$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa File: 904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa (raw, json) Hash identifier: cs69FsFyjEcM+oNXBS/zJ2ZxmYxkjKpBirgNh+V93M4= Subject key identifier: 01:38:7B:DE:FD:61:6B:D3:5D:DC:2D:19:23:C2:E2:59:E5:A4:87:66 Certificate issuer: /CN=138c0ded-cfd2-4f72-990a-14e5d333a61c Certificate serial: 010D0C9F4328584E6B5FE6F31B2B0A79A1436740 Authority key identifier: 8B:ED:E4:4F:0D:1A:DE:B3:F6:3C:0D:68:53:FE:D1:80:08:78:EC:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa Signing time: Tue 07 Jul 2026 11:53:14 +0000 ROA not before: Tue 07 Jul 2026 11:53:14 +0000 ROA not after: Mon 05 Oct 2026 11:53:14 +0000 asID: 55201 IP address blocks: 169.128.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/138c0ded-cfd2-4f72-990a-14e5d333a61c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/138c0ded-cfd2-4f72-990a-14e5d333a61c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:5f:e6:f3:1b:2b:0a:79:a1:43:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138c0ded-cfd2-4f72-990a-14e5d333a61c Validity Not Before: Jul 7 11:53:14 2026 GMT Not After : Oct 5 11:53:14 2026 GMT Subject: CN=18782971-b9a6-4b18-986d-64672de654f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:33:14:ef:13:5a:ac:9e:7a:64:c0:d1:d3: 58:8c:a7:f7:32:87:9d:09:d2:d3:7a:15:69:92:5e: 72:64:3f:03:bf:9f:de:41:82:15:d1:b6:81:e1:3e: 2d:68:21:8b:80:1d:95:31:e6:5a:6d:1c:a1:8b:47: 66:ad:91:98:d4:d4:44:75:db:70:47:59:d1:73:19: a9:bc:39:ee:f9:ec:1c:25:81:9f:54:87:76:2f:e8: 70:9e:bc:15:f8:b6:fc:19:5c:8d:53:de:e0:38:69: 7c:72:e8:c2:07:39:b4:68:98:46:4a:6c:be:bc:42: 1d:b1:c8:d3:c0:71:45:ae:06:3a:66:d1:86:29:f6: e6:3d:d6:bd:67:9d:bc:15:68:41:51:f1:e4:4f:fa: 75:9b:ab:fa:30:91:18:93:08:46:dd:09:a5:ea:e8: ab:98:19:00:ed:e5:f0:40:8b:8f:81:75:43:ce:64: ca:50:66:49:34:1b:9e:44:c0:8b:62:2b:16:c1:1b: a6:79:f4:c5:ec:07:42:f3:2f:79:b5:75:6f:8d:88: 3e:ec:bf:78:ff:0c:b0:ac:b2:ac:62:2b:07:5d:9d: 65:a4:74:7e:de:02:a3:71:1d:d1:9d:18:8b:6f:5b: 85:73:af:24:cc:7b:c4:f7:2d:d0:7f:36:cb:bd:90: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:38:7B:DE:FD:61:6B:D3:5D:DC:2D:19:23:C2:E2:59:E5:A4:87:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/138c0ded-cfd2-4f72-990a-14e5d333a61c.crl X509v3 Authority Key Identifier: keyid:8B:ED:E4:4F:0D:1A:DE:B3:F6:3C:0D:68:53:FE:D1:80:08:78:EC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c.cer sbgp-ipAddrBlock: critical IPv4: 169.128.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f1:24:a1:e8:c0:81:2b:8c:ff:20:cf:57:96:04:36:a2:7d: f2:2f:9d:12:70:63:53:eb:2b:e0:74:43:e0:e2:90:c1:ad:32: c1:b5:7c:79:98:b6:bd:f0:b5:09:63:b8:4b:5f:7e:e0:6a:a3: 62:42:85:93:3a:14:e5:41:53:65:80:bc:a4:5c:56:7e:40:45: f3:56:82:ff:5b:67:71:2b:53:68:1b:4e:6b:f4:b9:15:65:07: d1:cb:5d:e0:d8:a9:d5:7c:ec:27:c5:08:bb:47:d8:d2:6f:56: 87:f8:9c:87:a8:bb:9c:8e:c8:2b:25:c0:00:fc:0f:f6:4f:45: ed:e5:d6:3f:78:e9:bc:ec:92:08:bc:6e:f9:0d:cc:4f:53:d8: c7:20:49:13:f7:75:8d:97:44:71:f3:b5:53:70:fd:20:45:5d: 1f:04:6c:1d:7a:88:15:19:5a:d0:0f:ed:60:31:6e:dd:cc:e1: cb:ec:db:fd:36:e6:92:e2:f8:ed:1a:c6:4b:2e:99:49:57:65: 48:c6:23:d2:ba:94:da:cd:e5:2d:76:83:47:78:fe:d5:97:ed: 5a:06:d9:b2:84:6a:ee:c0:65:27:95:90:a8:aa:b7:4f:ce:db: 69:c6:14:6d:54:50:0d:db:2f:9d:bb:07:5c:01:80:7e:ff:05: 51:d1:c5:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rX+bzGysKeaFDZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4YzBkZWQtY2ZkMi00ZjcyLTk5MGEtMTRlNWQzMzNh NjFjMB4XDTI2MDcwNzExNTMxNFoXDTI2MTAwNTExNTMxNFowLzEtMCsGA1UEAxMk MTg3ODI5NzEtYjlhNi00YjE4LTk4NmQtNjQ2NzJkZTY1NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8czFO8TWqyeemTA0dNYjKf3MoedCdLTehVp kl5yZD8Dv5/eQYIV0baB4T4taCGLgB2VMeZabRyhi0dmrZGY1NREddtwR1nRcxmp vDnu+ewcJYGfVId2L+hwnrwV+Lb8GVyNU97gOGl8cujCBzm0aJhGSmy+vEIdscjT wHFFrgY6ZtGGKfbmPda9Z528FWhBUfHkT/p1m6v6MJEYkwhG3Qml6uirmBkA7eXw QIuPgXVDzmTKUGZJNBueRMCLYisWwRumefTF7AdC8y95tXVvjYg+7L94/wywrLKs YisHXZ1lpHR+3gKjcR3RnRiLb1uFc68kzHvE9y3QfzbLvZCzDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE4e979YWvTXdwtGSPC4lnlpIdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xMzhj MGRlZC1jZmQyLTRmNzItOTkwYS0xNGU1ZDMzM2E2MWMvOTA0YTVjMzMtYTVjZS0z YzgxLTljYjYtN2FjYmU4NWE2MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMTM4YzBkZWQtY2ZkMi00ZjcyLTk5 MGEtMTRlNWQzMzNhNjFjLzEzOGMwZGVkLWNmZDItNGY3Mi05OTBhLTE0ZTVkMzMz YTYxYy5jcmwwHwYDVR0jBBgwFoAUi+3kTw0a3rP2PA1oU/7RgAh47LAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xMzhjMGRlZC1jZmQyLTRmNzItOTkwYS0xNGU1 ZDMzM2E2MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbxJKHowIErjP8gz1eWBDaiffIvnRJwY1PrK+B0Q+DikMGtMsG1fHmY tr3wtQljuEtffuBqo2JChZM6FOVBU2WAvKRcVn5ARfNWgv9bZ3ErU2gbTmv0uRVl B9HLXeDYqdV87CfFCLtH2NJvVof4nIeou5yOyCslwAD8D/ZPRe3l1j946bzskgi8 bvkNzE9T2McgSRP3dY2XRHHztVNw/SBFXR8EbB16iBUZWtAP7WAxbt3M4cvs2/02 5pLi+O0axksumUlXZUjGI9K6lNrN5S12g0d4/tWX7VoG2bKEau7AZSeVkKiqt0/O 22nGFG1UUA3bL527B1wBgH7/BVHRxdk= -----END CERTIFICATE-----Generated at Fri Jul 10 17:21:06 2026 by rpki-client