$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa File: d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa (raw, json) Hash identifier: zxxWklFR1bFDw2yKvhV3NkpCnUg0lHSnm/lFNtjfPJY= Subject key identifier: 77:22:AB:18:8E:FE:89:2D:C2:97:48:56:84:D6:0E:DC:99:79:98:DA Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584ECBD1EBF67A1799434439E600 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 62610 IP address blocks: 128.1.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:eb:f6:7a:17:99:43:44:39:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=f6bcf5d0-8165-40fa-bd0a-08e5e83d1824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:82:05:c5:fb:c8:43:eb:6a:76:e4:93:b0: 48:7e:7e:f3:37:03:bc:50:84:70:37:8d:70:a7:50: 52:7f:6f:28:27:89:fc:0c:38:61:58:66:89:35:be: 4d:41:44:78:3c:c3:7b:ab:61:99:ff:aa:8d:c9:a0: 61:82:e3:1b:c3:a1:c6:32:f4:d6:8b:35:7d:be:1b: 48:a4:c9:2e:b6:69:ac:f8:fc:d6:04:b0:a0:5f:87: c4:d0:5a:ab:51:d6:ba:3f:c6:f1:a9:81:97:01:53: eb:2b:3a:71:f6:48:62:39:41:aa:8d:73:66:29:4c: f6:0e:32:19:cc:f4:16:5f:62:d6:cb:73:58:d1:56: ec:16:c9:4a:78:35:58:fb:f2:d1:bd:68:e5:23:2c: ef:d4:8a:9d:3d:6f:fd:ea:d0:1f:22:0c:1e:d2:25: c5:52:79:73:b1:e6:19:30:56:60:c2:ed:6b:53:67: f1:bc:e4:39:46:27:80:24:3c:db:5e:91:55:62:3d: ca:96:81:db:93:39:22:90:ac:c7:00:1a:a3:4b:44: 6c:c0:ad:7c:8b:91:ca:dd:a5:18:65:e8:e4:00:db: 68:43:49:74:af:b5:fe:9a:a0:1e:ba:0b:8b:65:a1: 96:46:0c:2c:6c:e1:55:44:5a:21:47:06:e6:77:38: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:AB:18:8E:FE:89:2D:C2:97:48:56:84:D6:0E:DC:99:79:98:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:67:cb:43:21:f5:30:2f:91:cb:b0:d0:41:e2:f4:2b:d6:63: 90:5d:f9:1a:69:6b:3a:f6:89:13:c6:24:a5:91:ae:17:46:86: 4f:99:a8:34:37:77:1f:a8:70:56:d1:bf:05:5e:76:32:ac:3e: 2f:39:be:42:b6:0a:c8:b9:2e:b2:13:de:c1:54:b1:d9:ed:72: 5e:ab:f2:c4:f0:4e:c9:7e:f7:81:6c:3e:cf:00:85:0b:eb:df: 7d:a3:41:94:36:54:bc:91:35:41:99:31:38:27:07:ba:3c:9d: a4:6a:e6:0a:92:93:9e:6d:66:95:dc:5f:83:41:fc:2d:e5:48: 9d:13:1c:52:d2:1a:98:e0:04:ee:47:7c:28:76:d7:12:95:55: 52:ef:a2:7d:57:20:03:f7:76:c5:50:81:fd:7e:ab:b0:ce:55: 8f:e4:16:bb:0d:23:d5:bf:66:e3:22:bf:11:ff:df:e5:0d:52: 19:89:bd:d7:de:b0:83:dc:ae:c8:ee:ba:e1:f3:c7:2c:21:59: 6e:18:70:0a:2a:ce:78:11:19:4e:c2:36:41:95:98:43:20:18: 3c:0f:6e:45:fa:28:5a:e7:a3:99:c1:ee:7d:fe:6c:5b:44:39: 91:bb:37:e7:7c:8e:a8:f6:e8:2e:08:c4:23:32:59:b4:8d:02: d1:d6:42:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0ev2eheZQ0Q55gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZjZiY2Y1ZDAtODE2NS00MGZhLWJkMGEtMDhlNWU4M2QxODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllqCBcX7yEPranbkk7BIfn7zNwO8UIRwN41w p1BSf28oJ4n8DDhhWGaJNb5NQUR4PMN7q2GZ/6qNyaBhguMbw6HGMvTWizV9vhtI pMkutmms+PzWBLCgX4fE0FqrUda6P8bxqYGXAVPrKzpx9khiOUGqjXNmKUz2DjIZ zPQWX2LWy3NY0VbsFslKeDVY+/LRvWjlIyzv1IqdPW/96tAfIgwe0iXFUnlzseYZ MFZgwu1rU2fxvOQ5RieAJDzbXpFVYj3KloHbkzkikKzHABqjS0RswK18i5HK3aUY ZejkANtoQ0l0r7X+mqAeuguLZaGWRgwsbOFVRFohRwbmdzhB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHciqxiO/oktwpdIVoTWDtyZeZjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZDIwZTZlOGUtMWUwNi0z MTE0LThlNGItYzFmM2U2OTNmNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVny0Mh9TAvkcuw0EHi9CvWY5Bd+Rppazr2iRPGJKWRrhdGhk+ZqDQ3 dx+ocFbRvwVedjKsPi85vkK2Csi5LrIT3sFUsdntcl6r8sTwTsl+94FsPs8AhQvr 332jQZQ2VLyRNUGZMTgnB7o8naRq5gqSk55tZpXcX4NB/C3lSJ0THFLSGpjgBO5H fCh21xKVVVLvon1XIAP3dsVQgf1+q7DOVY/kFrsNI9W/ZuMivxH/3+UNUhmJvdfe sIPcrsjuuuHzxywhWW4YcAoqzngRGU7CNkGVmEMgGDwPbkX6KFrno5nB7n3+bFtE OZG7N+d8jqj26C4IxCMyWbSNAtHWQqA= -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:17 2026 by rpki-client