$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa File: 00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa (raw, json) Hash identifier: QNdrJuVXX3hcOIyCIoL+A708ymlGu1mpWeRUsvzqwcw= Subject key identifier: AC:AD:C5:2E:B8:44:9A:25:88:57:AB:F2:C3:48:9C:C9:70:EF:31:8D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F6A0908CFB4FA374B5200 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 138.1.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6a:09:08:cf:b4:fa:37:4b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=f72d6011-58d9-4086-bf29-5abcc85995b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:73:01:73:29:f4:25:95:be:a8:9a:e2:fc: cb:f4:ce:4d:c1:5b:e5:75:7b:ea:61:af:76:f5:3b: c4:0f:9f:9a:49:dc:c5:a5:7a:40:17:90:99:4a:5c: cf:6d:5e:ea:c8:31:18:1d:56:be:21:4a:e1:2c:c9: af:3f:75:63:1b:57:08:54:27:fd:36:32:52:1d:9b: ad:c6:0e:1f:74:66:5b:95:c2:f5:d3:c5:da:3c:68: a5:70:50:2b:98:38:18:9b:5c:e3:14:04:21:3f:01: c1:bb:8f:a7:c3:18:64:ef:be:11:3c:ed:3e:29:19: cc:b4:a6:f8:1d:90:94:a6:7e:6a:f6:9c:f3:39:0c: 5a:dc:e3:3e:20:9e:d4:43:a7:4f:6f:e3:c4:2a:88: b3:98:35:33:d3:9b:85:ba:96:19:e7:81:6c:11:a2: 0b:ed:5b:5a:d5:54:eb:3d:53:cf:c8:9f:57:cb:9c: f2:28:0e:1a:04:18:92:ec:b5:07:ee:83:41:9e:a3: 4b:c9:6e:c2:92:67:a4:19:90:ed:06:d7:cb:4b:23: 7c:12:ca:9b:58:2c:97:bf:0c:ca:6e:0e:a8:1e:53: d3:b5:53:66:0e:92:50:64:2d:dc:ba:43:d4:0b:0e: b2:1a:b4:0e:4a:d2:1b:68:90:f9:d1:2b:0b:bb:f0: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:C5:2E:B8:44:9A:25:88:57:AB:F2:C3:48:9C:C9:70:EF:31:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5a:31:41:2b:18:30:68:4d:95:ca:b9:18:8e:95:69:fb:62: 91:94:5a:3c:1e:d0:77:db:bf:b9:55:43:6d:66:02:4e:21:ba: fe:58:d0:22:05:f3:83:71:a1:b5:d3:4f:ee:06:93:41:0b:8a: 77:2e:cd:2d:01:b3:0e:5a:84:30:ee:75:53:c1:ee:32:4a:90: 7d:b6:5e:aa:61:f1:84:b3:3f:b2:81:49:43:37:67:c2:17:51: 18:e6:5d:9d:2d:44:de:8d:e0:71:e1:3f:3d:10:e5:16:ae:5e: 94:a3:a2:59:a3:fd:ee:40:60:aa:8c:fa:5a:a8:75:0c:da:8e: 35:95:be:6c:a1:cf:48:a1:17:61:98:68:13:f9:3d:49:8e:84: fd:f7:c6:04:78:90:f4:f3:03:df:92:f4:a6:82:ba:fc:ae:0a: ac:75:f9:72:dc:8e:ea:a5:c7:45:96:cc:aa:47:47:38:5c:ea: 12:ca:77:21:6c:14:39:3a:84:5b:56:c8:a5:9d:6e:13:41:b3: 79:62:f0:a6:89:e7:f4:99:2b:94:18:f8:5c:3b:df:bc:45:81: 07:c2:21:ce:7a:66:51:5b:37:06:18:3d:29:75:b2:d0:00:63: 51:aa:68:a8:f3:05:6e:f1:09:fe:16:f0:85:d2:e2:1c:57:83: 3c:65:b9:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn2oJCM+0+jdLUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZjcyZDYwMTEtNThkOS00MDg2LWJmMjktNWFiY2M4NTk5NWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU5zAXMp9CWVvqia4vzL9M5NwVvldXvqYa92 9TvED5+aSdzFpXpAF5CZSlzPbV7qyDEYHVa+IUrhLMmvP3VjG1cIVCf9NjJSHZut xg4fdGZblcL108XaPGilcFArmDgYm1zjFAQhPwHBu4+nwxhk774RPO0+KRnMtKb4 HZCUpn5q9pzzOQxa3OM+IJ7UQ6dPb+PEKoizmDUz05uFupYZ54FsEaIL7Vta1VTr PVPPyJ9Xy5zyKA4aBBiS7LUH7oNBnqNLyW7CkmekGZDtBtfLSyN8EsqbWCyXvwzK bg6oHlPTtVNmDpJQZC3cukPUCw6yGrQOStIbaJD50SsLu/AOGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKytxS64RJoliFer8sNInMlw7zGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDBkMGI2YTItMmI4Ny0z MWY5LWEzMzctM2EzZGM1NjQ3ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDigEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhaMUErGDBoTZXKuRiOlWn7YpGUWjwe0Hfbv7lVQ21mAk4huv5Y0CIF 84NxobXTT+4Gk0ELincuzS0Bsw5ahDDudVPB7jJKkH22Xqph8YSzP7KBSUM3Z8IX URjmXZ0tRN6N4HHhPz0Q5RauXpSjolmj/e5AYKqM+lqodQzajjWVvmyhz0ihF2GY aBP5PUmOhP33xgR4kPTzA9+S9KaCuvyuCqx1+XLcjuqlx0WWzKpHRzhc6hLKdyFs FDk6hFtWyKWdbhNBs3li8KaJ5/SZK5QY+Fw737xFgQfCIc56ZlFbNwYYPSl1stAA Y1GqaKjzBW7xCf4W8IXS4hxXgzxlufw= -----END CERTIFICATE-----Generated at Fri Jul 24 03:53:34 2026 by rpki-client