$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa File: 4c9f1b4e-8311-3d71-9b79-a652244709a6.roa (raw, json) Hash identifier: Ov5vcsQGrmaOPqWdQUwYuSUYsC7kqxVX51IX3y+oc5s= Subject key identifier: 8E:92:EE:B0:6A:BB:87:E8:E6:D6:BF:67:1B:36:BF:70:40:9F:C4:E2 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3ECCB1C2F4B6C518F24280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.2.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:cc:b1:c2:f4:b6:c5:18:f2:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=22a0130c-845e-4dce-b596-25e9b1bc5bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5f:e1:b4:22:07:95:95:9c:d6:2f:50:7a:95: f0:0c:ee:f5:3f:2a:fd:9b:a2:22:c2:bc:fc:54:78: 1e:7f:2e:4a:7d:b1:10:28:af:d0:a0:0d:f4:e5:99: 94:14:4a:ae:33:7f:30:df:ab:25:a2:ed:ab:c2:fa: b2:cd:d7:a9:09:e4:6a:df:dc:9a:fd:b5:f7:5b:bc: 3d:e4:d2:8b:f8:3e:49:a7:de:86:c3:b1:59:fd:83: a2:87:19:22:13:41:1c:49:10:a0:54:6b:a8:35:13: ad:3a:88:2a:bb:0f:b9:c0:40:5b:1f:67:11:39:63: 03:8f:8d:05:ae:e1:a4:23:67:8a:80:24:45:9d:57: 4a:45:a7:94:e9:fa:3f:c7:d2:1c:01:cd:8c:88:fe: a2:e3:5e:49:fa:99:bc:4e:1e:b4:5a:b7:83:bd:dd: bf:17:56:98:77:83:1b:b3:15:69:1c:48:74:57:67: 54:85:af:02:51:32:d2:db:9b:35:16:b3:e6:33:d0: 47:34:2e:01:32:a9:de:35:23:68:12:be:53:4d:2d: a5:26:36:44:0d:c0:58:51:68:bd:07:82:68:dd:eb: ee:1f:97:84:c6:fc:48:1a:7d:5c:4f:6a:5a:d1:b7: 24:5d:6f:7a:93:2f:24:99:68:c6:d7:7c:53:a3:51: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:92:EE:B0:6A:BB:87:E8:E6:D6:BF:67:1B:36:BF:70:40:9F:C4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:22:2d:bd:ab:ea:0b:c4:7d:02:89:0e:a9:c4:3b:23:ae:cc: a3:ca:a8:c1:07:23:07:78:6d:2d:2a:35:88:00:94:a0:d5:fd: 2f:81:1a:1c:23:b5:81:26:42:1f:41:50:f4:14:cb:9b:9c:03: c4:f9:fd:f7:ab:ff:7b:fd:cb:84:49:98:10:da:ff:7a:01:8d: 67:d8:22:c3:0b:27:62:f2:c2:d7:f7:44:e9:5c:c1:cc:9d:b7: 81:3e:aa:79:b8:ef:ee:bc:7f:d6:40:99:59:fc:69:d8:11:47: 76:a1:13:9b:0d:cd:ed:1a:58:f2:24:8f:51:cf:5b:ea:e8:4d: b1:3c:af:ac:1f:54:f8:4a:bc:9e:25:e9:4f:b1:2e:b3:8c:4d: 33:95:b5:c6:d0:34:fc:d0:26:1d:f0:b4:96:a1:0f:b1:13:49: f1:af:5e:8b:4e:30:f0:a3:ca:b0:fc:29:bd:94:80:95:bc:16: e3:4b:f2:cc:22:2a:18:b3:65:45:66:f0:b6:48:bc:5c:b1:ef: cc:66:e0:dd:41:16:54:87:0f:cf:56:4a:5a:83:4c:0e:1b:10: 12:62:7c:54:98:a0:d7:ab:95:ca:4b:d6:09:99:d7:16:56:71: 13:f7:66:0f:8f:fb:e7:ad:0a:bc:ad:38:4e:ec:1e:19:de:7f: 27:3e:d8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsyxwvS2xRjyQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjJhMDEzMGMtODQ1ZS00ZGNlLWI1OTYtMjVlOWIxYmM1YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV/htCIHlZWc1i9QepXwDO71Pyr9m6Iiwrz8 VHgefy5KfbEQKK/QoA305ZmUFEquM38w36slou2rwvqyzdepCeRq39ya/bX3W7w9 5NKL+D5Jp96Gw7FZ/YOihxkiE0EcSRCgVGuoNROtOogquw+5wEBbH2cROWMDj40F ruGkI2eKgCRFnVdKRaeU6fo/x9IcAc2MiP6i415J+pm8Th60WreDvd2/F1aYd4Mb sxVpHEh0V2dUha8CUTLS25s1FrPmM9BHNC4BMqneNSNoEr5TTS2lJjZEDcBYUWi9 B4Jo3evuH5eExvxIGn1cT2pa0bckXW96ky8kmWjG13xTo1GikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6S7rBqu4fo5ta/Zxs2v3BAn8TiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGM5ZjFiNGUtODMxMS0z ZDcxLTliNzktYTY1MjI0NDcwOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGigKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUiLb2r6gvEfQKJDqnEOyOuzKPKqMEHIwd4bS0qNYgAlKDV/S+BGhwj tYEmQh9BUPQUy5ucA8T5/fer/3v9y4RJmBDa/3oBjWfYIsMLJ2Lywtf3ROlcwcyd t4E+qnm47+68f9ZAmVn8adgRR3ahE5sNze0aWPIkj1HPW+roTbE8r6wfVPhKvJ4l 6U+xLrOMTTOVtcbQNPzQJh3wtJahD7ETSfGvXotOMPCjyrD8Kb2UgJW8FuNL8swi KhizZUVm8LZIvFyx78xm4N1BFlSHD89WSlqDTA4bEBJifFSYoNerlcpL1gmZ1xZW cRP3Zg+P++etCrytOE7sHhnefyc+2P0= -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:41 2026 by rpki-client