$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa File: 49f816f4-ae4f-3038-a773-b9c47936e35e.roa (raw, json) Hash identifier: Nms9jnrfCN5GpcX1hbzS66znNQkg4HL5Oyja95k6pzI= Subject key identifier: 94:A7:DE:7A:82:2D:85:63:58:0E:45:A2:26:9B:D8:E8:C4:EA:26:E4 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F130239862F36C21630ABFE80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 138.1.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:39:86:2f:36:c2:16:30:ab:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=4d8173dc-bdea-400b-b205-f40e1d739473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:47:eb:01:1a:7c:ae:c8:07:56:0d:4d:fd: 84:34:a8:a3:e1:24:bd:2f:a0:e8:32:61:ee:26:54: a7:6c:38:d5:0a:b2:4a:51:ff:2e:d2:f4:c5:2b:f0: c7:9d:72:78:9a:b9:ee:91:8e:cf:9b:c6:5b:8a:82: 3a:b3:5f:a6:96:75:05:06:00:a3:53:23:78:9d:49: 76:1b:de:5a:5c:3f:da:f8:8f:bf:19:97:79:de:eb: cb:4a:38:9a:c2:f4:90:b5:ca:f5:8c:ad:e3:2a:b5: 57:00:f7:36:02:8d:f0:fd:49:78:f4:18:4e:6e:d9: 08:3b:0f:63:79:ed:49:32:cb:a6:f5:b8:0a:2e:0b: b6:06:4f:05:4f:06:06:bb:c3:37:93:8d:3f:a4:54: 1b:d6:9b:3f:05:a2:18:c9:08:cb:8d:af:6e:b8:35: b6:32:e1:7c:2c:80:f3:26:c3:ab:b0:85:65:93:72: b1:cd:5a:5f:74:69:9b:7b:1f:b8:1c:8e:32:96:1d: 64:51:90:5b:33:18:60:ee:6f:ae:10:ef:af:d7:f8: 2d:01:b8:fb:1e:ec:f2:39:81:da:25:d5:de:94:41: 93:ea:c2:86:ef:6d:03:75:cb:01:67:7b:04:5f:1c: 65:0d:c8:3f:3a:11:c6:21:7f:d2:65:9a:ee:c5:d1: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:DE:7A:82:2D:85:63:58:0E:45:A2:26:9B:D8:E8:C4:EA:26:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:7a:0f:b1:c1:38:9d:d7:61:f7:23:bb:9b:b7:0c:c8:a4:04: 65:4a:89:8b:f4:f5:7c:52:c2:9f:e2:ce:19:45:80:b1:ff:e1: 72:f4:ac:43:39:83:db:40:c8:6b:a4:7a:bf:6c:bc:42:90:a1: 72:b2:52:44:42:f6:1f:a8:98:25:96:e1:62:b7:9f:0e:39:1f: 6f:58:eb:2e:7d:e7:8c:23:eb:87:8f:88:b4:1f:52:3d:44:51: 15:2d:ed:a9:71:fc:2e:7b:43:90:44:d7:be:6f:3c:29:63:3e: e9:45:ec:33:ff:de:13:50:b9:47:83:20:63:ff:98:f7:cd:31: 37:40:ac:58:b1:b0:3c:a0:be:21:14:43:8f:b7:e2:c7:3f:a7: fb:e0:27:03:b8:50:54:c2:65:2d:82:ac:85:50:0c:dd:45:25: d1:4c:9e:54:c8:41:c1:75:8a:4a:69:a9:e3:9e:3b:b0:df:71: db:27:6f:f8:61:28:5a:ed:b3:87:d8:6f:bc:3b:42:a9:ed:64: 45:1b:bb:bf:93:fe:7a:3e:aa:e1:ad:31:ac:d9:09:b4:b4:83: 21:46:60:86:bd:ab:1f:2c:84:1c:df:97:c0:41:a8:99:c7:c6: 80:c0:9f:52:23:a0:cd:66:8b:54:1e:8f:96:e6:3c:db:fd:b2: c5:cc:c9:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjmGLzbCFjCr/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NGQ4MTczZGMtYmRlYS00MDBiLWIyMDUtZjQwZTFkNzM5NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCNH6wEafK7IB1YNTf2ENKij4SS9L6DoMmHu JlSnbDjVCrJKUf8u0vTFK/DHnXJ4mrnukY7Pm8ZbioI6s1+mlnUFBgCjUyN4nUl2 G95aXD/a+I+/GZd53uvLSjiawvSQtcr1jK3jKrVXAPc2Ao3w/Ul49BhObtkIOw9j ee1JMsum9bgKLgu2Bk8FTwYGu8M3k40/pFQb1ps/BaIYyQjLja9uuDW2MuF8LIDz JsOrsIVlk3KxzVpfdGmbex+4HI4ylh1kUZBbMxhg7m+uEO+v1/gtAbj7HuzyOYHa JdXelEGT6sKG720DdcsBZ3sEXxxlDcg/OhHGIX/SZZruxdH5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSn3nqCLYVjWA5Foiab2OjE6ibkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDlmODE2ZjQtYWU0Zi0z MDM4LWE3NzMtYjljNDc5MzZlMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt6D7HBOJ3XYfcju5u3DMikBGVKiYv09XxSwp/izhlFgLH/4XL0rEM5 g9tAyGuker9svEKQoXKyUkRC9h+omCWW4WK3nw45H29Y6y5954wj64ePiLQfUj1E URUt7alx/C57Q5BE175vPCljPulF7DP/3hNQuUeDIGP/mPfNMTdArFixsDygviEU Q4+34sc/p/vgJwO4UFTCZS2CrIVQDN1FJdFMnlTIQcF1ikppqeOeO7Dfcdsnb/hh KFrts4fYb7w7QqntZEUbu7+T/no+quGtMazZCbS0gyFGYIa9qx8shBzfl8BBqJnH xoDAn1IjoM1mi1Qej5bmPNv9ssXMyfo= -----END CERTIFICATE-----Generated at Wed Sep 30 23:13:00 2026 by rpki-client