$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa File: f8026007-1692-331c-9a2b-cf10e45b808e.roa (raw, json) Hash identifier: dvDpqNS/eFqDDiXSiBnfbF7zQ3FwfZjDXUF9OBc6vnM= Subject key identifier: 30:83:78:D3:90:AF:CF:08:C4:5D:05:23:84:40:E1:B4:97:6C:66:D1 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F093D0C7BF93E6F339FE44880 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.2.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:0c:7b:f9:3e:6f:33:9f:e4:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=5976d003-c562-4dbf-9158-2de73030b798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:42:dd:b8:0f:c3:72:97:0c:f2:0e:cf:1b: 7a:1c:64:f3:33:18:70:d6:4c:d9:e9:3d:14:2f:31: da:92:54:6a:70:4b:2d:47:4c:2f:24:1a:5f:35:e0: 2f:7a:73:94:46:d3:b1:75:0a:c3:be:73:d7:53:2c: 3b:b8:7e:aa:03:91:da:54:28:e1:72:bf:13:2c:67: f1:74:bb:87:96:13:48:8d:af:9d:5a:19:59:78:9d: 8c:3b:c2:f4:3e:0d:13:73:0a:80:ff:b7:1c:35:e0: d5:f7:1f:0f:ed:8c:52:20:57:9a:94:c9:d8:77:9a: 2a:19:0e:b5:27:af:dd:7f:ff:45:c7:72:f0:0c:9c: 3e:61:dc:d9:76:8d:16:c6:2f:2f:4d:4b:00:56:3b: 7c:54:03:45:c8:ef:43:a0:10:13:14:6f:e3:f1:05: bb:5c:d3:d4:fe:28:f4:e5:ff:5f:d4:1e:be:f8:ba: 6b:db:1f:d5:2d:31:4c:a1:36:b8:43:26:12:5c:44: e0:ea:f4:c5:47:94:7b:5c:3a:59:4e:8a:9e:88:ca: bd:91:a0:73:3c:e2:3c:06:27:3c:89:3c:92:8d:e9: f9:63:50:57:33:85:17:1c:03:97:dd:3e:82:c3:fb: 20:d9:2e:f1:c9:06:18:84:dc:c3:1e:b8:9a:15:34: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:78:D3:90:AF:CF:08:C4:5D:05:23:84:40:E1:B4:97:6C:66:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f8026007-1692-331c-9a2b-cf10e45b808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:35:ff:7f:9d:31:3f:5c:25:e2:ae:c9:b5:9b:f1:b8:28:82: de:4c:23:13:ab:08:49:b0:a5:4c:16:4e:93:25:e9:06:f8:ba: a6:b8:d7:29:cc:7e:25:11:84:07:21:70:c0:7a:a7:d4:2c:ee: 04:65:13:90:fb:c0:48:0d:76:ca:be:dc:d1:cb:c7:75:3f:dc: 7e:78:79:31:c4:12:44:33:2b:b2:fa:0c:9a:59:dd:17:37:30: 93:50:ca:d8:33:81:cb:6e:25:71:df:f1:a7:e3:89:09:35:b7: 2d:83:05:85:5e:e0:75:40:e0:25:a5:6e:31:da:3f:e7:2d:95: 4b:f6:c3:dd:bc:0b:40:22:68:ab:ac:b9:bd:d8:cf:cd:76:1c: aa:02:41:28:a5:0a:af:74:47:22:64:24:e6:56:eb:b1:a1:d4: 4f:0c:28:92:9a:bc:ca:48:89:42:1c:d3:bb:a4:64:47:d2:61: dd:b9:af:cc:55:c6:90:9f:10:44:6d:f1:11:4a:a0:14:58:7b: 8f:61:84:b8:bd:8f:7c:f8:70:a7:32:f2:d8:a9:57:40:4a:01: f8:56:6e:d4:00:f6:82:11:6c:29:ff:85:91:f0:f0:fc:6c:95: a5:10:7c:d3:d0:16:41:a9:fd:6c:c7:37:a9:c5:58:8b:8f:b4: 48:0c:23:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQx7+T5vM5/kSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NTk3NmQwMDMtYzU2Mi00ZGJmLTkxNTgtMmRlNzMwMzBiNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ZC3bgPw3KXDPIOzxt6HGTzMxhw1kzZ6T0U LzHaklRqcEstR0wvJBpfNeAvenOURtOxdQrDvnPXUyw7uH6qA5HaVCjhcr8TLGfx dLuHlhNIja+dWhlZeJ2MO8L0Pg0TcwqA/7ccNeDV9x8P7YxSIFealMnYd5oqGQ61 J6/df/9Fx3LwDJw+YdzZdo0Wxi8vTUsAVjt8VANFyO9DoBATFG/j8QW7XNPU/ij0 5f9f1B6++Lpr2x/VLTFMoTa4QyYSXETg6vTFR5R7XDpZToqeiMq9kaBzPOI8Bic8 iTySjen5Y1BXM4UXHAOX3T6Cw/sg2S7xyQYYhNzDHriaFTTV2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCDeNOQr88IxF0FI4RA4bSXbGbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjgwMjYwMDctMTY5Mi0z MzFjLTlhMmItY2YxMGU0NWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI1/3+dMT9cJeKuybWb8bgogt5MIxOrCEmwpUwWTpMl6Qb4uqa41ynM fiURhAchcMB6p9Qs7gRlE5D7wEgNdsq+3NHLx3U/3H54eTHEEkQzK7L6DJpZ3Rc3 MJNQytgzgctuJXHf8afjiQk1ty2DBYVe4HVA4CWlbjHaP+ctlUv2w928C0AiaKus ub3Yz812HKoCQSilCq90RyJkJOZW67Gh1E8MKJKavMpIiUIc07ukZEfSYd25r8xV xpCfEERt8RFKoBRYe49hhLi9j3z4cKcy8tipV0BKAfhWbtQA9oIRbCn/hZHw8Pxs laUQfNPQFkGp/WzHN6nFWIuPtEgMI2k= -----END CERTIFICATE-----Generated at Wed Sep 23 23:33:35 2026 by rpki-client