$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa File: 5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa (raw, json) Hash identifier: g49I0Hw45OaiCVi99X+UZCjFbDQF8ybZjhGhZt0SiAg= Subject key identifier: E7:C5:0E:9D:83:DD:B7:05:E4:FA:46:AF:4B:15:9D:39:D7:1C:E0:BD Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584EFCACC8A5873547F04AE26E00 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 11260 IP address blocks: 24.129.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c8:a5:87:35:47:f0:4a:e2:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=437b9458-bc22-4229-a6c8-ff5bce18fa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cd:9b:0a:c6:9e:f7:68:97:5a:e4:14:44:6b: 1c:e4:0c:c8:02:82:22:70:26:27:3c:00:28:4e:f2: 67:c1:b5:42:04:d9:c9:39:61:e9:15:7f:3d:77:04: e9:51:c4:25:21:15:ce:c3:59:69:c8:d3:f9:5b:0b: f5:fe:cb:e1:a9:3b:60:55:ae:64:2d:fd:10:ea:5b: b5:34:87:20:02:e7:27:63:82:67:88:70:d0:98:1a: 18:33:8d:1c:4d:8c:c3:a6:85:f1:ca:16:90:18:37: 54:d0:7c:29:82:d7:e6:6f:68:4f:f2:ec:fe:86:e4: be:bf:61:1b:e9:79:7d:d9:77:c2:f4:1d:0e:e9:3d: 9b:6b:80:2c:5d:80:37:45:1b:22:d6:53:e2:96:48: 87:6a:ff:0a:47:90:20:05:64:16:54:07:cd:fd:a0: 02:7d:a6:da:88:33:47:c9:de:21:75:06:b9:70:4e: 84:71:82:cf:d1:0e:7c:e0:6e:8c:44:d5:3a:19:19: 5a:0d:b1:c8:6c:24:5e:85:2f:bb:9d:8a:af:84:8b: bb:0e:01:7b:ff:ef:84:b1:6c:e9:17:35:4a:55:9d: 5f:c9:71:78:fc:17:4b:0b:6d:a3:35:45:60:e3:87: af:b3:af:ae:54:b1:2c:9e:43:74:35:5b:cb:fb:b4: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C5:0E:9D:83:DD:B7:05:E4:FA:46:AF:4B:15:9D:39:D7:1C:E0:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 24.129.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7a:2d:6d:ce:4f:24:35:97:af:85:58:ed:29:e6:f1:d7:f9: de:b8:ed:20:d1:7c:95:5d:22:36:d0:14:92:0c:6b:fd:f5:93: 3e:e2:67:21:f6:1d:0b:e4:ab:b7:40:fc:3f:08:9d:e7:a4:ef: 3a:ae:b0:a5:30:bc:83:dc:1b:f2:96:9f:bc:94:47:15:dc:74: 31:68:57:ad:21:0a:ba:9a:e2:98:a8:de:b9:c5:c1:4e:25:91: 6c:6e:4e:2e:5d:a0:f0:e6:00:1f:7a:11:9d:52:3f:a4:18:87: b9:9b:d7:41:e2:98:96:9c:66:6d:8a:1e:51:8a:9a:42:03:07: 03:85:71:79:01:b0:60:b0:74:85:36:29:bf:a9:bd:cb:c6:5e: 79:ef:b1:57:bc:a2:b9:7b:2a:90:c3:12:81:2f:8b:c9:04:0e: c0:c0:c1:cd:50:f0:ca:dc:21:1a:b7:b2:70:8f:b4:78:cb:ae: 5a:75:9c:bc:ac:ea:b7:0d:bc:ad:0b:b4:c6:de:78:66:60:10: 70:7e:c7:54:4c:e6:f7:ac:c1:2d:ce:6c:ba:86:4d:1d:91:e9: 54:52:58:fe:bb:f4:bb:32:b7:4e:87:9d:81:fd:27:40:ea:03: 9e:b3:85:f4:23:26:39:09:79:27:d8:d8:2f:6a:19:ec:5e:70: f4:9e:91:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMilhzVH8EribgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NDM3Yjk0NTgtYmMyMi00MjI5LWE2YzgtZmY1YmNlMThmYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks2bCsae92iXWuQURGsc5AzIAoIicCYnPAAo TvJnwbVCBNnJOWHpFX89dwTpUcQlIRXOw1lpyNP5Wwv1/svhqTtgVa5kLf0Q6lu1 NIcgAucnY4JniHDQmBoYM40cTYzDpoXxyhaQGDdU0Hwpgtfmb2hP8uz+huS+v2Eb 6Xl92XfC9B0O6T2ba4AsXYA3RRsi1lPilkiHav8KR5AgBWQWVAfN/aACfabaiDNH yd4hdQa5cE6EcYLP0Q584G6MRNU6GRlaDbHIbCRehS+7nYqvhIu7DgF7/++EsWzp FzVKVZ1fyXF4/BdLC22jNUVg44evs6+uVLEsnkN0NVvL+7TL7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfFDp2D3bcF5PpGr0sVnTnXHOC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNWViY2QxNmUtMWJhOC0z MjAzLTg0YjgtMDlkZTBjMWY0MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH16LW3OTyQ1l6+FWO0p5vHX+d647SDRfJVdIjbQFJIMa/31kz7iZyH2 HQvkq7dA/D8Ineek7zqusKUwvIPcG/KWn7yURxXcdDFoV60hCrqa4pio3rnFwU4l kWxuTi5doPDmAB96EZ1SP6QYh7mb10HimJacZm2KHlGKmkIDBwOFcXkBsGCwdIU2 Kb+pvcvGXnnvsVe8orl7KpDDEoEvi8kEDsDAwc1Q8MrcIRq3snCPtHjLrlp1nLys 6rcNvK0LtMbeeGZgEHB+x1RM5veswS3ObLqGTR2R6VRSWP679Lsyt06HnYH9J0Dq A56zhfQjJjkJeSfY2C9qGexecPSekX0= -----END CERTIFICATE-----Generated at Sat Sep 5 12:38:00 2026 by rpki-client