$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa File: a689957c-73d9-39c9-aa63-169e1dec2e34.roa (raw, json) Hash identifier: /zIdsuC6LwrWp4NQu094bIheDd0pE9AUL0EbUbp8eHA= Subject key identifier: 88:22:54:01:66:93:71:E9:BA:22:9D:AF:1B:AC:DF:23:DA:07:E4:04 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F119D024AF169935061E27E90 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.1.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:02:4a:f1:69:93:50:61:e2:7e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2a8783fe-89f7-4001-87a5-61c112345884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:2a:f8:14:04:5b:c1:99:9a:e5:88:d8:97: 36:a5:9a:0c:18:0b:db:d0:82:96:79:38:54:17:88: 5f:cb:70:c5:bc:f9:00:58:4c:2d:87:f2:c9:9e:d3: 19:1e:aa:80:ff:89:c1:54:8a:3e:3d:c3:d9:83:ea: c0:5e:30:22:d4:ab:50:a9:16:c3:73:4a:0b:48:9d: 02:7a:f6:78:15:cf:7b:18:57:45:6f:cb:ff:7f:56: f0:90:fb:d5:b8:c9:07:8e:a4:75:e4:9e:75:14:7e: ae:7c:d5:fe:95:80:e0:da:06:72:07:b8:7c:7c:80: 56:3c:bf:48:4d:08:71:4e:79:e5:b1:05:69:1b:d6: 60:54:bb:ba:e7:b1:2f:68:bb:7d:79:34:32:5c:38: 4a:11:33:e7:0e:24:d0:b4:f2:5c:e9:22:f5:8c:ab: 6a:25:60:ea:e3:75:aa:a1:ec:10:54:3a:09:cb:a7: 16:99:bf:3c:07:67:8c:fd:5e:e6:e0:b0:66:c4:28: 0a:7d:fa:f5:05:99:f8:a7:20:90:e3:af:92:1e:6e: be:ca:d6:53:15:58:11:89:15:2f:0d:4e:d8:8f:aa: 9c:9c:e3:31:a6:37:fc:75:3f:3c:61:cf:09:52:09: da:ad:48:a6:06:ae:54:84:e9:7a:8a:5e:f2:cc:74: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:22:54:01:66:93:71:E9:BA:22:9D:AF:1B:AC:DF:23:DA:07:E4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:20:0d:77:80:77:69:76:52:e4:f3:d0:4e:ce:28:10:ac:03: 5d:a0:eb:45:7c:98:dd:2e:bf:36:b1:0b:36:1e:10:65:a8:3f: 69:97:ad:98:8b:40:b3:48:49:da:4b:b5:8f:c8:4a:69:32:d3: d8:41:f0:18:c5:80:54:6c:ce:78:7b:19:60:c0:1d:a1:64:fd: fd:a9:92:d5:a8:9e:14:70:ea:9f:17:75:19:e0:04:bc:1e:60: ef:9c:02:30:62:7a:e9:1d:74:c6:e8:5a:f3:f7:a5:e8:00:39: 82:4a:a6:9c:fd:33:65:89:10:12:80:cd:af:0c:74:83:c3:0c: 74:15:34:e5:28:24:2e:eb:ef:19:55:75:f6:7b:11:72:5a:90: 25:09:1c:7e:06:b1:64:bb:2b:44:f6:54:91:41:17:f0:74:62: ff:4c:5e:cb:2f:4e:b4:56:4d:c2:b8:fe:5a:b8:2b:0d:8d:13: d4:51:3a:c2:af:b6:d6:c7:27:8c:71:22:6e:bd:8e:dc:46:8c: 07:e3:d5:22:f5:64:03:59:c0:71:9e:61:4a:3f:c6:14:a5:9f: 61:3b:84:6d:c3:8a:fa:91:d4:64:55:a7:31:a4:56:80:80:3b: 93:5f:6b:ca:62:c7:77:17:68:8a:87:6c:02:56:91:37:5a:d3: f1:f9:f3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQJK8WmTUGHifpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE4NzgzZmUtODlmNy00MDAxLTg3YTUtNjFjMTEyMzQ1ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q0q+BQEW8GZmuWI2Jc2pZoMGAvb0IKWeThU F4hfy3DFvPkAWEwth/LJntMZHqqA/4nBVIo+PcPZg+rAXjAi1KtQqRbDc0oLSJ0C evZ4Fc97GFdFb8v/f1bwkPvVuMkHjqR15J51FH6ufNX+lYDg2gZyB7h8fIBWPL9I TQhxTnnlsQVpG9ZgVLu657EvaLt9eTQyXDhKETPnDiTQtPJc6SL1jKtqJWDq43Wq oewQVDoJy6cWmb88B2eM/V7m4LBmxCgKffr1BZn4pyCQ46+SHm6+ytZTFVgRiRUv DU7Yj6qcnOMxpjf8dT88Yc8JUgnarUimBq5UhOl6il7yzHTuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgiVAFmk3HpuiKdrxus3yPaB+QEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYTY4OTk1N2MtNzNkOS0z OWM5LWFhNjMtMTY5ZTFkZWMyZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEgDXeAd2l2UuTz0E7OKBCsA12g60V8mN0uvzaxCzYeEGWoP2mXrZiL QLNISdpLtY/ISmky09hB8BjFgFRsznh7GWDAHaFk/f2pktWonhRw6p8XdRngBLwe YO+cAjBieukddMboWvP3pegAOYJKppz9M2WJEBKAza8MdIPDDHQVNOUoJC7r7xlV dfZ7EXJakCUJHH4GsWS7K0T2VJFBF/B0Yv9MXssvTrRWTcK4/lq4Kw2NE9RROsKv ttbHJ4xxIm69jtxGjAfj1SL1ZANZwHGeYUo/xhSln2E7hG3DivqR1GRVpzGkVoCA O5Nfa8pix3cXaIqHbAJWkTda0/H583A= -----END CERTIFICATE-----Generated at Mon Sep 28 23:00:35 2026 by rpki-client