$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa File: a689957c-73d9-39c9-aa63-169e1dec2e34.roa (raw, json) Hash identifier: o7RtItadJTx+PGMKf+f8A9iA9SG1rGediqJsC7pYkp8= Subject key identifier: 7C:70:7C:05:C9:DA:52:48:9F:C9:7E:E5:3A:C6:7F:A1:AF:47:F4:C9 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3A33743F3F4D8AACFD7E80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:33:74:3f:3f:4d:8a:ac:fd:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=af8982b1-b4db-4057-b1bd-3ba8d5d4e85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:34:f0:3c:c5:03:fa:a9:76:e7:6b:31:90: 67:16:d3:f5:3a:d5:a0:37:3f:36:86:e4:ed:1a:8d: 2e:bb:c9:2a:44:fb:50:48:a6:b6:1d:5e:17:27:52: c1:31:69:d7:c9:df:dc:5b:e6:d3:46:b5:72:3f:bf: 4a:ba:1a:36:a7:88:62:1b:b1:ed:2b:b5:66:fc:4c: f8:ef:11:68:06:00:87:ed:e2:31:28:12:38:cc:a7: 66:6d:ff:95:79:8f:96:27:5e:0b:87:cb:da:ad:a9: aa:3c:d7:6d:5b:e7:0b:f4:ea:88:75:55:90:3e:c2: 7d:af:bf:2f:63:2e:1e:98:95:ab:4e:4a:5e:70:07: 9a:5b:6e:f0:f2:b4:fa:15:06:c9:a0:ac:fa:19:48: 51:94:ec:5a:dc:be:54:ec:cd:68:9a:ca:75:78:a0: ad:d5:3c:60:35:90:c8:33:99:0a:2d:98:85:af:d6: e7:a0:00:b5:d5:a2:eb:f2:b1:99:65:26:6d:c7:05: 81:28:d0:ed:99:71:0f:68:4d:94:fa:78:c2:7a:31: af:e5:ef:21:98:90:a8:1a:c4:6d:c7:93:34:cb:f1: f6:37:dc:a3:9a:ce:5d:e2:37:16:69:8c:0d:13:97: 9a:2c:e8:fe:ef:d5:23:74:70:b8:65:b4:51:4b:ae: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:70:7C:05:C9:DA:52:48:9F:C9:7E:E5:3A:C6:7F:A1:AF:47:F4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1d:73:c1:da:cd:62:e9:e9:6c:e5:bc:f9:b0:f8:d6:d4:62: ca:5a:b1:89:05:a9:70:3f:98:07:2d:56:d9:fb:4d:89:3f:18: 49:39:40:de:8c:41:b8:f6:09:77:de:96:bd:d5:a8:f9:bb:d3: 3e:e7:36:34:c4:9b:db:23:d0:10:82:3b:59:4c:44:91:d1:67: 03:75:30:c6:23:0d:2f:37:2e:39:23:36:a8:a0:5c:22:3f:66: 15:53:48:1b:a3:a6:97:cf:2c:f7:75:f1:8a:3f:a8:a1:b7:ff: 75:66:b5:62:5d:16:64:6b:94:18:90:bd:5d:4f:2c:56:67:9c: a7:3a:08:5e:99:51:d3:34:32:8d:2f:55:f7:36:69:98:7e:f0: 7a:7f:a7:35:c6:90:c6:9b:95:1a:c5:f9:af:a8:20:6d:37:73: 4f:b4:a3:d0:26:fd:96:a8:2e:48:f3:78:4e:23:ea:a1:a9:61: 6a:38:0a:99:98:e4:42:fa:e5:1f:27:3e:68:6c:c7:4f:47:6b: 7c:47:9d:1b:f5:b0:e5:9e:8a:ab:e8:5f:8d:f9:07:5e:c0:f1: 98:d5:29:93:ea:98:f8:a0:c9:4f:7d:7a:77:29:d7:df:80:47: 10:08:52:fc:0d:37:40:6e:60:15:a5:f4:8e:65:36:67:df:36: a3:7f:62:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjN0Pz9Niqz9foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YWY4OTgyYjEtYjRkYi00MDU3LWIxYmQtM2JhOGQ1ZDRlODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6c08DzFA/qpdudrMZBnFtP1OtWgNz82huTt Go0uu8kqRPtQSKa2HV4XJ1LBMWnXyd/cW+bTRrVyP79Kuho2p4hiG7HtK7Vm/Ez4 7xFoBgCH7eIxKBI4zKdmbf+VeY+WJ14Lh8varamqPNdtW+cL9OqIdVWQPsJ9r78v Yy4emJWrTkpecAeaW27w8rT6FQbJoKz6GUhRlOxa3L5U7M1omsp1eKCt1TxgNZDI M5kKLZiFr9bnoAC11aLr8rGZZSZtxwWBKNDtmXEPaE2U+njCejGv5e8hmJCoGsRt x5M0y/H2N9yjms5d4jcWaYwNE5eaLOj+79UjdHC4ZbRRS64wqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxwfAXJ2lJIn8l+5TrGf6GvR/TJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYTY4OTk1N2MtNzNkOS0z OWM5LWFhNjMtMTY5ZTFkZWMyZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsdc8HazWLp6WzlvPmw+NbUYspasYkFqXA/mActVtn7TYk/GEk5QN6M Qbj2CXfelr3VqPm70z7nNjTEm9sj0BCCO1lMRJHRZwN1MMYjDS83LjkjNqigXCI/ ZhVTSBujppfPLPd18Yo/qKG3/3VmtWJdFmRrlBiQvV1PLFZnnKc6CF6ZUdM0Mo0v Vfc2aZh+8Hp/pzXGkMablRrF+a+oIG03c0+0o9Am/ZaoLkjzeE4j6qGpYWo4CpmY 5EL65R8nPmhsx09Ha3xHnRv1sOWeiqvoX435B17A8ZjVKZPqmPigyU99encp19+A RxAIUvwNN0BuYBWl9I5lNmffNqN/YsI= -----END CERTIFICATE-----Generated at Fri Jul 24 00:45:13 2026 by rpki-client