$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa File: e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa (raw, json) Hash identifier: Nq/tox/VBPmD6lCpG2mR+YjTeUlOU5k+jhj75JY6e6A= Subject key identifier: A0:8A:BA:7B:0A:52:E2:47:DF:F5:ED:D2:B5:6F:A5:3F:CC:BE:29:02 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6F3ECDCA8E29253C5AB3BB80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 138.1.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:cd:ca:8e:29:25:3c:5a:b3:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=190afd3e-54f8-4511-9913-6d71a68c7ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:2f:e1:6b:48:c5:16:08:64:05:a3:f3:1a: 39:db:91:fb:4f:ed:b5:54:45:23:73:ae:fb:b2:c0: 9e:11:d7:ea:d9:fe:94:95:cc:47:43:b1:ff:7a:38: 27:75:34:f6:ee:71:9c:a8:a7:83:d8:aa:70:df:11: 3e:aa:ad:30:a9:a0:e0:74:8a:2d:bd:f7:96:86:ec: 0f:de:de:ae:ca:c8:52:0c:53:07:f9:d7:d0:c2:8f: f2:16:49:ae:9a:2c:5a:11:ad:4c:e0:44:21:1e:ef: bf:a4:19:a9:8d:35:4e:6f:33:da:e8:16:c8:e9:ed: 14:e5:e3:d1:8d:7b:c9:24:b7:ad:dc:02:38:27:57: e5:21:f9:9c:7c:23:6d:88:28:ea:ba:d5:05:26:26: 9a:88:91:1c:2f:49:5c:76:7d:f8:1b:16:ba:d5:e4: 29:cb:1b:43:49:1c:42:36:8a:57:bb:da:a7:d6:89: 1d:05:01:ff:30:38:c7:82:2f:71:02:c2:af:b9:b3: 5a:14:14:86:c3:d8:58:9f:bf:02:36:55:3c:1d:e2: fb:4f:44:3c:95:29:73:19:8d:f9:d9:0a:87:a8:66: a5:41:9a:d7:0c:47:2d:18:73:19:6c:3f:6f:f8:51: 8f:a5:c9:02:49:0f:27:a7:37:70:fa:71:c2:aa:90: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8A:BA:7B:0A:52:E2:47:DF:F5:ED:D2:B5:6F:A5:3F:CC:BE:29:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4a:b2:9e:ba:eb:c2:a0:e1:22:1a:53:8e:07:8c:ca:cc:97: b7:cb:98:16:4a:94:04:77:61:69:44:28:81:4d:ed:6e:3b:ca: 25:da:5b:cb:f0:52:f6:16:35:6e:d0:9e:75:d9:bd:36:13:6f: 99:d6:14:be:01:3a:7b:e2:f6:6e:41:63:66:6e:8e:0e:c8:f5: 04:b4:a8:90:17:aa:b0:59:c9:ca:b5:30:ac:36:30:ec:a6:90: 24:77:4b:3f:cc:86:34:5f:ed:cf:f5:8b:13:af:4f:c4:96:4a: bd:82:fd:64:d0:93:7a:b4:d9:40:d9:ba:a5:32:6b:b0:16:3c: 09:66:47:f4:23:f3:1d:b1:ec:06:34:78:5f:f4:e5:80:d4:63: 99:12:dc:77:61:f6:74:1a:69:cf:f6:ec:90:e0:ea:d0:db:69: ec:8a:d7:b2:25:ad:b8:04:bc:ef:3b:06:88:f3:56:db:7e:5e: f9:70:c4:3a:a2:5d:15:1d:fb:df:cc:b0:ec:84:99:a2:d8:eb: fc:01:18:45:0b:9d:57:a8:fe:c0:f1:b9:06:69:f8:bf:a8:69: 97:c0:3c:b5:92:e5:db:c3:7e:ce:30:29:ac:d9:3c:78:3f:d4: b5:21:a9:f1:6c:2e:f0:78:d1:c5:be:c4:b6:4e:d5:8d:bf:d4: f4:4e:25:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPs3KjiklPFqzu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MTkwYWZkM2UtNTRmOC00NTExLTk5MTMtNmQ3MWE2OGM3ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmogv4WtIxRYIZAWj8xo525H7T+21VEUjc677 ssCeEdfq2f6UlcxHQ7H/ejgndTT27nGcqKeD2Kpw3xE+qq0wqaDgdIotvfeWhuwP 3t6uyshSDFMH+dfQwo/yFkmumixaEa1M4EQhHu+/pBmpjTVObzPa6BbI6e0U5ePR jXvJJLet3AI4J1flIfmcfCNtiCjqutUFJiaaiJEcL0lcdn34Gxa61eQpyxtDSRxC NopXu9qn1okdBQH/MDjHgi9xAsKvubNaFBSGw9hYn78CNlU8HeL7T0Q8lSlzGY35 2QqHqGalQZrXDEctGHMZbD9v+FGPpckCSQ8npzdw+nHCqpBoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCKunsKUuJH3/Xt0rVvpT/MvikCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTZiOTIxNWItOWYyMC0z Y2M2LWI3NTUtNjIzYWEzYTFhNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNKsp6668Kg4SIaU44HjMrMl7fLmBZKlAR3YWlEKIFN7W47yiXaW8vw UvYWNW7QnnXZvTYTb5nWFL4BOnvi9m5BY2Zujg7I9QS0qJAXqrBZycq1MKw2MOym kCR3Sz/MhjRf7c/1ixOvT8SWSr2C/WTQk3q02UDZuqUya7AWPAlmR/Qj8x2x7AY0 eF/05YDUY5kS3Hdh9nQaac/27JDg6tDbaeyK17IlrbgEvO87BojzVtt+XvlwxDqi XRUd+9/MsOyEmaLY6/wBGEULnVeo/sDxuQZp+L+oaZfAPLWS5dvDfs4wKazZPHg/ 1LUhqfFsLvB40cW+xLZO1Y2/1PROJUc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:04:20 2026 by rpki-client