$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa File: a30db407-116f-3eae-858f-a2a4c84444ed.roa (raw, json) Hash identifier: LsDjQ/rFaJnToNvXGKWz/dFOYXSLxkuRylW8Zd5Seok= Subject key identifier: 47:F7:23:71:BE:00:5F:51:C5:76:18:75:E3:E8:75:9C:83:9F:4A:D6 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584EA7914F18779142094BF30640 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15164 IP address blocks: 138.199.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:4f:18:77:91:42:09:4b:f3:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3ad8f5d4-ac37-407b-a17f-cf189ccf4722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:82:fd:79:39:5a:28:41:ba:3c:ce:db:fc: 84:b4:46:38:82:a9:ca:fc:e4:d9:58:c1:fa:a8:c5: 71:ac:49:0d:d3:ac:e9:02:c7:a4:7b:75:30:e9:18: e4:c9:da:f0:10:7e:7d:85:24:d6:9e:ec:c3:3a:85: cd:37:77:e4:69:06:c1:28:0d:02:f5:27:57:4c:c2: 9e:03:39:62:2a:26:74:d5:d9:29:e6:bd:2c:e7:3d: f0:e1:23:d8:f4:64:7c:70:00:54:2b:2f:53:b0:48: cf:69:1e:b1:a5:7f:a9:84:ca:e7:56:dc:6f:6d:e5: f1:ef:3d:fa:89:59:9d:f8:d0:3a:3b:50:4f:e3:18: d9:80:e7:27:30:37:b2:4b:8e:45:ae:0b:f8:b9:27: ba:fd:a3:2e:af:22:92:b8:18:33:f1:22:59:18:9a: 81:f5:92:a8:1d:bc:02:e0:01:1a:52:b4:2a:af:66: 39:15:bf:cb:ad:c9:a6:00:05:43:06:77:73:da:d9: cf:33:8d:68:35:46:86:75:62:22:17:2e:a7:88:9f: 88:f3:dc:bd:e8:18:38:f1:c3:e4:16:6d:90:8c:8c: 0d:1d:8e:dd:c1:11:04:68:cd:3e:16:fe:bb:4e:e4: ef:9f:50:29:4f:98:de:6e:ee:79:e3:13:d1:c3:81: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F7:23:71:BE:00:5F:51:C5:76:18:75:E3:E8:75:9C:83:9F:4A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2e:66:87:5c:d3:6c:78:59:3d:f9:c1:e8:6e:91:19:60:cf: e2:bd:5c:be:c4:a3:67:85:4e:ba:5a:45:21:4f:b4:a1:57:7a: db:03:cb:be:59:be:5d:dd:13:7b:a8:dc:fb:2b:32:94:24:86: 74:fd:6e:76:93:4c:8a:c8:7e:65:00:12:ab:d8:4f:73:47:3d: 7b:30:d9:b6:5b:22:fe:6d:a6:4b:20:85:08:9c:77:f5:9b:1c: 7f:9b:9c:8f:e1:ff:a1:51:8e:68:2d:b4:71:93:0b:cd:83:78: a8:98:f3:51:29:e5:49:7e:9e:ad:0e:e5:ae:e7:06:87:05:1f: d5:d9:f3:4b:b5:d3:5f:70:be:5e:95:b7:a1:23:32:58:46:fc: 4a:16:3c:73:e2:cc:f6:d2:d6:91:36:1d:87:84:89:4b:82:93: 72:de:8c:55:a0:f0:c3:67:c5:5a:3d:f1:c4:cc:83:56:46:cb: 82:9a:14:28:7a:aa:1d:a3:b2:b7:8c:c8:c3:59:a6:97:65:9d: dc:98:1f:65:3f:53:05:77:5b:56:f7:25:f0:14:c7:13:19:56: df:5b:cf:e2:7d:ce:a5:85:a3:49:14:8b:4a:99:92:87:02:b2: 09:1a:f2:92:44:e5:f1:02:b6:09:97:db:89:0e:8b:c0:2a:09: 79:b1:38:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkU8Yd5FCCUvzBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2FkOGY1ZDQtYWMzNy00MDdiLWExN2YtY2YxODljY2Y0NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrOC/Xk5WihBujzO2/yEtEY4gqnK/OTZWMH6 qMVxrEkN06zpAseke3Uw6RjkydrwEH59hSTWnuzDOoXNN3fkaQbBKA0C9SdXTMKe AzliKiZ01dkp5r0s5z3w4SPY9GR8cABUKy9TsEjPaR6xpX+phMrnVtxvbeXx7z36 iVmd+NA6O1BP4xjZgOcnMDeyS45Frgv4uSe6/aMuryKSuBgz8SJZGJqB9ZKoHbwC 4AEaUrQqr2Y5Fb/LrcmmAAVDBndz2tnPM41oNUaGdWIiFy6niJ+I89y96Bg48cPk Fm2QjIwNHY7dwREEaM0+Fv67TuTvn1ApT5jebu554xPRw4ENyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf3I3G+AF9RxXYYdePodZyDn0rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTMwZGI0MDctMTE2Zi0z ZWFlLTg1OGYtYTJhNGM4NDQ0NGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUuZodc02x4WT35wehukRlgz+K9XL7Eo2eFTrpaRSFPtKFXetsDy75Z vl3dE3uo3PsrMpQkhnT9bnaTTIrIfmUAEqvYT3NHPXsw2bZbIv5tpksghQicd/Wb HH+bnI/h/6FRjmgttHGTC82DeKiY81Ep5Ul+nq0O5a7nBocFH9XZ80u1019wvl6V t6EjMlhG/EoWPHPizPbS1pE2HYeEiUuCk3LejFWg8MNnxVo98cTMg1ZGy4KaFCh6 qh2jsreMyMNZppdlndyYH2U/UwV3W1b3JfAUxxMZVt9bz+J9zqWFo0kUi0qZkocC sgka8pJE5fECtgmX24kOi8AqCXmxOHs= -----END CERTIFICATE-----Generated at Wed Jul 29 22:43:40 2026 by rpki-client