$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa File: 49f816f4-ae4f-3038-a773-b9c47936e35e.roa (raw, json) Hash identifier: oGDhFN8cU0+HhW9rM+nnWA/pDjnH/haxJPei/jffORs= Subject key identifier: 5D:60:78:C3:C0:5C:BD:89:6F:83:C5:B1:6E:60:20:24:98:42:31:C8 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F6DBD20242429675BB8A8 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 138.1.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6d:bd:20:24:24:29:67:5b:b8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=11d535dc-ef93-4b64-b4dd-e4e40d2e6867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:08:b4:8a:8d:18:bf:f1:86:f0:00:b2:3b: 00:c8:42:eb:2a:0d:01:c3:fa:07:23:c3:c5:0b:04: bd:07:2f:6d:ef:81:8f:53:e5:91:a9:91:df:ae:67: 5f:d6:64:fa:3f:26:42:a7:55:34:25:6b:c9:38:64: 57:da:c7:54:4d:b6:47:58:14:38:46:97:b6:ef:3f: 52:99:4f:48:a2:3b:c3:63:76:e4:4b:20:03:fd:0d: 2e:ab:58:66:a8:aa:c0:5d:36:0b:e8:e4:f4:22:69: 63:c6:ab:28:da:84:7d:dd:36:0e:b9:f6:98:de:2c: 29:76:23:33:01:9e:16:07:ed:7e:66:15:7a:49:21: 61:d8:89:6e:2d:8c:a0:95:cb:a8:07:01:70:e1:59: 4f:db:e5:06:c8:1c:ef:fb:02:57:fd:3d:9a:bd:7b: 45:7d:0f:f6:72:9b:87:67:4a:a5:b0:91:69:47:1b: a7:60:20:0e:72:cd:8d:c9:65:85:76:74:66:7a:ea: 58:2b:10:14:fc:9c:7f:90:f1:1d:4b:cc:e6:35:0d: c9:28:e8:8a:7d:0d:04:6a:ff:77:95:e0:be:70:82: 4c:8b:df:c1:96:9b:67:70:16:f8:c1:92:69:1b:64: 34:d7:8a:72:b8:92:79:b9:b1:5a:89:33:aa:02:32: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:60:78:C3:C0:5C:BD:89:6F:83:C5:B1:6E:60:20:24:98:42:31:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/49f816f4-ae4f-3038-a773-b9c47936e35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:65:4f:ba:58:f6:65:30:92:03:cd:c9:7d:ea:eb:d9:5f:92: e0:5c:7d:a4:98:94:bc:8a:42:1a:fb:0f:7b:c3:1d:a3:55:e7: fe:c5:a5:a6:6c:44:38:38:35:c8:58:05:a4:84:f2:8f:ae:2f: 15:91:2e:cf:a3:21:56:b0:db:b3:ed:94:20:96:43:da:a8:27: 27:85:77:17:7d:a8:4f:41:2c:3c:eb:55:24:6e:91:08:b0:8f: 41:98:4b:6e:1e:f4:1b:0a:35:9d:03:64:78:cb:44:1e:af:9b: be:02:4f:63:0d:d7:6d:bf:2f:19:96:b4:8c:b2:74:4a:85:21: 4e:07:59:98:b1:55:a0:de:84:a6:5d:60:de:16:2a:bd:ff:58: 53:82:db:ee:a8:a9:40:49:01:42:c1:69:b3:9c:8d:91:3f:12: ec:a3:81:f0:ed:cc:05:13:e1:70:e5:a8:44:e0:27:f2:6c:a3: 54:b4:e2:70:89:3a:a2:f8:a3:ae:ed:44:8a:e3:87:1c:3e:d6: b3:78:d1:a8:fc:ae:74:17:73:f9:6d:23:27:05:a2:9b:bd:45: 8e:02:ec:a1:35:bf:01:1e:8d:b9:26:af:00:0b:ae:35:ea:c2: bb:3e:93:d6:5e:6f:13:72:62:23:c4:da:c8:ad:a2:19:e8:0f: 68:f0:7b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn229ICQkKWdbuKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk MTFkNTM1ZGMtZWY5My00YjY0LWI0ZGQtZTRlNDBkMmU2ODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm0ItIqNGL/xhvAAsjsAyELrKg0Bw/oHI8PF CwS9By9t74GPU+WRqZHfrmdf1mT6PyZCp1U0JWvJOGRX2sdUTbZHWBQ4Rpe27z9S mU9IojvDY3bkSyAD/Q0uq1hmqKrAXTYL6OT0Imljxqso2oR93TYOufaY3iwpdiMz AZ4WB+1+ZhV6SSFh2IluLYyglcuoBwFw4VlP2+UGyBzv+wJX/T2avXtFfQ/2cpuH Z0qlsJFpRxunYCAOcs2NyWWFdnRmeupYKxAU/Jx/kPEdS8zmNQ3JKOiKfQ0Eav93 leC+cIJMi9/BlptncBb4wZJpG2Q014pyuJJ5ubFaiTOqAjK3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1geMPAXL2Jb4PFsW5gICSYQjHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDlmODE2ZjQtYWU0Zi0z MDM4LWE3NzMtYjljNDc5MzZlMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKplT7pY9mUwkgPNyX3q69lfkuBcfaSYlLyKQhr7D3vDHaNV5/7FpaZs RDg4NchYBaSE8o+uLxWRLs+jIVaw27PtlCCWQ9qoJyeFdxd9qE9BLDzrVSRukQiw j0GYS24e9BsKNZ0DZHjLRB6vm74CT2MN122/LxmWtIyydEqFIU4HWZixVaDehKZd YN4WKr3/WFOC2+6oqUBJAULBabOcjZE/EuyjgfDtzAUT4XDlqETgJ/Jso1S04nCJ OqL4o67tRIrjhxw+1rN40aj8rnQXc/ltIycFopu9RY4C7KE1vwEejbkmrwALrjXq wrs+k9ZebxNyYiPE2sitohnoD2jwe0I= -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:33 2026 by rpki-client