$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa File: 2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa (raw, json) Hash identifier: mq/vw1aFYjwsQ6EE3m5TNEQmC79RE/WURApEGsO/fo8= Subject key identifier: EE:46:18:C8:2D:09:20:8F:B2:45:E0:60:DC:8F:88:EC:6E:59:60:50 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EC75A03120E87E2DC12C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:c7:5a:03:12:0e:87:e2:dc:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=01dd4ab3-2a93-4b87-b1dc-806faf29fb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:38:05:c4:91:66:c1:bf:99:52:94:3c:49: 7d:98:3d:5d:20:7e:fa:45:46:5e:98:28:81:31:f1: 2b:6f:1b:47:c4:b6:2a:ab:52:7b:23:6b:5c:1d:0b: 38:2c:d3:0e:b5:16:c6:43:21:1e:0e:ca:50:82:6a: 70:0b:fa:1f:c4:6d:1f:4a:f9:29:a8:d8:1d:1a:45: 7c:c8:68:29:1d:81:2f:9c:2a:0d:e0:2f:8a:fb:8d: 34:9e:58:4c:9d:d9:58:a5:96:65:ed:0d:68:a3:90: ac:cc:7d:98:3f:7b:93:22:a4:c9:0c:3b:23:94:bd: 87:6b:c1:f7:b5:ce:66:76:b2:ba:c0:0e:be:ac:58: 08:2c:df:a9:4e:a2:f9:91:59:39:fb:b2:6d:05:99: ce:82:af:54:92:be:92:17:38:a9:05:61:54:8f:5a: 83:de:60:1d:9d:4c:5a:ff:5f:6d:e2:6b:68:a0:00: 9e:73:43:6e:ce:ed:30:82:a0:e2:58:f4:d9:a8:73: 8f:58:3d:d7:fc:73:34:32:c8:c2:4c:fc:35:da:8d: e4:42:82:81:29:04:a9:57:02:63:ad:aa:bd:a4:0f: 1e:c0:12:4c:af:02:21:b2:c3:a3:05:32:05:ee:7d: 6f:e1:8b:da:40:e0:a6:91:07:d0:6e:63:99:ad:03: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:18:C8:2D:09:20:8F:B2:45:E0:60:DC:8F:88:EC:6E:59:60:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:dc:89:9b:80:aa:6b:04:9c:6c:f9:fa:fb:16:25:d1:4b:96: 7e:ba:cf:90:d4:81:1a:95:4a:56:0a:9d:e8:a2:f0:52:48:ea: 40:58:ea:9e:65:54:9e:85:d0:9b:c3:a3:20:9c:2a:ed:ea:f2: 0d:8b:44:a5:19:9a:39:ec:aa:1f:fe:24:57:97:26:f4:16:dd: 01:33:6b:0d:8b:86:04:74:83:0f:fc:38:f8:22:f3:6f:ca:b0: e1:e9:74:9a:08:ff:2b:55:0e:6b:32:69:19:06:86:90:e2:e1: f8:ad:0b:9b:5b:a7:e6:50:2f:d3:d9:64:1c:05:36:63:ee:04: 31:36:6f:26:c3:2c:e0:0f:c3:89:4b:74:f0:94:53:99:52:de: 1d:a7:60:3b:88:94:d3:f6:c4:38:fa:0d:5c:ad:ec:1e:f9:0b: b0:ee:87:df:d8:6b:11:0b:cb:a0:ce:a2:92:71:f4:00:3a:68: 29:dc:3e:f1:68:df:d4:59:4e:be:f5:6b:15:a1:0e:1b:52:fc: e5:cc:c1:af:a8:b8:d6:d8:6e:64:7a:20:94:a2:e8:b8:94:84: b5:9f:f4:cb:0a:22:55:22:f8:07:3e:b1:5f:af:ed:59:02:f4: c6:12:ba:11:37:c9:0c:5c:26:d4:1c:fa:cc:13:eb:06:be:dd: a4:5d:a2:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsdaAxIOh+LcEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MDFkZDRhYjMtMmE5My00Yjg3LWIxZGMtODA2ZmFmMjlmYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/s4BcSRZsG/mVKUPEl9mD1dIH76RUZemCiB MfErbxtHxLYqq1J7I2tcHQs4LNMOtRbGQyEeDspQgmpwC/ofxG0fSvkpqNgdGkV8 yGgpHYEvnCoN4C+K+400nlhMndlYpZZl7Q1oo5CszH2YP3uTIqTJDDsjlL2Ha8H3 tc5mdrK6wA6+rFgILN+pTqL5kVk5+7JtBZnOgq9Ukr6SFzipBWFUj1qD3mAdnUxa /19t4mtooACec0Nuzu0wgqDiWPTZqHOPWD3X/HM0MsjCTPw12o3kQoKBKQSpVwJj raq9pA8ewBJMrwIhssOjBTIF7n1v4YvaQOCmkQfQbmOZrQNHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5GGMgtCSCPskXgYNyPiOxuWWBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMmU3NDFjMDQtNmE2Yy0z MjVmLThhOTEtZmE0YmQwYjhmZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3ciZuAqmsEnGz5+vsWJdFLln66z5DUgRqVSlYKneii8FJI6kBY6p5l VJ6F0JvDoyCcKu3q8g2LRKUZmjnsqh/+JFeXJvQW3QEzaw2LhgR0gw/8OPgi82/K sOHpdJoI/ytVDmsyaRkGhpDi4fitC5tbp+ZQL9PZZBwFNmPuBDE2bybDLOAPw4lL dPCUU5lS3h2nYDuIlNP2xDj6DVyt7B75C7Duh9/YaxELy6DOopJx9AA6aCncPvFo 39RZTr71axWhDhtS/OXMwa+ouNbYbmR6IJSi6LiUhLWf9MsKIlUi+Ac+sV+v7VkC 9MYSuhE3yQxcJtQc+swT6wa+3aRdolo= -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:25 2026 by rpki-client