$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8c902e46-b21f-3030-b0df-bde4fc7464f8.roa File: 8c902e46-b21f-3030-b0df-bde4fc7464f8.roa (raw, json) Hash identifier: Uy/FpYXlL6X7sX/Dd7n6bcHKcZqb6dKGbvUiuqEjtQo= Subject key identifier: 26:A5:70:77:3A:68:96:B8:B1:EC:4E:C3:4F:DB:3D:3B:C3:52:C3:EE Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EC8E530A4F2FDEE8650E0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8c902e46-b21f-3030-b0df-bde4fc7464f8.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:c8:e5:30:a4:f2:fd:ee:86:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=6fca785f-560b-4adc-8887-80a7e85e8bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:31:ac:10:7f:e8:e7:70:83:62:dd:87:7a: 09:d1:89:11:66:18:c7:b7:6c:af:74:c4:5c:87:a7: f1:94:95:0f:b7:0d:c3:d8:90:62:9c:0e:58:40:1f: df:57:fc:7d:8b:51:17:a4:a4:b9:8f:49:33:15:a0: 51:25:0f:53:58:81:0f:df:33:94:95:2f:5a:59:2c: cb:da:26:55:02:a1:9a:ee:e5:73:13:3d:18:5a:fd: 93:69:1b:44:d5:83:83:ce:50:8b:10:7c:a2:49:1f: 11:04:9b:f2:ba:07:95:01:8f:e8:9d:6b:36:84:e3: f3:c9:a5:61:60:cd:be:a5:27:1c:9c:fc:3e:82:78: ef:91:2f:3a:81:91:de:84:71:38:04:95:e0:ea:0c: 30:9a:5f:00:a9:96:fb:9a:61:25:c4:81:5b:ac:4a: 85:94:4c:b8:1d:a1:52:02:52:91:19:8f:60:05:98: c9:f8:e1:9c:32:e9:2c:3c:b2:6c:78:97:5e:b1:db: 38:71:a2:13:82:b8:86:0b:81:c7:8c:a2:70:93:a1: c4:b8:0a:a3:75:46:f5:b5:4f:46:12:b4:08:7f:5a: f7:c0:e1:b6:f6:2e:f6:77:e8:48:6a:87:74:cb:53: 4f:11:ba:f3:86:1e:6f:dd:5e:a6:f2:ee:45:82:48: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A5:70:77:3A:68:96:B8:B1:EC:4E:C3:4F:DB:3D:3B:C3:52:C3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8c902e46-b21f-3030-b0df-bde4fc7464f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ff:99:90:ee:fc:11:57:fa:c1:6f:fe:b0:da:7e:af:3b:18: c1:8a:0d:48:a2:8e:48:75:a3:93:21:a2:3f:de:3b:fe:4f:ee: 7d:a9:f3:3f:f1:3e:cf:93:3d:47:1c:01:b9:16:05:b7:0a:42: 70:0f:4b:fc:d9:c1:f4:7b:d5:94:dd:d0:ef:99:e3:31:af:80: e5:91:16:69:a3:fd:47:7a:6d:90:e1:b1:8b:b3:27:25:fe:ae: f0:af:48:fa:f9:ae:c2:34:c0:e6:02:64:01:61:74:f0:cf:00: 05:0f:df:b3:64:93:87:09:60:0d:9d:37:4e:03:ca:ac:0c:1b: bc:da:a7:c3:c3:b5:5f:08:40:55:2d:d2:b5:fc:8a:37:0d:1c: 08:c7:4f:e9:86:9d:98:a4:7b:40:4e:a7:a4:74:d2:62:61:4b: 05:3d:7e:df:7d:a8:0e:28:fb:8d:06:bb:59:16:c0:3f:ee:b4: b2:29:33:b3:87:4a:1b:95:24:21:6d:55:bb:65:5b:aa:da:00: 07:46:c7:99:08:d4:9d:1c:df:0a:45:8e:c5:e6:07:ae:2b:1f: bf:79:b7:a4:68:05:20:59:cf:92:ed:ce:48:ff:31:54:20:f8: 73:48:d8:68:1b:6a:de:2c:02:f7:8b:10:6e:74:01:ac:42:00: 07:22:b5:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsjlMKTy/e6GUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NmZjYTc4NWYtNTYwYi00YWRjLTg4ODctODBhN2U4NWU4YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx8xrBB/6Odwg2Ldh3oJ0YkRZhjHt2yvdMRc h6fxlJUPtw3D2JBinA5YQB/fV/x9i1EXpKS5j0kzFaBRJQ9TWIEP3zOUlS9aWSzL 2iZVAqGa7uVzEz0YWv2TaRtE1YODzlCLEHyiSR8RBJvyugeVAY/onWs2hOPzyaVh YM2+pSccnPw+gnjvkS86gZHehHE4BJXg6gwwml8AqZb7mmElxIFbrEqFlEy4HaFS AlKRGY9gBZjJ+OGcMuksPLJseJdesds4caITgriGC4HHjKJwk6HEuAqjdUb1tU9G ErQIf1r3wOG29i72d+hIaod0y1NPEbrzhh5v3V6m8u5FgkiuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCalcHc6aJa4sexOw0/bPTvDUsPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOGM5MDJlNDYtYjIxZi0z MDMwLWIwZGYtYmRlNGZjNzQ2NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj/mZDu/BFX+sFv/rDafq87GMGKDUiijkh1o5Mhoj/eO/5P7n2p8z/x Ps+TPUccAbkWBbcKQnAPS/zZwfR71ZTd0O+Z4zGvgOWRFmmj/Ud6bZDhsYuzJyX+ rvCvSPr5rsI0wOYCZAFhdPDPAAUP37Nkk4cJYA2dN04DyqwMG7zap8PDtV8IQFUt 0rX8ijcNHAjHT+mGnZike0BOp6R00mJhSwU9ft99qA4o+40Gu1kWwD/utLIpM7OH ShuVJCFtVbtlW6raAAdGx5kI1J0c3wpFjsXmB64rH795t6RoBSBZz5Ltzkj/MVQg +HNI2Ggbat4sAveLEG50AaxCAAcitZg= -----END CERTIFICATE-----Generated at Fri Jul 24 00:39:05 2026 by rpki-client