$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa File: 87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa (raw, json) Hash identifier: L4fekK+RYxQS0vJjT4oxCioQLnucC0GC3/OUoN2cNB8= Subject key identifier: E1:9F:54:C9:DD:71:52:1B:90:15:3E:34:73:26:AD:E1:07:07:04:6C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F02424211D013C34370394C00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 138.2.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:42:11:d0:13:c3:43:70:39:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=909c06dc-1686-47de-a729-b6945b0d875d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:fe:6c:a6:15:2c:80:08:7a:39:a8:f0:9d: 17:c2:a8:4a:bd:5b:09:8f:a8:63:0a:43:e0:6a:6f: ba:92:38:48:de:82:70:85:74:69:5b:3e:df:c4:0c: 61:dc:c4:6a:a2:ce:8f:a0:b2:a1:36:4e:ad:2e:ca: b7:99:81:a4:af:67:47:c7:6e:1a:66:42:16:ee:0e: ea:0d:49:d5:d1:84:31:ae:59:32:cb:09:e3:93:54: 1a:fa:80:22:44:8e:ad:31:55:4c:00:37:0b:a2:e4: 26:cc:dd:a5:9b:d8:42:c6:50:34:53:b2:7b:3d:4d: 0a:b8:1d:9f:23:fc:1f:4e:f6:4a:8a:79:96:65:13: e3:f9:51:88:5f:c1:5b:24:70:ec:f2:64:ea:48:e1: 52:f8:68:6c:10:95:8b:a1:5b:19:31:32:cb:b3:c1: 05:86:31:bb:fe:90:f4:2a:b1:e3:d7:28:11:02:57: b6:51:81:bb:1f:2d:00:f8:39:ce:78:cc:6a:c7:38: c6:a4:63:4f:94:40:58:3a:9d:42:43:c0:a8:01:77: d9:8f:00:da:14:9c:32:9a:8c:01:e4:00:a7:77:cf: 16:b2:22:0b:fc:7d:35:ef:73:00:70:b8:c4:eb:11: a1:21:c9:49:19:ff:65:96:69:40:b9:c4:2e:86:41: b8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9F:54:C9:DD:71:52:1B:90:15:3E:34:73:26:AD:E1:07:07:04:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:57:07:57:41:75:e6:4e:25:71:4c:31:3b:be:14:e7:1f:2e: bd:8f:18:06:90:a6:92:f6:39:73:5d:76:59:59:c6:9a:71:04: 36:6a:c4:20:cb:5d:4a:7b:a5:d3:2e:31:ec:be:cd:b0:64:d2: 98:13:64:e8:89:5c:94:22:23:c3:fb:10:f3:05:5a:07:4a:ae: 6f:06:a2:13:27:ce:0c:08:a3:e4:8d:a9:cf:2e:10:25:7e:29: f0:c9:c9:e0:49:fe:0c:cb:7e:92:c9:bf:6b:75:4c:a2:0a:3b: 61:df:8f:42:87:4f:cf:b3:9c:27:9a:7d:4d:ca:9b:ec:a8:1b: 19:09:c4:12:71:33:46:6b:b6:9a:ba:3e:50:b2:60:38:2a:8f: b3:d7:5e:71:b8:f0:40:ea:5a:a1:0e:04:86:14:c9:96:7c:a4: 8e:1b:65:79:8f:d8:e5:ff:99:0b:6b:9a:c7:c7:73:5a:e0:42: 82:c7:39:de:73:a4:89:1a:d7:11:d9:34:d5:6e:da:7e:0e:ea: e2:0a:07:62:c3:5a:bd:66:24:d0:41:a8:fe:0a:c6:06:b6:99: 22:f4:de:6a:9e:58:7c:8e:51:e0:d8:57:46:57:1c:24:e2:c0: 2c:79:f2:cd:1f:9c:6a:cc:f3:da:48:30:e6:eb:52:51:f2:04: a2:28:5d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQkIR0BPDQ3A5TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk OTA5YzA2ZGMtMTY4Ni00N2RlLWE3MjktYjY5NDViMGQ4NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwT+bKYVLIAIejmo8J0XwqhKvVsJj6hjCkPg am+6kjhI3oJwhXRpWz7fxAxh3MRqos6PoLKhNk6tLsq3mYGkr2dHx24aZkIW7g7q DUnV0YQxrlkyywnjk1Qa+oAiRI6tMVVMADcLouQmzN2lm9hCxlA0U7J7PU0KuB2f I/wfTvZKinmWZRPj+VGIX8FbJHDs8mTqSOFS+GhsEJWLoVsZMTLLs8EFhjG7/pD0 KrHj1ygRAle2UYG7Hy0A+DnOeMxqxzjGpGNPlEBYOp1CQ8CoAXfZjwDaFJwymowB 5ACnd88WsiIL/H0173MAcLjE6xGhIclJGf9llmlAucQuhkG4cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGfVMndcVIbkBU+NHMmreEHBwRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODc1MDNhMjAtZjdiOS0z MzgyLWE3ZWQtYWM2YTY0OWY3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtXB1dBdeZOJXFMMTu+FOcfLr2PGAaQppL2OXNddllZxppxBDZqxCDL XUp7pdMuMey+zbBk0pgTZOiJXJQiI8P7EPMFWgdKrm8GohMnzgwIo+SNqc8uECV+ KfDJyeBJ/gzLfpLJv2t1TKIKO2Hfj0KHT8+znCeafU3Km+yoGxkJxBJxM0Zrtpq6 PlCyYDgqj7PXXnG48EDqWqEOBIYUyZZ8pI4bZXmP2OX/mQtrmsfHc1rgQoLHOd5z pIka1xHZNNVu2n4O6uIKB2LDWr1mJNBBqP4Kxga2mSL03mqeWHyOUeDYV0ZXHCTi wCx58s0fnGrM89pIMObrUlHyBKIoXRE= -----END CERTIFICATE-----Generated at Thu Oct 8 08:34:43 2026 by rpki-client