$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa File: 38818ab6-c191-3c2a-a66e-deace084450d.roa (raw, json) Hash identifier: vc+Mmr+Q5gC7fMoVaxzS3P6beaDwP2U+hSekEKaVuR4= Subject key identifier: 50:BF:F6:EC:8B:B5:25:6C:56:15:6F:62:43:12:B0:CD:81:A9:76:AD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EAC332F46735891292820 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:ac:33:2f:46:73:58:91:29:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=03c655be-d100-4716-900b-eefd155d2875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:75:03:e0:d4:ab:28:54:44:93:2f:50:2f: fd:79:14:7a:d0:55:c2:df:c2:7e:60:28:0c:2c:b0: a7:4c:09:37:1a:71:df:93:b4:f1:42:96:da:9b:66: dc:c9:44:30:88:15:91:b6:ed:23:0a:11:f3:22:c3: 86:dd:fa:59:12:64:9e:a7:0f:30:8e:f5:0e:40:02: 9d:7f:28:7e:8a:72:fc:3b:20:bc:be:71:6c:9a:33: 7a:57:f6:67:4c:f6:71:02:c0:5b:f0:39:89:45:15: 40:31:b3:4f:aa:dc:19:cc:eb:60:5f:ad:92:f5:74: 3a:17:c8:53:1d:b3:87:98:18:6b:47:b5:98:0a:02: 75:f6:52:eb:cb:1a:66:71:3c:0c:04:27:1b:9f:78: fd:d3:a4:05:51:df:6d:bc:2f:52:d1:e2:0e:24:ef: 13:1e:5c:e9:4d:64:e3:29:0a:06:28:45:22:cc:cb: 8a:6b:b5:95:ff:55:d6:8c:38:07:b7:27:6e:c2:a7: c9:b9:0b:49:f5:96:4e:b7:00:2d:0c:0f:44:65:b5: be:53:9c:7b:78:f9:64:7e:15:b1:b4:7d:6a:10:1c: 71:12:ef:ec:a6:af:0c:73:94:be:45:7a:9c:7f:b4: 86:6c:b8:5a:43:5e:51:bf:32:68:23:2c:7b:41:c4: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BF:F6:EC:8B:B5:25:6C:56:15:6F:62:43:12:B0:CD:81:A9:76:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5a:ed:2d:c6:1b:bb:eb:ab:53:2f:3a:17:b2:33:c8:78:4d: af:3a:2d:c7:65:fa:ec:cc:da:ad:89:f4:0a:d7:42:7a:72:9e: 18:4d:13:66:3f:90:df:c5:9c:dc:38:34:af:96:c8:33:78:99: ee:66:a5:3b:b7:6e:7c:81:fe:a3:f3:b1:55:c2:ba:e9:99:cb: 3d:4d:7a:a9:54:41:c1:eb:5c:83:a6:c7:3f:a8:16:2b:5f:02: 92:33:4a:6f:e4:ff:7a:67:75:8d:7a:88:8a:63:ac:12:ad:a9: 9f:bd:39:ba:07:90:42:61:23:6e:ac:5c:2c:9c:17:03:6d:f6: dd:46:1f:98:1a:0e:9e:fc:2c:41:30:51:41:69:c1:c6:24:84: 07:c0:aa:da:f6:d6:e7:5e:a3:37:9c:04:08:77:18:e7:e9:d1: 8f:ea:11:bd:5f:1d:35:f3:df:04:56:16:82:f8:9b:ac:7a:d2: 1e:7d:af:74:40:a1:4f:48:56:da:3a:e9:16:f0:57:f9:38:52: 8d:7a:bb:5f:0a:e4:fd:0c:ce:86:53:f6:ed:69:d0:b2:35:43: 72:da:38:22:6b:b8:8d:69:9b:c6:aa:43:5f:f2:ae:d5:76:93: e4:5b:15:56:19:cc:52:b8:3f:a9:37:b0:0d:7d:3c:d5:51:d8: f7:ea:e4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPqwzL0ZzWJEpKCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MDNjNjU1YmUtZDEwMC00NzE2LTkwMGItZWVmZDE1NWQyODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTF1A+DUqyhURJMvUC/9eRR60FXC38J+YCgM LLCnTAk3GnHfk7TxQpbam2bcyUQwiBWRtu0jChHzIsOG3fpZEmSepw8wjvUOQAKd fyh+inL8OyC8vnFsmjN6V/ZnTPZxAsBb8DmJRRVAMbNPqtwZzOtgX62S9XQ6F8hT HbOHmBhrR7WYCgJ19lLryxpmcTwMBCcbn3j906QFUd9tvC9S0eIOJO8THlzpTWTj KQoGKEUizMuKa7WV/1XWjDgHtyduwqfJuQtJ9ZZOtwAtDA9EZbW+U5x7ePlkfhWx tH1qEBxxEu/spq8Mc5S+RXqcf7SGbLhaQ15RvzJoIyx7QcTB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC/9uyLtSVsVhVvYkMSsM2BqXatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzg4MThhYjYtYzE5MS0z YzJhLWE2NmUtZGVhY2UwODQ0NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVa7S3GG7vrq1MvOheyM8h4Ta86Lcdl+uzM2q2J9ArXQnpynhhNE2Y/ kN/FnNw4NK+WyDN4me5mpTu3bnyB/qPzsVXCuumZyz1NeqlUQcHrXIOmxz+oFitf ApIzSm/k/3pndY16iIpjrBKtqZ+9OboHkEJhI26sXCycFwNt9t1GH5gaDp78LEEw UUFpwcYkhAfAqtr21udeozecBAh3GOfp0Y/qEb1fHTXz3wRWFoL4m6x60h59r3RA oU9IVto66RbwV/k4Uo16u18K5P0MzoZT9u1p0LI1Q3LaOCJruI1pm8aqQ1/yrtV2 k+RbFVYZzFK4P6k3sA19PNVR2Pfq5D8= -----END CERTIFICATE-----Generated at Fri Jul 24 00:47:26 2026 by rpki-client