:c7:f9:6d:78:71:e3:71:96:f3:73:50:95:d5:1c: 71:59:e3:37:15:86:78:ac:23:ee:28:1c:54:48:f9:53:10:e5: 1b:88:1f:24:e1:44:8c:85:9d:62:56:4e:ba:62:a8:cd:c4:50: 1f:bd:99:91:79:78:75:00:0e:f4:ae:72:6d:b8:9b:00:9b:81: 17:2c:7f:e9:49:a3:3e:0b:54:46:ee:19:8f:ea:e4:0d:9a:d5: 6b:43:40:cf:67:19:fd:7d:b1:22:0d:1d:8a:c2:ac:c6:32:ee: cd:44:02:a9:cc:c7:41:91:73:5e:ff:c5:1f:67:07:f4:35:58: a1:dd:46:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQgY5tv04/ppogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx MmM5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDg0Zjg3YTctZGQ1Ny00ZjhhLTk1N2EtNDljMmYyYjI0ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqb/n+K0DEnzHZeGY2QqIKaNSc3fz+Xzndeh fpJGnnqhJpYx1IYxEtv+BgxBhIjhxRC6+W2Qgze7OY5KRXE2cV6SoXMNI6V7kn/A gm8AUxWiRrVTOeGCaLO+kiz0BdXyBvtbel3xdjbPnzhjxfDZ+N7aVREOYg6/cfuw GOjCej3fxr3HFxMzLEyhGIm8LzAD7Cr9ozK5TwtKg3OMp5YTcAMF2hI7jqvOyl1w ztYwSIzTNaWsMaa+FrV3xcK3fsaYEaZznlj1uPoufqeypW7Ucaosy/JGuSOLtqOg VwcHOxu1dUurYyA5u3B+8nJ/rKZ3tFKxQJ9+wMVaANf81K1zHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxFgyg3ONl5NcU2Rubs5nvOcGaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5 MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvMzhkOTUxMzktYzlhYS0z NWM2LTk4ZjctMDU5OTYzOWVlNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5 NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm80C6sgh9RKBR6iDfvcfPJg7mg+ho/DwD6eBAIwVyqzgtCv72Q8UwS aU9i4OwfqJhbMkPlSMrsZcfxmYHCDoFoo6rfqHRPMdjfq5Q22zUdbRELq/RJKa6Y XPAKC/jZAameDwpaRdm/yABpp9GOZ8jayrA/eBKAYifwWNXIuix5kwvH+W14ceNx lvNzUJXVHHFZ4zcVhnisI+4oHFRI+VMQ5RuIHyThRIyFnWJWTrpiqM3EUB+9mZF5 eHUADvSucm24mwCbgRcsf+lJoz4LVEbuGY/q5A2a1WtDQM9nGf19sSINHYrCrMYy 7s1EAqnMx0GRc17/xR9nB/Q1WKHdRmk= -----END CERTIFICATE-----Generated at Fri Jul 24 02:03:52 2026 by rpki-client