$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa File: 4c9f1b4e-8311-3d71-9b79-a652244709a6.roa (raw, json) Hash identifier: n1WRQ4zRXOawQFdTEmtlcviNUom2FMetZrEQYBApoCA= Subject key identifier: D8:C6:40:FF:2B:48:48:1C:34:3B:CC:CA:26:87:A0:6D:F7:1B:F2:51 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F11A1619D74A2DDF74A513480 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.2.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:61:9d:74:a2:dd:f7:4a:51:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a9081cc4-c648-4a65-a713-ee61fe2a4632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:d3:5f:55:f0:30:d7:60:b4:8c:b9:3e:da: 3f:00:44:b5:31:d0:0c:63:e9:b3:b2:ff:79:49:5a: 67:1a:06:79:87:ec:c0:c3:76:dd:9c:2e:97:55:21: 67:77:85:4f:c5:5f:df:d1:4f:9d:ea:0a:6f:7e:49: ba:b0:12:50:54:d8:cc:36:24:47:01:37:a0:37:01: 38:07:58:99:e5:e8:b0:29:c7:b3:e8:a7:03:f3:9f: d0:ae:62:54:64:a0:e3:95:0e:e3:08:fc:20:b8:84: fa:7b:84:35:46:6c:d6:3b:a1:d3:3a:bc:85:b2:e1: 6c:34:4d:27:fc:46:8c:fb:c6:f5:c6:86:6a:43:64: 31:6a:25:ab:b5:f8:24:7a:ae:85:2a:c1:b1:66:89: eb:d0:a8:04:88:77:16:d1:9a:07:af:cf:cc:65:d5: 15:b4:84:fe:68:c7:a9:cb:6f:98:c5:1c:70:e0:cc: 8b:60:93:98:b8:6f:cf:ab:e8:fa:44:8d:29:b3:6c: 18:ea:d0:fb:de:d2:42:30:fc:ed:1c:cb:d9:07:7b: d6:21:f5:ed:f1:53:45:a4:9e:51:ef:b9:bc:84:ce: bb:ee:17:ca:6e:0c:2e:c7:db:49:98:af:06:95:19: f1:7f:ca:cb:4a:eb:4f:0f:40:8d:a8:cd:25:75:f6: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C6:40:FF:2B:48:48:1C:34:3B:CC:CA:26:87:A0:6D:F7:1B:F2:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:fb:da:ac:bb:63:16:6a:45:19:79:44:9c:db:b9:de:f2:98: f7:98:e0:8e:78:66:22:f1:b0:3f:76:e9:82:47:d8:66:34:89: 29:68:7f:c5:7a:d3:5d:36:03:bb:30:96:14:ad:6a:72:1a:e6: 81:b1:3a:18:ed:f7:4c:02:84:8b:10:b2:9f:20:57:49:8e:02: 86:e6:09:49:a7:44:a9:4e:6c:60:83:59:e9:b2:bb:19:7b:b8: ae:cb:9f:5d:cb:ca:53:65:d1:ae:e5:48:45:35:ad:47:bf:bf: 55:13:4f:09:74:d7:71:e0:46:da:e6:a4:99:6f:5e:ee:f5:5c: bb:2a:a6:1b:e9:80:66:7d:2c:3d:cf:96:8a:ac:60:a9:19:ad: cb:ea:e4:f3:f6:51:1c:85:26:6d:97:8a:d3:1d:a3:38:ac:2a: 21:1b:e9:6d:de:bc:1b:5c:5e:c9:32:d6:41:0e:23:ed:42:e8: 16:4a:95:d9:1a:24:7c:97:30:90:be:16:40:37:d7:b7:63:1e: 76:83:5e:6e:cd:70:27:86:46:0e:22:be:5c:9e:44:b9:62:f2: ba:b0:92:42:0c:a8:c1:f9:a0:0d:f8:bf:29:4c:b3:0f:be:37: a8:2e:24:03:82:b5:6a:8d:6d:a8:78:de:79:93:c9:c9:d2:82: 98:2e:65:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoWGddKLd90pRNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTkwODFjYzQtYzY0OC00YTY1LWE3MTMtZWU2MWZlMmE0NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUzTX1XwMNdgtIy5Pto/AES1MdAMY+mzsv95 SVpnGgZ5h+zAw3bdnC6XVSFnd4VPxV/f0U+d6gpvfkm6sBJQVNjMNiRHATegNwE4 B1iZ5eiwKcez6KcD85/QrmJUZKDjlQ7jCPwguIT6e4Q1RmzWO6HTOryFsuFsNE0n /EaM+8b1xoZqQ2QxaiWrtfgkeq6FKsGxZonr0KgEiHcW0ZoHr8/MZdUVtIT+aMep y2+YxRxw4MyLYJOYuG/Pq+j6RI0ps2wY6tD73tJCMPztHMvZB3vWIfXt8VNFpJ5R 77m8hM677hfKbgwux9tJmK8GlRnxf8rLSutPD0CNqM0ldfaYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjGQP8rSEgcNDvMyiaHoG33G/JRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGM5ZjFiNGUtODMxMS0z ZDcxLTliNzktYTY1MjI0NDcwOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGigKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL72qy7YxZqRRl5RJzbud7ymPeY4I54ZiLxsD926YJH2GY0iSlof8V6 0102A7swlhStanIa5oGxOhjt90wChIsQsp8gV0mOAobmCUmnRKlObGCDWemyuxl7 uK7Ln13LylNl0a7lSEU1rUe/v1UTTwl013HgRtrmpJlvXu71XLsqphvpgGZ9LD3P loqsYKkZrcvq5PP2URyFJm2XitMdozisKiEb6W3evBtcXsky1kEOI+1C6BZKldka JHyXMJC+FkA317djHnaDXm7NcCeGRg4ivlyeRLli8rqwkkIMqMH5oA34vylMsw++ N6guJAOCtWqNbah43nmTycnSgpguZf0= -----END CERTIFICATE-----Generated at Mon Sep 21 12:57:38 2026 by rpki-client