$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa File: d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa (raw, json) Hash identifier: cTzoT00EYq+Dvbuw4nzW1CKJzxSWwYXyed7AtIbwMbo= Subject key identifier: 4A:4F:72:24:62:FD:85:C0:75:69:57:DE:3B:72:16:5C:AA:0B:0B:42 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E296F1B1496CBA3A07F493DC0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 62610 IP address blocks: 128.1.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:1b:14:96:cb:a3:a0:7f:49:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=2a9520ea-2347-4a9d-92a2-6912980b83b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:fd:b3:d3:4b:f4:a1:0b:df:cb:65:e8:d2: 29:46:31:e4:98:86:22:5e:98:06:aa:2f:80:00:a4: 0f:f4:17:cc:31:97:0e:62:e9:9e:f2:da:06:ce:11: 58:fa:9a:00:02:d0:85:03:a1:46:de:24:04:11:7b: cb:1a:7b:2a:30:08:1f:78:0e:a5:7e:48:6f:58:5e: 34:4c:c6:5a:00:cf:35:34:38:2b:1d:ff:a5:5b:16: de:52:50:3b:f8:66:05:8e:68:61:4b:8d:a4:92:ef: c9:44:ea:3b:d7:10:76:d2:8e:ac:af:56:47:1f:01: ca:9c:59:f4:6e:9f:db:28:9d:28:fc:60:4a:ba:8f: ec:4b:06:80:58:87:bd:4d:d1:c7:a9:01:c1:5e:ce: 40:c7:78:34:3d:09:87:7f:b7:e0:d1:1a:54:a0:31: 97:59:9a:12:da:35:47:09:95:44:58:78:c6:b3:5f: 00:82:45:df:58:77:f3:cd:73:91:4a:ad:fe:28:45: f1:4a:ec:fc:cb:6c:a1:70:50:d5:c5:cb:1f:b7:e4: 06:8e:2e:b6:dd:36:2a:24:6c:6f:02:d3:d7:84:72: 3f:d9:a0:48:39:15:9d:29:1b:06:cb:59:64:c3:1c: 73:45:bd:3e:9d:55:b4:b5:83:fe:a4:16:f6:88:4d: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:72:24:62:FD:85:C0:75:69:57:DE:3B:72:16:5C:AA:0B:0B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c4:f7:53:23:8f:82:de:a5:26:18:f7:68:24:b2:8f:cc:ee: b9:1e:3d:e7:f2:fb:e4:42:28:72:13:6a:d4:fe:95:9f:7f:e3: ba:85:f0:72:d7:50:c0:2a:87:de:44:cb:b8:f8:17:66:ab:91: ca:dc:dd:0e:8f:5d:2c:0b:88:65:36:be:24:2e:fe:a9:0c:75: a7:93:ce:ab:ef:93:f1:74:be:e6:43:0c:c5:f1:44:af:85:7d: 5a:b2:1d:0e:d8:e9:e3:d4:79:66:d0:4d:72:ea:af:9f:55:a9: 52:40:64:83:04:3b:4e:7b:23:27:3a:39:a1:4e:7d:d1:d1:ab: 5d:0e:d8:62:e8:d3:9b:93:91:c6:f5:a3:a2:ab:de:5b:29:c6: 4a:15:e2:87:ca:be:2e:eb:bb:09:2c:a8:7f:28:9e:7d:95:cf: da:c7:84:6b:29:07:f6:5c:50:40:8b:a0:20:a1:7a:c1:47:54: d9:16:01:90:67:19:80:11:58:8a:2a:2d:13:5a:18:b8:87:09: cb:cc:b4:a0:32:ae:13:7e:59:21:29:5f:16:1d:47:11:9a:d7: 24:af:20:35:e0:58:17:cb:70:50:d7:72:87:2c:4f:56:ec:24: e0:39:76:d1:5b:f5:92:58:f9:46:2a:35:d6:74:b3:8c:84:9d: fa:2c:2e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbxsUlsujoH9JPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk MmE5NTIwZWEtMjM0Ny00YTlkLTkyYTItNjkxMjk4MGI4M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTL9s9NL9KEL38tl6NIpRjHkmIYiXpgGqi+A AKQP9BfMMZcOYume8toGzhFY+poAAtCFA6FG3iQEEXvLGnsqMAgfeA6lfkhvWF40 TMZaAM81NDgrHf+lWxbeUlA7+GYFjmhhS42kku/JROo71xB20o6sr1ZHHwHKnFn0 bp/bKJ0o/GBKuo/sSwaAWIe9TdHHqQHBXs5Ax3g0PQmHf7fg0RpUoDGXWZoS2jVH CZVEWHjGs18AgkXfWHfzzXORSq3+KEXxSuz8y2yhcFDVxcsft+QGji623TYqJGxv AtPXhHI/2aBIORWdKRsGy1lkwxxzRb0+nVW0tYP+pBb2iE3vlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpPciRi/YXAdWlX3jtyFlyqCwtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZDIwZTZlOGUtMWUwNi0z MTE0LThlNGItYzFmM2U2OTNmNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3E91Mjj4LepSYY92gkso/M7rkePefy++RCKHITatT+lZ9/47qF8HLX UMAqh95Ey7j4F2arkcrc3Q6PXSwLiGU2viQu/qkMdaeTzqvvk/F0vuZDDMXxRK+F fVqyHQ7Y6ePUeWbQTXLqr59VqVJAZIMEO057Iyc6OaFOfdHRq10O2GLo05uTkcb1 o6Kr3lspxkoV4ofKvi7ruwksqH8onn2Vz9rHhGspB/ZcUECLoCChesFHVNkWAZBn GYARWIoqLRNaGLiHCcvMtKAyrhN+WSEpXxYdRxGa1ySvIDXgWBfLcFDXcocsT1bs JOA5dtFb9ZJY+UYqNdZ0s4yEnfosLs0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:01 2026 by rpki-client