$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa File: 38818ab6-c191-3c2a-a66e-deace084450d.roa (raw, json) Hash identifier: dy37jUkmC2pZG1LcSUVtTMHTbQobZdJKfHsuv4ww1CY= Subject key identifier: 48:1F:B6:FF:00:05:01:CC:B2:DF:B0:31:93:C9:85:9E:6D:70:7A:D3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F11A142F1AFE034E538F7CC00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.1.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:42:f1:af:e0:34:e5:38:f7:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=87d4b8b7-2368-4cbb-89f8-688283a4dbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:b4:4c:61:e4:05:2e:c4:53:b3:3a:c7:c6: ef:03:34:04:19:aa:7d:a9:e2:0f:45:97:c7:cc:61: f4:a6:85:bc:d0:00:09:18:66:1e:3f:ef:e5:dc:32: e8:0f:a9:e1:c6:1d:91:f1:31:c2:67:19:72:df:40: a4:d9:ba:d2:1c:6e:d1:39:2d:a1:fa:e7:66:37:2f: a5:cd:5f:c2:66:f9:15:f6:6f:50:f3:e6:7e:4f:f0: 70:25:5b:1b:7d:ba:36:98:3a:e5:f4:73:25:7f:41: 8c:b9:93:82:7a:31:c1:e7:a4:07:ca:a5:a8:9d:de: 4f:13:40:e9:e9:b5:81:61:97:82:b2:81:df:85:94: f1:86:f5:90:db:ed:ca:9a:3d:8b:6b:19:db:31:d6: b5:12:d2:40:8b:6a:3e:09:4d:96:05:4a:e0:c8:28: b7:43:a6:67:09:c2:b1:9f:bc:47:2e:7c:1d:71:40: 3d:a6:47:71:d1:b7:7c:ea:3e:77:e4:eb:f9:b7:90: 5d:a3:c7:c7:94:3a:00:77:3b:d5:07:7a:28:d6:86: b6:18:93:dd:7a:ff:2d:11:6b:c6:ca:f7:39:63:e5: a3:86:fe:aa:0f:7a:2a:0a:46:7f:1e:b9:cb:29:2b: 36:dd:1e:30:56:f6:19:55:7b:da:aa:c0:0c:2e:b3: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1F:B6:FF:00:05:01:CC:B2:DF:B0:31:93:C9:85:9E:6D:70:7A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/38818ab6-c191-3c2a-a66e-deace084450d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0c:ee:7c:c1:b1:c8:36:b2:8c:41:08:a4:85:ca:b4:ad:1c: 73:b2:b5:d8:9e:a0:3b:c3:c1:ec:95:2f:24:c3:f2:8c:f0:a5: 29:01:19:59:3e:8c:9e:48:6a:65:02:64:9a:a4:89:5a:a7:c5: 54:64:be:6b:37:4d:1f:1e:7b:b1:70:fb:38:94:26:55:f2:87: cc:79:80:97:e5:7b:ad:f7:fe:f7:9b:95:a8:8a:50:26:d6:95: fe:a5:76:7f:a7:5a:17:55:20:bc:be:53:44:9b:4a:94:7f:46: 6d:57:fc:61:cd:1c:4f:42:aa:b1:da:aa:15:d7:a2:c5:e8:a1: 10:c3:2c:f3:4d:78:2f:a7:bc:76:64:33:5b:9b:7a:0b:0c:5b: f1:c1:08:7b:cc:f8:a9:32:27:09:51:77:55:7e:35:9a:34:e4: 42:90:77:17:93:d1:c3:38:f0:22:f9:b3:02:37:10:8d:0e:42: e7:a0:9c:99:44:e5:69:15:ea:96:bd:c2:33:5f:69:31:37:b0: 6e:e0:c8:09:14:84:59:9c:0e:c8:3e:b8:14:33:54:27:c1:bb: a1:b4:48:ba:7f:a5:e3:e9:67:29:4e:df:d8:8a:9d:f4:e6:5f: 2a:d8:0c:10:18:b9:a1:48:8c:60:c6:ce:a9:7e:a4:79:53:a8: 67:3b:78:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoULxr+A05Tj3zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODdkNGI4YjctMjM2OC00Y2JiLTg5ZjgtNjg4MjgzYTRkYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnC0TGHkBS7EU7M6x8bvAzQEGap9qeIPRZfH zGH0poW80AAJGGYeP+/l3DLoD6nhxh2R8THCZxly30Ck2brSHG7ROS2h+udmNy+l zV/CZvkV9m9Q8+Z+T/BwJVsbfbo2mDrl9HMlf0GMuZOCejHB56QHyqWond5PE0Dp 6bWBYZeCsoHfhZTxhvWQ2+3Kmj2LaxnbMda1EtJAi2o+CU2WBUrgyCi3Q6ZnCcKx n7xHLnwdcUA9pkdx0bd86j535Ov5t5Bdo8fHlDoAdzvVB3oo1oa2GJPdev8tEWvG yvc5Y+Wjhv6qD3oqCkZ/HrnLKSs23R4wVvYZVXvaqsAMLrMk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgftv8ABQHMst+wMZPJhZ5tcHrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzg4MThhYjYtYzE5MS0z YzJhLWE2NmUtZGVhY2UwODQ0NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwM7nzBscg2soxBCKSFyrStHHOytdieoDvDweyVLyTD8ozwpSkBGVk+ jJ5IamUCZJqkiVqnxVRkvms3TR8ee7Fw+ziUJlXyh8x5gJfle633/veblaiKUCbW lf6ldn+nWhdVILy+U0SbSpR/Rm1X/GHNHE9CqrHaqhXXosXooRDDLPNNeC+nvHZk M1ubegsMW/HBCHvM+KkyJwlRd1V+NZo05EKQdxeT0cM48CL5swI3EI0OQuegnJlE 5WkV6pa9wjNfaTE3sG7gyAkUhFmcDsg+uBQzVCfBu6G0SLp/pePpZylO39iKnfTm XyrYDBAYuaFIjGDGzql+pHlTqGc7eI8= -----END CERTIFICATE-----Generated at Sun Sep 27 00:13:53 2026 by rpki-client