$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa File: 44005de6-2c73-3965-8b2b-252b2fba62ab.roa (raw, json) Hash identifier: A+yvUm9FrYVT5d2NVhvbxSnFAMwv2wC+MQwp8f2FbFI= Subject key identifier: 4D:F6:13:B1:4C:27:08:9E:00:EE:EC:04:94:A2:D5:9D:E8:A2:8F:E3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B62467D987F92057D34E3E0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 138.2.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:46:7d:98:7f:92:05:7d:34:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=5c53de04-7829-498b-8b8b-b3879e916c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:65:76:39:6e:59:3d:0b:53:43:38:84:58: bb:3c:de:15:4a:d7:72:5b:c4:3c:22:d6:95:50:11: cd:74:bf:ab:65:48:88:6a:76:a5:b7:9e:45:3c:08: 8a:49:93:34:f0:fb:72:54:2e:92:8d:63:1b:d4:66: db:4e:f8:66:be:c9:0a:dd:02:32:7e:fb:7d:2e:4a: 90:5d:c0:da:fb:e4:0b:34:7f:f8:48:bd:fa:c4:2a: 3c:a0:d1:0b:8a:84:d3:1c:aa:34:e3:96:25:95:60: 1c:a3:b0:33:3a:c5:d9:51:a0:cc:b5:6f:32:d9:e4: bf:a0:1b:d6:3f:fc:f4:27:a0:44:0a:83:d6:7a:09: 4d:f6:f5:de:b7:ff:e0:fd:2f:bc:5f:17:85:ea:f5: 9b:4a:65:cd:8d:8c:c2:ee:70:c7:d0:34:b2:a6:32: 7d:88:00:9c:89:d9:86:41:2c:ce:08:34:60:82:d9: 69:99:65:fa:07:5a:50:5e:4e:27:be:74:5a:c3:89: ea:af:96:aa:5a:ab:86:86:22:eb:0a:b5:aa:3a:70: 19:5c:78:0a:18:43:0b:22:d4:fa:9e:c0:0c:92:cd: 28:88:c1:7f:b2:73:f0:d0:37:ae:ee:bf:d9:e3:51: 11:da:21:02:c5:31:70:7b:6d:f9:92:ab:80:23:8e: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:13:B1:4C:27:08:9E:00:EE:EC:04:94:A2:D5:9D:E8:A2:8F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2e:9d:10:0b:d3:86:88:bb:57:25:85:34:36:ec:fa:20:a5: 86:bc:5e:b8:a6:80:9f:e4:3d:08:e8:e8:a3:d5:57:a2:05:4c: 45:aa:71:ac:55:5b:dd:6e:a5:52:f5:8b:6f:88:05:21:4f:3c: dc:6b:21:5d:43:01:f5:76:5f:a3:c8:a6:19:ef:26:7e:44:d1: f5:03:d4:87:91:04:a9:68:2f:1d:56:c4:21:43:16:32:1a:eb: b1:c0:9b:fa:31:28:ce:ee:f8:6c:cf:60:97:7d:a2:bc:37:4a: 0f:09:ec:3e:3c:64:8f:5c:ba:ef:40:cf:9d:c0:fd:98:c8:8c: 69:08:bd:84:34:30:76:ac:1e:69:c2:60:15:ee:fc:6c:16:66: ec:cc:4c:e4:e8:44:15:7f:f5:b4:74:12:05:ab:7c:60:2d:51: e9:fa:42:04:e3:51:31:5e:36:86:b9:76:7a:4e:5e:7f:1c:13: c6:e0:e2:66:42:37:9a:c5:6a:d7:29:91:8a:fa:43:c2:10:a6: 8c:ea:3b:a0:81:a4:cd:54:64:7c:e2:4c:e3:3a:9f:ec:c0:32: 55:4c:a6:bd:b2:e3:88:ba:0f:c8:fc:c0:38:bf:3c:5b:20:1c: eb:b4:80:93:8b:da:d4:eb:5f:4c:06:df:4a:f8:d4:9b:b3:5e: ca:de:ed:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkZ9mH+SBX004+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NWM1M2RlMDQtNzgyOS00OThiLThiOGItYjM4NzllOTE2YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr55ldjluWT0LU0M4hFi7PN4VStdyW8Q8ItaV UBHNdL+rZUiIanalt55FPAiKSZM08PtyVC6SjWMb1GbbTvhmvskK3QIyfvt9LkqQ XcDa++QLNH/4SL36xCo8oNELioTTHKo045YllWAco7AzOsXZUaDMtW8y2eS/oBvW P/z0J6BECoPWeglN9vXet//g/S+8XxeF6vWbSmXNjYzC7nDH0DSypjJ9iACcidmG QSzOCDRggtlpmWX6B1pQXk4nvnRaw4nqr5aqWquGhiLrCrWqOnAZXHgKGEMLItT6 nsAMks0oiMF/snPw0Deu7r/Z41ER2iECxTFwe235kquAI45HBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE32E7FMJwieAO7sBJSi1Z3ooo/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDQwMDVkZTYtMmM3My0z OTY1LThiMmItMjUyYjJmYmE2MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgunRAL04aIu1clhTQ27PogpYa8XrimgJ/kPQjo6KPVV6IFTEWqcaxV W91upVL1i2+IBSFPPNxrIV1DAfV2X6PIphnvJn5E0fUD1IeRBKloLx1WxCFDFjIa 67HAm/oxKM7u+GzPYJd9orw3Sg8J7D48ZI9cuu9Az53A/ZjIjGkIvYQ0MHasHmnC YBXu/GwWZuzMTOToRBV/9bR0EgWrfGAtUen6QgTjUTFeNoa5dnpOXn8cE8bg4mZC N5rFatcpkYr6Q8IQpozqO6CBpM1UZHziTOM6n+zAMlVMpr2y44i6D8j8wDi/PFsg HOu0gJOL2tTrX0wG30r41JuzXsre7co= -----END CERTIFICATE-----Generated at Tue Sep 22 10:25:26 2026 by rpki-client