$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa File: 1547736e-3c24-37d0-88de-b5cdfe869e96.roa (raw, json) Hash identifier: xcxNGtquwZfZe/vgertRTY6O6LyzLf01foorzfzJUBU= Subject key identifier: 11:EF:45:2C:1E:BB:5A:76:97:87:A5:C6:DB:37:BC:52:24:F4:99:52 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F6C1EFF9C9DEF6A92B100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 138.1.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6c:1e:ff:9c:9d:ef:6a:92:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=0ea9448a-1110-42db-944f-2aa6099556a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:f0:3d:45:9d:f1:5b:f1:03:1c:35:d7:97: b4:46:97:7b:4f:47:8a:c1:6e:02:0b:be:89:4c:e3: 2d:d6:8c:96:15:40:04:44:8f:3c:1b:fc:06:68:e0: 0b:77:75:40:fa:bb:f5:75:7e:55:70:80:6d:0f:9f: cb:6b:ff:b0:b0:16:8a:80:a6:57:0e:27:60:44:ee: 1b:5e:b2:a3:b5:1f:c8:27:a6:60:57:03:c6:2b:68: 05:83:5c:e5:fd:7b:c9:05:ff:ef:41:a5:f4:06:1d: ae:30:74:dd:4e:40:0c:ea:c0:12:03:8c:2e:79:9d: 54:e8:65:ba:30:15:1a:b2:4f:0d:2b:41:41:f2:e5: eb:31:8f:d3:82:ec:96:9e:01:97:10:e5:99:46:11: 82:da:3b:d6:cc:8c:3e:92:ab:53:c2:fa:e9:66:63: 50:55:b7:e2:b1:43:42:64:3e:7f:f9:e4:cf:9d:cf: 35:62:26:a8:56:bf:9f:d8:da:fd:f3:99:3a:30:ed: 3a:59:5d:d0:8a:88:48:09:34:0a:fd:03:21:cb:6b: 54:42:0c:a7:8d:b5:d0:70:c2:34:7c:d7:64:3f:83: 5c:c0:bb:95:5d:db:ce:e3:28:5f:6c:7a:62:c2:fe: ad:25:15:6d:b7:12:13:56:2d:74:6f:26:a7:c0:dc: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:45:2C:1E:BB:5A:76:97:87:A5:C6:DB:37:BC:52:24:F4:99:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1547736e-3c24-37d0-88de-b5cdfe869e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9a:b1:08:8a:0a:e4:e6:9d:dd:15:b5:70:da:73:67:6d:8c: 41:0b:a0:40:7b:54:6e:d6:9e:90:76:7d:03:22:59:34:03:ee: ae:47:20:95:74:a2:99:5a:ec:84:b8:6b:99:cf:08:24:02:6d: 79:00:fb:c0:ac:c8:c4:33:6e:3a:a8:73:f6:7d:3c:9a:bf:4c: 67:f8:40:0c:1e:2c:b6:bb:58:cc:2d:0b:af:24:55:33:60:db: aa:b7:b6:74:cc:58:9f:c1:24:04:5a:32:d7:f8:36:16:10:08: 4d:bc:07:02:0a:7b:60:c2:07:f9:8b:bb:4b:1e:94:99:93:9e: 59:88:f2:c4:40:b6:6c:c6:10:9d:fa:f3:9f:bf:47:82:cc:92: 79:8f:f4:b5:74:98:60:38:83:de:e4:8f:5d:2d:ca:07:a9:ca: 9b:a2:2f:9e:c6:c7:09:46:b1:29:8c:7d:53:5e:95:80:8f:18: fa:a3:fb:4c:b8:2d:80:ea:f6:c5:a7:24:64:9a:1e:7a:9d:01: e7:e7:df:b9:e3:46:83:2e:4d:ed:5d:7f:a6:28:56:d4:0f:e5: 68:da:df:ed:8b:cb:1c:ae:a2:4a:d9:1d:ad:e6:69:e2:52:0a: d9:62:ef:d1:87:6a:fe:6a:0c:b8:e2:d5:46:05:b2:58:da:05: 2d:cb:c8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn2we/5yd72qSsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk MGVhOTQ0OGEtMTExMC00MmRiLTk0NGYtMmFhNjA5OTU1NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPwPUWd8VvxAxw115e0Rpd7T0eKwW4CC76J TOMt1oyWFUAERI88G/wGaOALd3VA+rv1dX5VcIBtD5/La/+wsBaKgKZXDidgRO4b XrKjtR/IJ6ZgVwPGK2gFg1zl/XvJBf/vQaX0Bh2uMHTdTkAM6sASA4wueZ1U6GW6 MBUask8NK0FB8uXrMY/TguyWngGXEOWZRhGC2jvWzIw+kqtTwvrpZmNQVbfisUNC ZD5/+eTPnc81YiaoVr+f2Nr985k6MO06WV3QiohICTQK/QMhy2tUQgynjbXQcMI0 fNdkP4NcwLuVXdvO4yhfbHpiwv6tJRVttxITVi10byanwNxvaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHvRSweu1p2l4elxts3vFIk9JlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTU0NzczNmUtM2MyNC0z N2QwLTg4ZGUtYjVjZGZlODY5ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKasQiKCuTmnd0VtXDac2dtjEELoEB7VG7WnpB2fQMiWTQD7q5HIJV0 opla7IS4a5nPCCQCbXkA+8CsyMQzbjqoc/Z9PJq/TGf4QAweLLa7WMwtC68kVTNg 26q3tnTMWJ/BJARaMtf4NhYQCE28BwIKe2DCB/mLu0selJmTnlmI8sRAtmzGEJ36 85+/R4LMknmP9LV0mGA4g97kj10tygepypuiL57GxwlGsSmMfVNelYCPGPqj+0y4 LYDq9sWnJGSaHnqdAefn37njRoMuTe1df6YoVtQP5Wja3+2LyxyuokrZHa3maeJS Ctli79GHav5qDLji1UYFsljaBS3LyEE= -----END CERTIFICATE-----Generated at Fri Jul 24 13:34:34 2026 by rpki-client