$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa File: bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa (raw, json) Hash identifier: sZMkcUN1MDjYVixjhPmTR+h0VgrOFI5Z5zIZ4+WIo5o= Subject key identifier: D2:B1:AD:59:67:31:A7:69:8A:2C:B4:A9:F9:3A:14:6D:8C:04:F0:D2 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3EABA1E84BA1F9111578C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:ab:a1:e8:4b:a1:f9:11:15:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=71eeaf8f-a7d5-44cc-a494-b9eef7ad7b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:4f:cd:6c:9a:04:99:7f:ee:c6:bd:4c:b4: 93:d6:91:3c:1b:ee:39:22:55:fa:58:ec:18:dc:a5: fc:e1:7e:ec:55:55:17:4f:18:88:a7:b5:84:4b:11: ba:39:09:8f:7a:16:a2:53:6f:57:ad:cc:08:d6:8e: 0e:e1:89:1b:38:7f:a2:7b:b8:8c:9b:e0:c2:47:2d: 5c:f3:33:d4:6e:d7:1f:db:b3:cf:06:33:61:fc:7b: 93:32:34:83:69:0b:f4:4c:7b:3c:ee:38:8e:6c:98: 12:90:90:b7:24:71:fd:67:8e:ab:a0:1b:a3:08:df: 35:97:02:9b:9f:a3:b9:f9:a8:14:e1:d7:4f:17:d4: d6:aa:8f:a4:e7:49:bc:be:df:10:64:cb:b0:7f:f1: 01:34:6d:98:7d:bd:37:d9:76:fe:2e:6c:b2:c4:96: a4:16:af:b3:7e:ff:48:4e:58:6a:4c:99:68:5a:a1: 68:e0:48:41:b1:71:08:de:78:fd:30:af:8a:37:8a: 9b:f7:12:c7:9d:25:df:24:39:0b:ec:65:bd:0f:e9: be:50:c3:1b:f0:d2:de:7e:2d:f2:ff:a7:6b:1e:da: 66:b0:c3:05:43:db:ca:a0:4a:7a:5d:e9:87:b2:3e: 3c:c0:88:1b:8e:2b:ae:43:57:fa:f6:e7:d1:60:d4: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:AD:59:67:31:A7:69:8A:2C:B4:A9:F9:3A:14:6D:8C:04:F0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:dc:fa:38:60:c1:4b:36:de:98:e9:4b:86:fe:71:46:04:a8: 4b:82:4d:5f:81:93:8e:0a:f5:91:02:75:5b:1c:db:1c:8b:59: c2:74:91:b6:44:26:4b:b0:33:6c:93:f9:1f:ae:83:9e:ac:0a: 12:12:5e:dd:58:56:84:a6:72:90:7c:9e:93:a6:c5:5d:e0:11: b8:23:42:70:7a:c6:a2:94:92:1e:43:16:67:8b:6f:4e:9b:d9: 5a:e6:2e:71:88:dc:f7:22:3c:8e:ad:c3:3b:2a:ec:19:3e:f4: 3d:c2:d6:c1:ac:57:b1:37:be:22:a9:82:32:c1:01:ab:fd:22: a5:9d:30:22:48:44:8e:81:05:a9:19:b4:a9:ed:91:95:c8:b6: 81:ea:b3:4a:6a:c6:c3:1d:e7:ca:ca:b9:7a:4d:81:e5:ba:60: 1f:c6:f3:95:55:41:c4:07:2e:42:00:e5:58:14:3d:2f:c0:20: 65:41:87:ac:5d:13:e9:09:fb:5d:df:c8:c0:72:22:7d:ac:b7: 4b:34:59:e3:d9:9f:24:77:21:5b:43:07:c9:11:9f:a0:06:1e: 57:f9:8b:25:e5:54:22:de:98:87:89:f0:1d:12:b1:2f:6b:2f: 50:32:61:f6:13:4e:19:49:9b:c2:86:00:c6:98:3f:04:49:15: f5:b1:c2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPquh6Euh+REVeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NzFlZWFmOGYtYTdkNS00NGNjLWE0OTQtYjllZWY3YWQ3YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tdPzWyaBJl/7sa9TLST1pE8G+45IlX6WOwY 3KX84X7sVVUXTxiIp7WESxG6OQmPehaiU29XrcwI1o4O4YkbOH+ie7iMm+DCRy1c 8zPUbtcf27PPBjNh/HuTMjSDaQv0THs87jiObJgSkJC3JHH9Z46roBujCN81lwKb n6O5+agU4ddPF9TWqo+k50m8vt8QZMuwf/EBNG2Yfb032Xb+LmyyxJakFq+zfv9I TlhqTJloWqFo4EhBsXEI3nj9MK+KN4qb9xLHnSXfJDkL7GW9D+m+UMMb8NLefi3y /6drHtpmsMMFQ9vKoEp6XemHsj48wIgbjiuuQ1f69ufRYNRo2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKxrVlnMadpiiy0qfk6FG2MBPDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmQ2ZmZlNDctYzBmZi0z Yjg2LWEzNjAtZTUzZWUzYWIyYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrc+jhgwUs23pjpS4b+cUYEqEuCTV+Bk44K9ZECdVsc2xyLWcJ0kbZE JkuwM2yT+R+ug56sChISXt1YVoSmcpB8npOmxV3gEbgjQnB6xqKUkh5DFmeLb06b 2VrmLnGI3PciPI6twzsq7Bk+9D3C1sGsV7E3viKpgjLBAav9IqWdMCJIRI6BBakZ tKntkZXItoHqs0pqxsMd58rKuXpNgeW6YB/G85VVQcQHLkIA5VgUPS/AIGVBh6xd E+kJ+13fyMByIn2st0s0WePZnyR3IVtDB8kRn6AGHlf5iyXlVCLemIeJ8B0SsS9r L1AyYfYTThlJm8KGAMaYPwRJFfWxwmk= -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:01 2026 by rpki-client