$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa File: 17f45e08-575d-331e-8082-276aa8342fa3.roa (raw, json) Hash identifier: 2w41lS34Arq3unrv8GjYINb8qENdoifkV6yGRIpRhw4= Subject key identifier: 28:F0:D5:85:92:6C:65:57:0A:38:CE:1C:A3:D7:F5:30:9F:9C:75:17 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EBA1BBE34D9E8E24E3100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:ba:1b:be:34:d9:e8:e2:4e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=e71430f5-fd1a-446d-93d5-e79afd599413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:68:19:15:1b:76:fe:f8:d6:8c:19:44:40: 64:00:45:f0:c7:72:ad:28:5f:ff:69:b4:18:4c:9a: 0d:61:fd:ea:c8:3d:1b:3d:68:63:2d:9b:87:cc:a6: 28:52:ea:a8:da:0b:98:7c:ad:92:49:8e:ab:16:5c: e8:58:3c:be:f2:92:8e:4a:be:db:67:14:8f:39:46: f8:53:0b:fe:4f:5c:4e:53:85:9e:ce:89:36:b5:71: 8a:dc:97:97:22:34:ad:88:75:3f:af:56:c5:ee:68: d4:7b:25:ae:0a:39:e3:69:1f:b1:6f:93:fe:1d:4a: 1b:bd:eb:e5:ca:fe:78:6d:f4:f4:83:22:73:23:0b: ba:14:f0:80:51:3d:e4:0b:6d:56:c3:40:ec:65:d2: 0c:c3:10:7a:30:ac:60:8f:18:92:0d:c0:e8:2b:e4: bb:38:5f:08:17:88:e3:6c:c3:1d:9e:ba:5b:eb:e5: 9e:73:eb:22:15:c8:e1:7f:4f:9b:7d:b9:d7:e3:0f: f4:cb:99:da:b0:47:1f:23:d1:a0:46:87:02:ae:42: 22:83:02:2b:cd:b3:31:51:ed:f1:0f:dd:8d:49:56: 94:ab:d9:f5:a8:8a:c1:e9:1e:b8:75:5f:31:0b:0d: 12:dd:4c:3b:6e:eb:03:44:a5:1e:2d:b9:1b:ee:94: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:D5:85:92:6C:65:57:0A:38:CE:1C:A3:D7:F5:30:9F:9C:75:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bf:a1:af:e0:22:05:97:31:9b:8c:40:cf:9e:c3:66:71:46: 8e:30:29:53:43:cb:fe:a1:d6:e0:58:b5:b2:52:fa:8b:10:ef: c1:ad:29:cb:05:74:87:f1:ef:0b:18:98:35:17:6b:df:89:e6: 32:35:b8:ad:92:db:69:62:7b:e9:18:db:5f:35:9e:92:58:a2: 40:1a:8e:19:ed:ee:0a:75:ca:ea:d6:b6:ed:92:c6:12:70:ba: c3:66:88:cd:d5:ae:8c:4b:0e:b1:a1:d3:8c:dd:4a:07:01:ae: 82:91:dd:c9:c6:d2:fd:a6:e6:c8:eb:f1:8b:ba:72:35:73:4c: 62:23:9b:10:69:bd:c2:3c:66:af:65:70:da:ae:4f:d0:1d:61: 8a:d2:e6:6d:95:7c:53:f9:25:e7:51:0a:45:fe:f0:5d:7d:a4: 55:43:23:94:fa:40:26:29:c3:87:d5:3d:03:1d:b6:07:12:69: a3:0d:2a:08:c0:05:12:ba:3c:2a:bc:00:97:1a:ed:6c:d2:d2: 43:c7:bd:d4:26:95:64:12:9b:08:ed:30:dc:8e:d5:ab:68:8e: 02:25:24:1e:4d:91:74:56:cd:cc:5f:df:66:6e:bc:e2:a1:35: 08:31:3b:78:54:fe:55:82:ad:30:fb:3d:26:9a:24:04:b5:7e: 9e:33:55:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vProbvjTZ6OJOMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZTcxNDMwZjUtZmQxYS00NDZkLTkzZDUtZTc5YWZkNTk5NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08FoGRUbdv741owZREBkAEXwx3KtKF//abQY TJoNYf3qyD0bPWhjLZuHzKYoUuqo2guYfK2SSY6rFlzoWDy+8pKOSr7bZxSPOUb4 Uwv+T1xOU4Wezok2tXGK3JeXIjStiHU/r1bF7mjUeyWuCjnjaR+xb5P+HUobvevl yv54bfT0gyJzIwu6FPCAUT3kC21Ww0DsZdIMwxB6MKxgjxiSDcDoK+S7OF8IF4jj bMMdnrpb6+Wec+siFcjhf0+bfbnX4w/0y5nasEcfI9GgRocCrkIigwIrzbMxUe3x D92NSVaUq9n1qIrB6R64dV8xCw0S3Uw7busDRKUeLbkb7pRhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjw1YWSbGVXCjjOHKPX9TCfnHUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTdmNDVlMDgtNTc1ZC0z MzFlLTgwODItMjc2YWE4MzQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+/oa/gIgWXMZuMQM+ew2ZxRo4wKVNDy/6h1uBYtbJS+osQ78GtKcsF dIfx7wsYmDUXa9+J5jI1uK2S22lie+kY2181npJYokAajhnt7gp1yurWtu2SxhJw usNmiM3VroxLDrGh04zdSgcBroKR3cnG0v2m5sjr8Yu6cjVzTGIjmxBpvcI8Zq9l cNquT9AdYYrS5m2VfFP5JedRCkX+8F19pFVDI5T6QCYpw4fVPQMdtgcSaaMNKgjA BRK6PCq8AJca7WzS0kPHvdQmlWQSmwjtMNyO1atojgIlJB5NkXRWzcxf32ZuvOKh NQgxO3hU/lWCrTD7PSaaJAS1fp4zVag= -----END CERTIFICATE-----Generated at Fri Jul 24 07:57:39 2026 by rpki-client