$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e5fcb028-74f4-3acc-a7cf-c56e802127b1.roa File: e5fcb028-74f4-3acc-a7cf-c56e802127b1.roa (raw, json) Hash identifier: QQKyvo7pVJ70IUwQJ5WFqWsE1Ivl939EPJNgvl1SLDE= Subject key identifier: A9:25:34:51:C8:F0:AC:14:B0:D3:89:4F:13:02:7E:02:26:33:1E:0C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F119CE306D63D4AE7D3FD1900 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e5fcb028-74f4-3acc-a7cf-c56e802127b1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 138.1.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e3:06:d6:3d:4a:e7:d3:fd:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bfa5b024-3d58-4584-a7db-dff631588c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:ad:be:2d:90:ba:ad:2f:94:6f:1e:66:0f: 25:28:32:58:29:59:fb:63:42:5d:5d:e7:4e:00:47: bb:65:b8:4b:fa:74:f3:78:f2:22:82:fd:cd:1e:af: 8c:c2:1c:de:14:1f:d5:e8:27:13:e1:5e:1d:99:b8: 5d:96:6f:85:2c:fd:41:0d:da:e6:b1:4d:13:33:80: 82:00:9f:b8:9f:30:e2:a3:7d:dd:24:9d:d2:f4:8c: 03:2f:1d:1c:c7:43:cc:72:8c:15:24:a2:b1:f1:fa: 3d:ab:0d:c4:32:08:f3:37:82:85:85:4a:0c:70:f3: 21:63:68:4e:7f:99:86:52:3a:73:c7:db:a1:2d:2d: df:b1:11:71:ad:9b:86:c1:07:96:bd:71:23:e8:78: 0f:42:02:d4:94:4e:00:8d:86:ee:75:e6:a3:d9:5a: 09:a4:3c:44:92:91:25:81:78:89:8d:dc:fe:f6:e6: ec:9a:33:ab:cd:d0:55:c4:a5:5f:b5:b2:44:8d:33: a8:8c:91:97:31:3d:24:e1:35:14:19:6a:d4:48:30: 1d:12:91:c6:74:b7:9a:2a:ba:45:75:b3:32:af:c3: 5d:13:b5:ba:9f:c8:56:b4:49:a8:04:2b:e4:52:ba: fd:da:dd:f6:a9:42:54:83:00:2c:08:9b:35:8a:28: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:34:51:C8:F0:AC:14:B0:D3:89:4F:13:02:7E:02:26:33:1E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e5fcb028-74f4-3acc-a7cf-c56e802127b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:1e:3f:26:90:6f:1e:e5:88:fa:66:b2:b2:5d:40:02:27:09: a9:0c:9e:a7:b6:d8:f8:3c:58:07:60:b6:4f:6f:78:81:e4:70: 71:45:2e:ec:66:d0:57:2d:b2:bb:8c:fd:0c:6c:47:bc:d7:a4: 4e:9e:e4:b9:fa:55:af:f1:1d:3b:f1:4b:f2:b4:6b:d6:24:24: 0c:ee:8a:9c:b5:51:00:06:88:2b:4b:3c:f6:e4:cb:94:70:1b: 71:5c:10:e6:0f:89:0d:07:66:c9:15:66:5b:79:e8:3f:5f:72: b3:08:43:ac:29:7a:bb:59:7e:0e:87:34:1d:4d:f1:6e:13:d4: ee:f7:79:ab:e0:3d:39:67:72:7c:71:71:bb:41:d6:84:98:a0: 25:af:83:a3:aa:ec:1e:65:a5:9e:fa:06:6c:b7:4b:30:55:15: 7c:88:93:d4:f6:16:84:d5:ba:aa:ec:3a:ec:fa:78:c2:62:69: 52:13:19:09:22:ba:aa:52:0e:80:af:e6:64:14:02:00:95:78: 72:09:62:7f:d1:43:d5:4c:50:9c:df:60:8e:be:7c:95:2f:ec: 0a:d3:ac:e6:8b:cd:e4:29:a9:31:4a:d2:16:22:d3:3d:fb:e8: a4:70:74:13:52:95:da:5c:71:a5:5b:27:ce:dc:0c:c1:51:74: a5:55:90:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOMG1j1K59P9GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmZhNWIwMjQtM2Q1OC00NTg0LWE3ZGItZGZmNjMxNTg4YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCatvi2Quq0vlG8eZg8lKDJYKVn7Y0JdXedO AEe7ZbhL+nTzePIigv3NHq+MwhzeFB/V6CcT4V4dmbhdlm+FLP1BDdrmsU0TM4CC AJ+4nzDio33dJJ3S9IwDLx0cx0PMcowVJKKx8fo9qw3EMgjzN4KFhUoMcPMhY2hO f5mGUjpzx9uhLS3fsRFxrZuGwQeWvXEj6HgPQgLUlE4AjYbudeaj2VoJpDxEkpEl gXiJjdz+9ubsmjOrzdBVxKVftbJEjTOojJGXMT0k4TUUGWrUSDAdEpHGdLeaKrpF dbMyr8NdE7W6n8hWtEmoBCvkUrr92t32qUJUgwAsCJs1iijDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKklNFHI8KwUsNOJTxMCfgImMx4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTVmY2IwMjgtNzRmNC0z YWNjLWE3Y2YtYzU2ZTgwMjEyN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUePyaQbx7liPpmsrJdQAInCakMnqe22Pg8WAdgtk9veIHkcHFFLuxm 0FctsruM/QxsR7zXpE6e5Ln6Va/xHTvxS/K0a9YkJAzuipy1UQAGiCtLPPbky5Rw G3FcEOYPiQ0HZskVZlt56D9fcrMIQ6wpertZfg6HNB1N8W4T1O73eavgPTlncnxx cbtB1oSYoCWvg6Oq7B5lpZ76Bmy3SzBVFXyIk9T2FoTVuqrsOuz6eMJiaVITGQki uqpSDoCv5mQUAgCVeHIJYn/RQ9VMUJzfYI6+fJUv7ArTrOaLzeQpqTFK0hYi0z37 6KRwdBNSldpccaVbJ87cDMFRdKVVkDs= -----END CERTIFICATE-----Generated at Mon Sep 28 01:16:50 2026 by rpki-client