$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7287235e-6e19-31c3-9e9f-d55a13e5e683.roa File: 7287235e-6e19-31c3-9e9f-d55a13e5e683.roa (raw, json) Hash identifier: ZjzlsRe5eN/ex9fBfgOS41w7fJCPIpyy5pSjfDAzabE= Subject key identifier: 7F:76:BC:C0:72:1F:92:17:A6:34:14:EC:6D:57:C4:81:4B:E2:C1:85 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F13023CDC886AF3EC070FF600 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7287235e-6e19-31c3-9e9f-d55a13e5e683.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 138.1.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3c:dc:88:6a:f3:ec:07:0f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=0fd61e2f-ced5-4499-838d-6a235d4b9fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:57:0d:b0:8f:e9:82:d9:d4:e9:07:af:18: a0:5d:37:39:72:20:30:b0:ff:65:0a:58:c2:d6:d5: 83:29:35:13:22:56:7f:44:23:94:45:ae:70:09:14: 0b:84:3b:71:11:93:8b:83:91:33:77:99:ea:6f:58: aa:2b:8b:26:42:d0:b8:03:6b:95:2f:ab:c4:d0:ea: 98:a2:bc:5e:3f:84:19:7d:53:6b:1e:56:22:dc:27: df:a9:8a:ac:59:16:f8:1b:57:62:13:25:5b:a1:d7: 54:63:64:f1:70:20:25:79:ca:f1:58:65:81:35:1d: 9c:02:85:5c:36:34:7b:e5:a8:94:8a:87:8a:d4:c1: 13:f3:cd:32:04:ed:63:4d:77:bb:af:6d:ab:33:3b: ab:05:16:81:4b:68:c0:ca:71:98:b8:c0:89:c9:50: d6:63:d8:d5:e6:fc:b0:c1:a2:4d:32:12:e6:07:89: 8d:aa:03:22:e4:ef:03:cc:64:d4:de:4a:de:15:2a: 4b:b4:31:34:50:5d:0f:14:fe:6f:97:17:05:34:16: 1b:31:f8:c8:0b:a2:29:1b:52:6e:50:8d:3d:25:85: a5:ce:74:86:86:1a:2a:27:05:ec:e7:7e:b1:0f:3b: a0:f1:ea:5a:66:aa:52:c1:3f:5b:62:f8:d2:50:54: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:76:BC:C0:72:1F:92:17:A6:34:14:EC:6D:57:C4:81:4B:E2:C1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7287235e-6e19-31c3-9e9f-d55a13e5e683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6a:d9:da:3e:61:f6:6d:86:ed:a5:6d:93:b4:39:19:fe:b9: 15:68:fc:61:43:48:1a:09:2c:d0:4b:fa:37:95:da:0d:7e:dc: b0:8e:1a:0c:57:2b:8d:f4:f1:de:c5:43:41:f6:db:a2:e4:56: 13:01:93:2b:c7:94:3b:95:e1:1b:ea:31:57:07:95:7a:d2:e3: e7:24:eb:52:6c:4d:13:49:1a:7a:71:f2:ce:be:b4:ec:e4:be: b1:9d:0d:56:75:5c:80:67:a4:a6:2c:30:b5:fb:1a:7a:bb:dc: 7d:8c:a6:64:ed:02:4d:b8:7b:b6:e0:f9:06:93:8e:6d:f1:b4: b3:21:fd:dd:cf:52:13:63:6d:89:df:42:92:d9:3f:a6:62:50: ca:69:63:b0:10:6a:e9:44:ce:6f:09:64:bc:66:e0:4e:e1:f2: 04:d4:6d:b9:6e:32:0f:f0:9e:4a:0d:1d:7a:eb:3b:28:52:65: 9a:cf:bf:88:f5:77:32:b7:d7:b4:70:51:1b:42:fb:e1:cc:aa: fa:06:18:d0:58:9f:fe:c1:d4:32:44:06:81:0c:a2:c1:bf:60: 0f:ba:12:01:32:f3:72:c6:10:72:44:26:ab:fd:7c:ea:db:d7: 90:95:85:e6:ec:26:28:35:cd:a9:49:dd:dc:20:1c:7f:83:9c: 2d:ce:9e:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjzciGrz7AcP9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MGZkNjFlMmYtY2VkNS00NDk5LTgzOGQtNmEyMzVkNGI5ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRBXDbCP6YLZ1OkHrxigXTc5ciAwsP9lCljC 1tWDKTUTIlZ/RCOURa5wCRQLhDtxEZOLg5Ezd5nqb1iqK4smQtC4A2uVL6vE0OqY orxeP4QZfVNrHlYi3CffqYqsWRb4G1diEyVboddUY2TxcCAlecrxWGWBNR2cAoVc NjR75aiUioeK1MET880yBO1jTXe7r22rMzurBRaBS2jAynGYuMCJyVDWY9jV5vyw waJNMhLmB4mNqgMi5O8DzGTU3kreFSpLtDE0UF0PFP5vlxcFNBYbMfjIC6IpG1Ju UI09JYWlznSGhhoqJwXs536xDzug8epaZqpSwT9bYvjSUFQWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH92vMByH5IXpjQU7G1XxIFL4sGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNzI4NzIzNWUtNmUxOS0z MWMzLTllOWYtZDU1YTEzZTVlNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdq2do+YfZthu2lbZO0ORn+uRVo/GFDSBoJLNBL+jeV2g1+3LCOGgxX K4308d7FQ0H226LkVhMBkyvHlDuV4RvqMVcHlXrS4+ck61JsTRNJGnpx8s6+tOzk vrGdDVZ1XIBnpKYsMLX7Gnq73H2MpmTtAk24e7bg+QaTjm3xtLMh/d3PUhNjbYnf QpLZP6ZiUMppY7AQaulEzm8JZLxm4E7h8gTUbbluMg/wnkoNHXrrOyhSZZrPv4j1 dzK317RwURtC++HMqvoGGNBYn/7B1DJEBoEMosG/YA+6EgEy83LGEHJEJqv9fOrb 15CVhebsJig1zalJ3dwgHH+DnC3OnuM= -----END CERTIFICATE-----Generated at Mon Sep 21 18:39:51 2026 by rpki-client