$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa File: 17f45e08-575d-331e-8082-276aa8342fa3.roa (raw, json) Hash identifier: LRBUmVG4MmThKyr46qK5oaRGR73t8+w/P23VUxRmd60= Subject key identifier: F0:30:AE:7F:1B:12:7F:FF:DA:96:F0:B7:23:22:0B:E8:7F:C6:40:FD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F11A14FECC40B8F5515D97980 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.1.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4f:ec:c4:0b:8f:55:15:d9:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2ba84057-fdea-4750-a10e-29033b919b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:a7:1b:df:48:a7:eb:c2:6f:3c:b1:11:cb: 66:be:7e:03:f7:0f:37:38:c7:5a:ec:d1:ad:c0:33: ea:12:bb:c8:a6:58:58:8e:6e:8f:48:30:4f:a1:f6: d1:27:81:a4:3d:2b:1e:58:b8:88:d5:16:b3:51:16: 9c:1d:1c:c6:26:c1:4a:be:a3:4e:40:f2:28:0c:0a: 4a:c8:0a:7c:78:da:55:4a:36:43:f6:76:9e:99:ca: d7:52:ac:fb:39:e3:0d:66:d1:23:ef:21:e2:80:0a: e1:c5:19:f0:43:12:27:a4:e9:9a:b8:40:97:89:29: 0b:53:47:6c:2a:78:90:eb:70:f5:05:aa:3b:b5:3b: 78:e9:20:2c:0a:23:f4:7d:cf:c6:c7:e1:9b:db:6e: b5:ed:45:67:37:76:71:3b:07:c6:4c:5c:12:ea:42: 6c:44:6a:71:ca:10:7f:af:94:ef:ac:42:87:f7:7c: 80:21:d0:27:18:0e:23:7a:ba:c5:3f:a6:a6:62:e5: 5f:b9:70:b0:98:ac:a1:6a:be:f8:2c:14:dc:bf:59: f3:ae:e6:24:58:97:21:f5:97:b9:e5:5a:38:17:42: ae:f6:e6:1c:9f:07:6a:3a:57:f0:4f:ab:c5:a8:cf: 2d:38:bf:2c:e4:69:8d:8b:ac:5e:33:cd:15:92:fc: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:30:AE:7F:1B:12:7F:FF:DA:96:F0:B7:23:22:0B:E8:7F:C6:40:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/17f45e08-575d-331e-8082-276aa8342fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f9:ad:da:85:fc:d9:7a:98:aa:54:0f:1e:1f:76:c2:a9:aa: 6b:63:38:88:a5:9f:8d:1f:53:ba:8d:93:02:0c:54:aa:be:95: fc:fe:60:77:0a:e1:88:18:32:55:70:96:f8:4d:b5:a8:0a:6d: 60:0c:7d:75:ee:05:21:e6:27:10:b6:4b:98:27:3e:de:08:6f: 38:95:e1:0e:66:53:83:01:c6:92:86:50:f2:95:8a:3a:6a:a2: 52:4f:d5:fe:5b:57:d5:e6:5d:62:61:68:15:8b:8f:df:f9:6a: 49:7b:ed:1f:50:ff:4b:af:9e:d1:93:86:2e:1c:c5:00:24:21: 80:61:9f:02:e4:77:a9:4a:35:a4:87:e4:ed:b8:7e:ee:07:f6: 69:32:fc:05:f0:8f:2a:57:54:16:b5:64:cb:4c:a2:c2:e2:c4: d2:73:07:54:88:ec:35:6c:e5:37:ad:97:0b:f7:31:de:24:3e: 5b:ed:57:60:b6:51:1b:08:66:ba:20:fa:36:e5:77:95:00:f7: 3d:4c:7a:e6:69:56:76:7f:0c:76:a3:93:dd:a4:73:e1:59:63: 00:b3:dd:65:39:40:30:56:74:aa:31:9b:94:c8:4f:98:32:97: 16:85:b7:26:b6:20:f8:6d:6e:a4:72:95:d1:bd:63:d7:f7:e2: 69:a9:56:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoU/sxAuPVRXZeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmJhODQwNTctZmRlYS00NzUwLWExMGUtMjkwMzNiOTE5Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNWnG99Ip+vCbzyxEctmvn4D9w83OMda7NGt wDPqErvIplhYjm6PSDBPofbRJ4GkPSseWLiI1RazURacHRzGJsFKvqNOQPIoDApK yAp8eNpVSjZD9naemcrXUqz7OeMNZtEj7yHigArhxRnwQxInpOmauECXiSkLU0ds KniQ63D1Bao7tTt46SAsCiP0fc/Gx+Gb22617UVnN3ZxOwfGTFwS6kJsRGpxyhB/ r5TvrEKH93yAIdAnGA4jerrFP6amYuVfuXCwmKyhar74LBTcv1nzruYkWJch9Ze5 5Vo4F0Ku9uYcnwdqOlfwT6vFqM8tOL8s5GmNi6xeM80VkvxV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAwrn8bEn//2pbwtyMiC+h/xkD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTdmNDVlMDgtNTc1ZC0z MzFlLTgwODItMjc2YWE4MzQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb5rdqF/Nl6mKpUDx4fdsKpqmtjOIiln40fU7qNkwIMVKq+lfz+YHcK 4YgYMlVwlvhNtagKbWAMfXXuBSHmJxC2S5gnPt4IbziV4Q5mU4MBxpKGUPKVijpq olJP1f5bV9XmXWJhaBWLj9/5akl77R9Q/0uvntGThi4cxQAkIYBhnwLkd6lKNaSH 5O24fu4H9mky/AXwjypXVBa1ZMtMosLixNJzB1SI7DVs5Tetlwv3Md4kPlvtV2C2 URsIZrog+jbld5UA9z1MeuZpVnZ/DHajk92kc+FZYwCz3WU5QDBWdKoxm5TIT5gy lxaFtya2IPhtbqRyldG9Y9f34mmpVjs= -----END CERTIFICATE-----Generated at Sun Sep 27 11:18:00 2026 by rpki-client