$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa File: e166c054-c750-3fa9-ae7d-80d1294357cc.roa (raw, json) Hash identifier: WZVxuUpBUwhmAa90fNvZVRZeNFvpvW+tzSSgvEA7nCs= Subject key identifier: 48:F1:34:2A:ED:5E:C7:2A:5C:4D:35:F4:95:90:04:86:96:1B:C4:F9 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F11A1475E1AE06B5DD9B40260 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.1.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:47:5e:1a:e0:6b:5d:d9:b4:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=39a17dc6-366e-4dd5-b797-4af7614d3b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:58:59:6f:f1:c3:87:da:25:a5:5b:ba:bf: 04:aa:b4:d8:a8:cf:10:25:61:0e:a2:c7:f7:e0:6f: dc:63:17:1d:7e:72:d0:0d:9b:7c:06:46:e5:3b:90: 3f:14:45:a0:a8:e2:76:ec:fe:47:1c:05:e1:68:81: e0:e5:24:bc:ba:3a:48:fd:ad:91:01:4c:ae:67:e0: 78:f8:03:1f:c7:40:59:18:da:0c:6b:81:ef:89:5b: 49:26:15:3f:54:c1:7f:b3:3c:1d:8c:57:3f:b4:91: b6:60:5f:e1:4a:e7:2c:67:ec:c6:c1:1f:6a:eb:dd: 0b:c9:bf:f1:2e:a8:fc:7e:9d:ef:6c:63:4f:83:b2: 21:38:55:b3:28:cb:ce:c6:05:5a:8b:70:bf:c9:4b: 49:8a:16:1d:4b:12:0e:7c:71:60:3a:c4:62:38:f5: 4c:5c:c4:c0:e9:73:a8:75:62:96:41:1c:48:b8:e6: c5:97:51:23:87:e4:98:20:c3:7c:7b:b6:61:56:25: 12:f8:f7:41:0f:a5:68:22:b5:40:f8:4c:3b:20:4e: 3a:8d:ce:f5:9f:77:a7:1b:99:65:4f:43:82:a6:85: 59:ba:57:9c:84:4e:38:6c:16:4a:a4:9f:c1:ad:ac: 2a:70:4c:90:0f:fc:d7:8e:ce:7d:9d:72:b8:f3:07: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:34:2A:ED:5E:C7:2A:5C:4D:35:F4:95:90:04:86:96:1B:C4:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5f:f6:a1:f7:91:3b:3c:5e:22:fe:a6:8f:1a:2b:30:0b:1e: 62:c4:22:6b:56:a5:41:73:45:b4:5b:e4:0c:d8:83:17:a8:ef: ee:b4:b1:94:5b:e5:43:5c:15:a3:72:e2:ea:8c:25:94:28:bc: 94:eb:19:e1:15:13:61:08:86:9c:24:9e:49:e7:ff:c9:d4:45: bd:7e:cc:be:d1:0d:47:a1:21:1a:9b:80:18:65:38:5d:7d:e8: d7:23:b4:99:2e:42:33:4e:a6:4e:a1:7c:53:aa:6a:b7:19:0c: 0e:dc:02:72:56:f5:43:01:6b:79:1e:da:27:30:4a:59:fb:bd: b6:09:b6:b2:00:c6:d3:ea:7f:5e:9a:3a:23:16:4a:46:d1:95: 89:92:3c:eb:38:bd:da:5f:c2:a0:03:53:08:17:27:ce:27:f2: 4f:af:f0:e9:bf:e8:68:ae:8f:6f:86:90:fb:3f:07:58:52:0e: 5e:5a:6a:8d:9f:9c:3b:2c:e4:42:93:dd:8c:c2:9b:70:40:1d: 92:81:7a:b2:78:ad:a2:c3:b5:0f:80:2b:48:75:47:ea:2f:22: a2:ae:05:60:3a:47:48:23:ba:f1:6b:ec:b6:17:18:f9:ca:4c: 41:61:5e:43:8d:19:09:0d:8a:9d:63:1d:81:62:80:1a:3a:91: d6:8b:c2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUdeGuBrXdm0AmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzlhMTdkYzYtMzY2ZS00ZGQ1LWI3OTctNGFmNzYxNGQzYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3pYWW/xw4faJaVbur8EqrTYqM8QJWEOosf3 4G/cYxcdfnLQDZt8BkblO5A/FEWgqOJ27P5HHAXhaIHg5SS8ujpI/a2RAUyuZ+B4 +AMfx0BZGNoMa4HviVtJJhU/VMF/szwdjFc/tJG2YF/hSucsZ+zGwR9q690Lyb/x Lqj8fp3vbGNPg7IhOFWzKMvOxgVai3C/yUtJihYdSxIOfHFgOsRiOPVMXMTA6XOo dWKWQRxIuObFl1Ejh+SYIMN8e7ZhViUS+PdBD6VoIrVA+Ew7IE46jc71n3enG5ll T0OCpoVZulechE44bBZKpJ/BrawqcEyQD/zXjs59nXK48wdkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjxNCrtXscqXE019JWQBIaWG8T5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTE2NmMwNTQtYzc1MC0z ZmE5LWFlN2QtODBkMTI5NDM1N2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRf9qH3kTs8XiL+po8aKzALHmLEImtWpUFzRbRb5AzYgxeo7+60sZRb 5UNcFaNy4uqMJZQovJTrGeEVE2EIhpwknknn/8nURb1+zL7RDUehIRqbgBhlOF19 6NcjtJkuQjNOpk6hfFOqarcZDA7cAnJW9UMBa3ke2icwSln7vbYJtrIAxtPqf16a OiMWSkbRlYmSPOs4vdpfwqADUwgXJ84n8k+v8Om/6Giuj2+GkPs/B1hSDl5aao2f nDss5EKT3YzCm3BAHZKBerJ4raLDtQ+AK0h1R+ovIqKuBWA6R0gjuvFr7LYXGPnK TEFhXkONGQkNip1jHYFigBo6kdaLwug= -----END CERTIFICATE-----Generated at Tue Sep 22 21:13:51 2026 by rpki-client