$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa File: 118e4c67-8a95-310c-95a1-5985a2e83596.roa (raw, json) Hash identifier: e4tIXoLcxNKDDN01INOevcE6FwA4vhyYOvbiRzn8eek= Subject key identifier: 53:9C:4E:FB:82:F6:C7:1C:08:6E:1A:58:95:EB:3C:EC:C6:7A:14:73 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584EA78823DD11C3025271D29A40 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40628 IP address blocks: 204.61.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:23:dd:11:c3:02:52:71:d2:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dc0e4254-1729-411a-a8f6-6c27cd81d3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:fc:08:58:6c:a1:58:d1:28:d9:ff:ed:97: b0:70:54:a4:7a:54:df:aa:92:82:82:5b:dd:2a:7e: 67:01:c8:ff:3e:09:f7:db:38:99:86:4a:ea:65:3a: 0f:49:71:7b:57:3d:3a:51:4a:53:f3:cb:17:f0:47: 5a:df:61:3b:fd:30:74:79:6c:e4:c1:d7:15:b3:e3: e2:8c:f7:ce:ce:81:e9:74:ad:f0:de:9c:1e:62:5b: 32:01:30:16:d0:46:28:a6:1d:e1:81:c8:a3:53:c9: 36:20:7a:d0:48:ff:d3:16:18:14:ed:f1:85:bd:33: ea:21:f7:eb:a2:df:92:6e:3b:71:c2:e8:8d:1e:5f: 9d:17:54:53:f9:37:59:e8:8b:dc:d6:19:41:62:38: 63:65:66:86:ab:73:16:09:4a:bb:eb:60:be:32:31: 6f:b0:65:27:82:93:3c:24:56:d3:c9:28:41:8b:c3: fb:ea:57:8c:b1:b3:82:13:d8:c3:d5:a8:16:0c:8e: 24:82:78:24:0a:24:5c:0a:9b:96:cc:c3:1a:6a:3c: 17:3a:45:72:5e:73:01:51:86:66:ae:da:32:3a:e1: da:d1:e4:0e:de:95:cf:99:cb:e5:67:d6:74:ba:1c: 76:f7:85:50:d5:52:a3:38:94:ed:48:8e:c8:34:19: a6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:4E:FB:82:F6:C7:1C:08:6E:1A:58:95:EB:3C:EC:C6:7A:14:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.61.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fa:80:d8:91:91:07:19:6a:a1:90:a3:dd:4c:38:e1:27:55: d0:f8:90:98:fa:13:1b:b3:89:63:83:b8:9a:93:ce:b5:ac:97: e2:52:29:60:f9:57:31:4d:c5:ef:a8:dd:8c:ed:53:a2:a7:9d: 97:8a:86:8d:05:28:8a:b0:87:99:a8:52:37:6d:11:2b:30:42: 4b:5f:6f:eb:6a:62:70:83:7c:3e:cd:a8:55:9e:51:22:2c:20: 69:6d:13:6d:51:93:b2:cd:8c:8f:83:83:41:2f:ae:23:cb:89: e2:d1:5d:e2:3e:8c:2b:24:79:be:33:7a:63:d7:bf:15:f8:a8: d8:ea:97:02:60:3a:9a:4c:0b:d6:41:db:4a:45:7c:05:e6:2d: 80:36:e9:f6:22:9e:5c:8c:14:23:a4:07:1a:01:2b:c0:43:e7: c6:6f:37:b7:d6:95:1a:79:cd:8e:88:87:4b:77:07:e8:f6:03: fc:85:75:7f:7f:e3:ee:5f:eb:65:67:b8:44:7f:bf:0e:00:7e: 02:f9:d6:b1:3a:94:c6:09:99:3b:f2:77:e1:6b:35:5d:05:55: 50:7c:d1:d4:7d:2a:b2:3d:d8:b5:13:d6:68:6c:a1:69:28:74: 43:92:ad:ac:5c:ed:d6:7f:1b:ca:1a:81:64:c3:4a:18:46:c4: 48:c0:c6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCPdEcMCUnHSmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGMwZTQyNTQtMTcyOS00MTFhLWE4ZjYtNmMyN2NkODFkM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts38CFhsoVjRKNn/7ZewcFSkelTfqpKCglvd Kn5nAcj/Pgn32ziZhkrqZToPSXF7Vz06UUpT88sX8Eda32E7/TB0eWzkwdcVs+Pi jPfOzoHpdK3w3pweYlsyATAW0EYoph3hgcijU8k2IHrQSP/TFhgU7fGFvTPqIffr ot+SbjtxwuiNHl+dF1RT+TdZ6Ivc1hlBYjhjZWaGq3MWCUq762C+MjFvsGUngpM8 JFbTyShBi8P76leMsbOCE9jD1agWDI4kgngkCiRcCpuWzMMaajwXOkVyXnMBUYZm rtoyOuHa0eQO3pXPmcvlZ9Z0uhx294VQ1VKjOJTtSI7INBmmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOcTvuC9sccCG4aWJXrPOzGehRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvMTE4ZTRjNjctOGE5NS0z MTBjLTk1YTEtNTk4NWEyZTgzNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzD0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT6gNiRkQcZaqGQo91MOOEnVdD4kJj6ExuziWODuJqTzrWsl+JSKWD5 VzFNxe+o3YztU6KnnZeKho0FKIqwh5moUjdtESswQktfb+tqYnCDfD7NqFWeUSIs IGltE21Rk7LNjI+Dg0EvriPLieLRXeI+jCskeb4zemPXvxX4qNjqlwJgOppMC9ZB 20pFfAXmLYA26fYinlyMFCOkBxoBK8BD58ZvN7fWlRp5zY6Ih0t3B+j2A/yFdX9/ 4+5f62VnuER/vw4AfgL51rE6lMYJmTvyd+FrNV0FVVB80dR9KrI92LUT1mhsoWko dEOSraxc7dZ/G8oagWTDShhGxEjAxlg= -----END CERTIFICATE-----Generated at Thu Jul 30 07:02:10 2026 by rpki-client