$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa File: 3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa (raw, json) Hash identifier: 7nPrrbxVWMxQZvQMXAi2qlUs+TOZcdr95wPrGMDIeC0= Subject key identifier: F1:55:9B:AE:BA:81:83:55:FE:12:50:C1:A1:D5:2F:BC:4E:EB:11:A5 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EB8EF637EC3B175E0D280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:b8:ef:63:7e:c3:b1:75:e0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=d8fb079a-a515-4cd1-bb7f-fd487c458d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:2e:f6:ec:2b:e6:58:f8:7e:fd:aa:5c:7a:1d: 92:af:b0:34:0e:21:13:ea:3c:94:b9:a5:5b:47:8a: c0:ea:1e:70:72:ff:6b:f7:ff:e0:c6:7a:26:99:c5: f3:fa:44:02:09:39:d8:67:f3:3a:cd:67:0d:dc:d9: 69:62:7c:1a:49:22:21:6d:3a:61:d6:23:22:84:53: 5b:e9:f3:84:df:21:c3:dc:80:f2:61:93:4a:32:c6: 33:ed:f3:22:9a:b9:75:bd:a6:90:04:2a:ee:79:b2: 6a:ea:29:e6:d1:21:a4:be:cb:6f:f6:4e:7b:99:1d: 4a:ce:e4:18:1c:fa:25:66:ad:7d:9a:1a:66:78:21: 62:ad:e8:87:57:e8:31:8c:d1:b7:54:88:37:66:f6: f6:e7:69:f3:ad:80:41:3a:a1:c5:eb:9e:cf:0f:45: a0:f8:11:9e:86:d4:e7:54:f2:f9:5c:12:95:fa:95: 5e:95:77:61:8f:79:db:10:d5:37:6f:14:32:d6:d9: 6b:0c:24:d2:64:39:0b:36:ae:c5:94:e6:63:e4:33: 55:b9:b4:1a:bd:fb:fa:7a:d1:80:75:1a:bd:46:8a: 23:b6:d1:48:de:72:05:77:ed:45:45:23:e3:ef:52: 30:49:5d:2f:19:2b:d9:de:53:7d:35:16:c6:fe:01: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:9B:AE:BA:81:83:55:FE:12:50:C1:A1:D5:2F:BC:4E:EB:11:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6f:7a:f0:ab:29:41:fd:8a:36:2b:65:97:a4:11:37:25:af: 9f:17:7c:8a:56:ba:4e:98:a6:e0:63:77:4e:9c:d6:f8:85:b1: 78:5b:d0:56:dd:ad:fc:08:2b:25:21:b7:34:e9:91:31:77:2a: a0:02:f5:04:77:55:cb:0b:1d:4a:36:a3:7b:3e:51:cf:5d:40: 47:51:22:49:97:dc:c5:a2:8c:c2:b7:ed:d2:2b:bf:d7:36:c6: 29:7a:05:3b:2a:b9:43:a6:54:29:60:a4:8f:ff:c0:c2:3d:5d: b2:8d:10:5f:65:7f:91:d0:b4:05:5d:08:41:59:8a:e9:0c:b6: f1:d8:ec:4b:17:40:f2:dc:09:d5:a1:a5:9c:c9:a8:b5:62:8d: 7f:78:d5:16:8c:98:d3:a2:88:d8:3c:a0:7a:76:b1:66:1b:c2: 28:f6:c9:51:32:f5:6a:48:61:3f:c8:2d:32:2d:50:c4:ec:fb: 4d:c6:d3:f0:59:34:84:83:ad:0b:e0:61:e1:14:17:5c:47:f4: 7e:25:b6:1f:4f:75:02:fa:3f:c7:0b:9a:60:ec:af:91:95:0b: ac:c2:79:5f:69:f4:b2:8b:11:c7:dd:7e:b1:5b:a1:14:72:b8: 4a:0f:51:e0:cc:15:a3:78:44:36:8f:6a:05:c5:b6:5e:70:28: 2a:a4:f0:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPrjvY37DsXXg0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDhmYjA3OWEtYTUxNS00Y2QxLWJiN2YtZmQ0ODdjNDU4ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/C727CvmWPh+/apceh2Sr7A0DiET6jyUuaVb R4rA6h5wcv9r9//gxnommcXz+kQCCTnYZ/M6zWcN3NlpYnwaSSIhbTph1iMihFNb 6fOE3yHD3IDyYZNKMsYz7fMimrl1vaaQBCruebJq6inm0SGkvstv9k57mR1KzuQY HPolZq19mhpmeCFireiHV+gxjNG3VIg3Zvb252nzrYBBOqHF657PD0Wg+BGehtTn VPL5XBKV+pVelXdhj3nbENU3bxQy1tlrDCTSZDkLNq7FlOZj5DNVubQavfv6etGA dRq9RoojttFI3nIFd+1FRSPj71IwSV0vGSvZ3lN9NRbG/gHBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFVm666gYNV/hJQwaHVL7xO6xGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2Q5OTRkMmUtOWQ1MS0z YjBiLTgwNjYtNzk4YWI0OWIyZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdvevCrKUH9ijYrZZekETclr58XfIpWuk6YpuBjd06c1viFsXhb0Fbd rfwIKyUhtzTpkTF3KqAC9QR3VcsLHUo2o3s+Uc9dQEdRIkmX3MWijMK37dIrv9c2 xil6BTsquUOmVClgpI//wMI9XbKNEF9lf5HQtAVdCEFZiukMtvHY7EsXQPLcCdWh pZzJqLVijX941RaMmNOiiNg8oHp2sWYbwij2yVEy9WpIYT/ILTItUMTs+03G0/BZ NISDrQvgYeEUF1xH9H4lth9PdQL6P8cLmmDsr5GVC6zCeV9p9LKLEcfdfrFboRRy uEoPUeDMFaN4RDaPagXFtl5wKCqk8Bk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:50 2026 by rpki-client