$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f7b88285-811f-302f-aac2-049aeb25f98d.roa File: f7b88285-811f-302f-aac2-049aeb25f98d.roa (raw, json) Hash identifier: OZWGn1T6DMDPbqhNeODtnQyLP9LjVED4byQKWQYO0OI= Subject key identifier: A2:03:C1:D7:E9:8C:9B:15:D5:CB:F5:89:77:28:20:83:DC:3F:92:F4 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F0242156514CD8CC3AC68BF00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f7b88285-811f-302f-aac2-049aeb25f98d.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 150.230.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:15:65:14:cd:8c:c3:ac:68:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=a1b4f7f9-b354-4015-a158-c1f2cd3a4ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:f8:97:fe:69:3f:a3:72:7c:5a:36:d9:70: 35:32:1e:b5:32:98:39:41:47:19:b1:2f:c9:17:63: df:6a:55:41:36:a2:9f:db:22:b6:f6:0b:0d:19:92: 52:9c:58:fe:cf:78:5e:60:91:b3:9f:81:a8:a5:1b: cd:57:7a:0e:87:55:33:c8:99:4e:89:d7:6b:2c:b9: ee:b3:ab:df:4d:cb:5e:5d:b9:c9:4d:af:c0:92:9d: e0:fb:5c:97:07:ef:56:60:42:cb:1e:fb:06:da:7f: 91:51:aa:a6:bd:37:d3:9e:9c:fe:b4:f3:4f:0f:6c: 4a:b3:9b:47:88:a5:98:f6:45:c5:4a:75:b8:69:fb: 31:46:ad:fa:15:7d:d8:32:26:bd:60:1a:b0:43:68: 55:c7:a3:2e:79:92:12:ca:5b:15:aa:0b:fa:34:c2: ab:cc:2b:70:91:d8:79:f0:a2:2b:32:54:a8:e0:15: df:b7:82:fe:c7:96:33:ae:46:f7:54:b3:b5:21:d8: 93:78:97:62:d8:0a:03:1d:94:48:e1:40:ba:3e:ac: 9e:b3:a8:3d:68:5d:53:27:19:66:dc:07:9a:84:15: 33:be:41:15:af:d4:34:6a:06:92:59:07:e9:d5:d6: 52:c4:8e:e8:bb:e4:22:51:81:01:f0:ce:e4:5e:e0: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:C1:D7:E9:8C:9B:15:D5:CB:F5:89:77:28:20:83:DC:3F:92:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f7b88285-811f-302f-aac2-049aeb25f98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a1:2b:9c:5c:6b:2a:96:cd:32:7a:af:94:58:b0:c4:f5:30: e0:e6:88:55:0f:79:8a:38:1e:13:2f:65:9d:91:3c:8a:08:70: 70:b5:b2:fb:98:9e:01:20:7f:81:61:df:d5:62:2e:d8:36:99: 29:91:a4:01:97:ae:93:b1:bf:f3:5e:8b:2e:8c:b9:6d:44:43: c0:fc:c3:09:e9:11:73:37:5c:19:f1:3b:3d:e3:59:05:4f:40: 92:7a:9f:5a:82:d8:e9:70:e0:68:54:32:c0:75:41:03:90:ad: a7:10:54:61:ff:02:90:99:ec:9a:9c:df:82:46:39:4e:49:5b: 19:03:1e:f8:bc:48:dd:45:1d:ab:33:f3:39:d9:56:cd:9e:2f: bc:60:7c:55:a4:7c:18:20:5a:e1:36:ef:88:5c:43:9a:b4:e6: ee:6a:1e:18:eb:69:f1:3c:f1:01:ea:87:90:ae:31:80:6f:c2: 53:03:33:35:a4:d7:da:c8:a0:8f:ca:c6:1f:63:15:16:c2:18: 8f:0c:bc:8e:91:49:c8:b7:65:f2:16:f3:c4:f2:1f:3f:d0:21: dd:55:cc:fd:a4:95:f5:c6:51:a5:19:40:8a:3d:e0:19:9f:2f: 24:3c:77:87:e9:44:19:f7:1b:17:3d:48:cb:4e:fc:d7:29:33: ce:8d:86:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhVlFM2Mw6xovwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YTFiNGY3ZjktYjM1NC00MDE1LWExNTgtYzFmMmNkM2E0YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw/4l/5pP6NyfFo22XA1Mh61Mpg5QUcZsS/J F2PfalVBNqKf2yK29gsNGZJSnFj+z3heYJGzn4GopRvNV3oOh1UzyJlOiddrLLnu s6vfTcteXbnJTa/Akp3g+1yXB+9WYELLHvsG2n+RUaqmvTfTnpz+tPNPD2xKs5tH iKWY9kXFSnW4afsxRq36FX3YMia9YBqwQ2hVx6MueZISylsVqgv6NMKrzCtwkdh5 8KIrMlSo4BXft4L+x5Yzrkb3VLO1IdiTeJdi2AoDHZRI4UC6Pqyes6g9aF1TJxlm 3AeahBUzvkEVr9Q0agaSWQfp1dZSxI7ou+QiUYEB8M7kXuDgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIDwdfpjJsV1cv1iXcoIIPcP5L0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjdiODgyODUtODExZi0z MDJmLWFhYzItMDQ5YWViMjVmOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEluaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFahK5xcayqWzTJ6r5RYsMT1MODmiFUPeYo4HhMvZZ2RPIoIcHC1svuY ngEgf4Fh39ViLtg2mSmRpAGXrpOxv/Neiy6MuW1EQ8D8wwnpEXM3XBnxOz3jWQVP QJJ6n1qC2Olw4GhUMsB1QQOQracQVGH/ApCZ7Jqc34JGOU5JWxkDHvi8SN1FHasz 8znZVs2eL7xgfFWkfBggWuE274hcQ5q05u5qHhjrafE88QHqh5CuMYBvwlMDMzWk 19rIoI/Kxh9jFRbCGI8MvI6RSci3ZfIW88TyHz/QId1VzP2klfXGUaUZQIo94Bmf LyQ8d4fpRBn3Gxc9SMtO/NcpM86NhkY= -----END CERTIFICATE-----Generated at Sat Sep 26 08:34:40 2026 by rpki-client