$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa File: 8f4fd58a-3135-3fa4-8496-60e3143a2363.roa (raw, json) Hash identifier: 1KTL3/78lI8kxiEI0ovvfj4PtKtKjozNidTrNATfDa4= Subject key identifier: E7:01:F9:F1:D1:11:58:C6:22:C2:DB:DC:E8:74:B4:71:46:6B:88:C4 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3A1944169714437EB73400 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:19:44:16:97:14:43:7e:b7:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=954f8b23-96a1-4d87-bf66-fe719fb53af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:0b:a8:89:a1:8a:95:aa:9f:75:92:97:ba: 1b:e9:46:16:d8:e9:10:07:77:2c:b6:ea:0a:5a:35: b4:db:1c:55:2b:b3:9b:e1:98:ff:c0:0e:13:9b:5d: 2b:b6:b3:c5:c0:64:40:ea:3c:f9:d2:64:ae:1b:85: 84:e2:ab:82:97:d6:ef:01:41:8b:f5:27:e2:0d:bc: 3e:32:a5:47:f6:76:81:6f:a8:d0:59:6d:1c:98:ab: 4d:be:69:d6:20:1f:7c:2c:89:a3:88:fc:e5:e5:57: 8e:37:66:27:44:df:ea:d9:a4:60:38:be:22:0e:d8: ba:c1:70:2a:5c:07:04:62:9a:d5:fb:da:5b:cc:22: 1b:fa:e7:fe:b1:14:37:89:5c:b2:5b:cb:8a:40:6e: d6:df:29:3d:40:ee:2f:27:0c:1f:40:0b:4a:64:83: b7:a8:7a:5e:19:60:bd:33:10:dc:18:d0:49:31:8b: 17:e2:7a:1d:0f:97:54:d3:29:e7:9b:7d:cf:3d:8c: 1e:2e:11:71:5f:76:e1:59:e3:07:e4:75:0d:2a:52: 86:20:1a:b6:53:2d:13:20:dd:9a:7f:fa:99:e7:ed: 74:fb:08:86:31:16:eb:fe:37:df:70:16:b4:a5:ae: db:9a:9e:e5:3a:f6:95:ec:db:0b:a2:c5:4d:de:58: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:01:F9:F1:D1:11:58:C6:22:C2:DB:DC:E8:74:B4:71:46:6B:88:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:87:13:63:0c:d6:06:82:c2:8e:f9:09:88:f6:5b:82:e6:64: 0d:23:97:62:ac:ed:b6:cd:c6:5e:42:8d:11:21:04:2a:b0:e8: ee:f6:28:e7:9d:24:1c:04:d0:dd:35:85:63:fb:2b:67:86:36: d9:bd:35:37:79:a9:97:90:8d:bc:c3:f1:5f:da:b8:53:16:70: a4:dd:d5:8d:7e:5b:87:f1:d3:45:7b:71:43:14:65:22:84:8e: 4a:58:00:d4:7e:14:31:ab:65:a1:69:6f:20:e8:4f:7f:9f:a9: 76:44:30:04:84:9f:17:18:3c:88:66:83:63:69:4f:63:23:3f: 73:0d:00:ca:a6:13:06:de:c2:18:93:52:9a:09:60:fe:3b:5e: 26:f6:03:e5:3d:20:ad:da:a0:22:c6:65:47:2c:5f:e9:61:96: 7c:f6:59:8d:87:c0:91:3b:3f:e6:16:75:65:ed:d3:ff:6a:26: dc:7f:f2:ec:ae:30:36:62:c4:92:fa:ff:f2:cf:0a:01:29:59: 93:e5:48:67:14:0c:3d:42:43:b6:5b:2c:65:1f:4f:02:11:61: 06:8e:dc:16:ca:86:ab:86:da:a7:09:71:12:bd:1b:94:18:d9: 40:b8:9d:13:e1:99:2a:cc:d9:27:dc:bf:9f:97:1a:5d:51:ae: 64:3a:59:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhlEFpcUQ363NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk OTU0ZjhiMjMtOTZhMS00ZDg3LWJmNjYtZmU3MTlmYjUzYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcwLqImhipWqn3WSl7ob6UYW2OkQB3cstuoK WjW02xxVK7Ob4Zj/wA4Tm10rtrPFwGRA6jz50mSuG4WE4quCl9bvAUGL9SfiDbw+ MqVH9naBb6jQWW0cmKtNvmnWIB98LImjiPzl5VeON2YnRN/q2aRgOL4iDti6wXAq XAcEYprV+9pbzCIb+uf+sRQ3iVyyW8uKQG7W3yk9QO4vJwwfQAtKZIO3qHpeGWC9 MxDcGNBJMYsX4nodD5dU0ynnm33PPYweLhFxX3bhWeMH5HUNKlKGIBq2Uy0TIN2a f/qZ5+10+wiGMRbr/jffcBa0pa7bmp7lOvaV7NsLosVN3lj6aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcB+fHREVjGIsLb3Oh0tHFGa4jEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOGY0ZmQ1OGEtMzEzNS0z ZmE0LTg0OTYtNjBlMzE0M2EyMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2HE2MM1gaCwo75CYj2W4LmZA0jl2Ks7bbNxl5CjREhBCqw6O72KOed JBwE0N01hWP7K2eGNtm9NTd5qZeQjbzD8V/auFMWcKTd1Y1+W4fx00V7cUMUZSKE jkpYANR+FDGrZaFpbyDoT3+fqXZEMASEnxcYPIhmg2NpT2MjP3MNAMqmEwbewhiT UpoJYP47Xib2A+U9IK3aoCLGZUcsX+lhlnz2WY2HwJE7P+YWdWXt0/9qJtx/8uyu MDZixJL6//LPCgEpWZPlSGcUDD1CQ7ZbLGUfTwIRYQaO3BbKhquG2qcJcRK9G5QY 2UC4nRPhmSrM2Sfcv5+XGl1RrmQ6WUU= -----END CERTIFICATE-----Generated at Fri Jul 24 16:33:22 2026 by rpki-client