$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa File: afba448f-444e-3ef6-90f6-f3e3076cdc26.roa (raw, json) Hash identifier: bqgnyFOGJemSx7qRrVaMcQ6h2PH9X4gCHM5gGW6Z3sw= Subject key identifier: FD:83:0B:65:9D:71:58:16:8C:8C:A3:ED:A8:25:7C:26:B9:96:AA:6A Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EAEAB49FF9EDE7734B580 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:ae:ab:49:ff:9e:de:77:34:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=2b67f64c-0428-4af4-8b73-0156360f1ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:21:77:be:d8:4e:5f:aa:54:9d:3f:40:8a:3c: 02:4e:ac:a3:28:fc:1e:b4:43:c4:e3:b5:92:5d:de: 6b:bc:e6:38:e0:03:7f:f5:93:3a:26:7c:d6:5d:30: 65:1f:64:8a:23:d4:08:0a:02:4b:ce:ba:2e:b0:12: 89:3b:11:83:c9:eb:13:61:41:7b:e7:e1:48:7b:4f: 2e:d9:31:4c:c6:b5:b4:cc:e0:f9:02:fe:f4:77:e5: 26:e2:8e:01:e0:90:e7:ba:bd:a0:1c:dd:cf:23:e8: ee:72:48:9a:86:4f:22:81:64:da:0d:9a:00:97:be: 52:ea:90:50:fc:00:c5:53:78:0c:03:75:28:9f:bd: e2:7d:f1:1d:ae:4c:d7:23:c6:1b:ca:da:fe:02:89: da:b1:7e:5f:f5:63:72:80:1c:11:b9:ed:c7:b7:28: c6:fe:e3:bf:c3:5e:92:ad:76:e5:da:93:5f:ac:bc: 4b:0b:24:7f:5b:63:ec:d7:4c:3b:33:6e:35:29:f8: be:9e:e9:52:e9:69:e9:27:25:f5:b0:c3:36:6e:d0: c3:5f:68:17:a2:45:67:9f:1e:38:51:76:d3:0d:06: 1c:ee:7d:85:6f:be:09:6c:9e:ad:61:89:df:0d:11: 7f:01:c8:da:4c:cb:e8:c9:b2:a7:66:cc:27:c3:f1: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:0B:65:9D:71:58:16:8C:8C:A3:ED:A8:25:7C:26:B9:96:AA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c8:35:8e:96:26:fa:c1:d1:39:a6:0b:7f:ec:0e:e6:38:5d: eb:71:d8:ac:ed:84:8f:04:0e:ee:2d:ec:f1:a8:c4:3f:cd:a1: b4:54:c7:ad:f9:d1:7e:27:2e:a0:e1:90:e6:5a:78:10:ec:c9: 98:87:6f:2a:3a:41:0c:be:df:e1:d1:40:c0:a6:19:72:46:c0: af:60:6d:82:fa:52:2b:8f:f8:68:5e:74:01:49:60:09:6c:94: 92:77:26:06:04:ac:88:b0:b6:dc:2f:a8:eb:18:ae:ed:9e:e9: 78:45:64:f7:57:9d:e5:18:5d:0c:7c:b2:18:06:c8:5c:9f:cf: f7:40:81:6e:a7:e6:b7:f7:83:f7:ed:31:23:03:7e:74:18:ea: da:70:4f:41:08:e9:a4:ed:a8:10:32:01:bd:64:06:d1:e5:32: 3f:e4:a2:2b:28:96:5b:06:55:be:d1:c2:1d:cd:9f:47:e3:63: 51:90:83:54:9a:a6:ee:4a:d3:40:5c:af:a6:4f:d6:95:1c:19: ab:32:71:d9:74:6f:58:3f:8b:89:0a:60:c3:ba:3c:eb:df:30: 66:d4:d4:9b:da:86:3d:11:4c:0d:49:30:54:40:72:dd:11:f3: 6c:78:21:a7:d7:27:3e:6b:b5:0c:05:2b:6f:fc:df:b7:e7:9c: ff:bf:82:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPq6rSf+e3nc0tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MmI2N2Y2NGMtMDQyOC00YWY0LThiNzMtMDE1NjM2MGYxZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSF3vthOX6pUnT9AijwCTqyjKPwetEPE47WS Xd5rvOY44AN/9ZM6JnzWXTBlH2SKI9QICgJLzrousBKJOxGDyesTYUF75+FIe08u 2TFMxrW0zOD5Av70d+Um4o4B4JDnur2gHN3PI+juckiahk8igWTaDZoAl75S6pBQ /ADFU3gMA3Uon73iffEdrkzXI8Ybytr+AonasX5f9WNygBwRue3HtyjG/uO/w16S rXbl2pNfrLxLCyR/W2Ps10w7M241Kfi+nulS6WnpJyX1sMM2btDDX2gXokVnnx44 UXbTDQYc7n2Fb74JbJ6tYYnfDRF/AcjaTMvoybKnZswnw/HmmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2DC2WdcVgWjIyj7aglfCa5lqpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYWZiYTQ0OGYtNDQ0ZS0z ZWY2LTkwZjYtZjNlMzA3NmNkYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPINY6WJvrB0TmmC3/sDuY4Xetx2KzthI8EDu4t7PGoxD/NobRUx635 0X4nLqDhkOZaeBDsyZiHbyo6QQy+3+HRQMCmGXJGwK9gbYL6UiuP+GhedAFJYAls lJJ3JgYErIiwttwvqOsYru2e6XhFZPdXneUYXQx8shgGyFyfz/dAgW6n5rf3g/ft MSMDfnQY6tpwT0EI6aTtqBAyAb1kBtHlMj/koisollsGVb7Rwh3Nn0fjY1GQg1Sa pu5K00Bcr6ZP1pUcGasycdl0b1g/i4kKYMO6POvfMGbU1Jvahj0RTA1JMFRAct0R 82x4IafXJz5rtQwFK2/837fnnP+/gkM= -----END CERTIFICATE-----Generated at Fri Jul 24 13:09:49 2026 by rpki-client