$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/9fb12207-d3a3-3d0b-b502-fbf154a67ac1.roa File: 9fb12207-d3a3-3d0b-b502-fbf154a67ac1.roa (raw, json) Hash identifier: lzIDy2rMNbs55Q2v6rofkEiDqMykhug3UEgJ1WASu4Q= Subject key identifier: EC:D9:1C:70:19:B5:1A:07:BA:0D:84:65:CD:77:0C:9E:B7:CC:3D:05 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584EFCACC8B2877930E382A71400 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/9fb12207-d3a3-3d0b-b502-fbf154a67ac1.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 11260 IP address blocks: 24.138.128.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c8:b2:87:79:30:e3:82:a7:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=cd0ed2db-3a28-4cc8-8336-e2100e91ca55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:bf:fb:48:09:9b:44:f0:8b:0b:09:77:45: b3:f1:17:d3:20:9e:39:29:9f:f8:f0:05:05:5e:9d: b1:7f:70:e4:4b:19:0c:16:8d:96:3a:5d:85:1f:4b: 54:6b:fa:a4:79:18:b6:35:a9:df:96:4b:e6:a2:bf: f6:e3:9b:52:2d:51:ea:a7:22:6c:ea:85:49:f8:6e: 59:e0:5b:17:1a:13:99:6d:49:11:c3:a4:d3:1d:e1: 11:07:d1:7c:6a:f4:98:a3:51:56:a8:05:45:60:4f: 39:6a:21:4f:d0:d2:1b:bf:d8:02:78:58:1a:9f:ee: ae:8c:ab:fc:89:a1:e8:f0:d6:e5:ff:51:04:99:1a: 14:02:66:c6:14:a5:2b:57:e0:2a:94:a5:de:f8:3a: 62:d4:4a:ad:0a:1e:8f:65:ac:7e:24:0e:25:25:dd: 0c:a7:05:28:ce:9a:bd:ef:2f:8c:4e:79:e8:c4:2c: 23:69:cc:35:c1:12:a9:1f:30:c0:e2:d2:1a:5d:19: 2c:05:0d:cd:93:28:97:82:44:9c:56:ab:0d:42:60: ae:37:bf:31:27:70:3a:f8:67:d9:87:f8:92:9f:fc: c0:fb:f0:47:bf:78:52:14:9e:20:68:9b:e0:ed:c2: 63:b1:da:ff:de:83:a3:38:3e:8d:01:8b:cf:c6:26: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:1C:70:19:B5:1A:07:BA:0D:84:65:CD:77:0C:9E:B7:CC:3D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/9fb12207-d3a3-3d0b-b502-fbf154a67ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 24.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:46:5a:06:7d:4d:c9:5e:13:b5:35:1c:07:cc:25:1c:18:10: f7:d4:3a:46:1a:0d:4f:5b:25:c0:0a:b1:5d:1d:c7:10:c7:58: 4a:ab:72:8c:f3:33:5d:56:6d:57:ee:39:1d:ae:8f:bf:1c:29: d2:a7:d8:a7:a0:9a:69:ea:4a:b4:02:0f:ba:08:14:d5:97:8e: 98:4f:e6:a2:b7:e6:e5:11:80:6f:10:8e:3f:c5:97:c5:1a:8d: df:5d:fc:dc:27:79:0a:00:ce:d3:ad:a0:25:fe:c7:3a:92:4f: 23:b2:fe:06:cd:cc:3f:c9:69:96:eb:7b:c7:fb:5f:e2:32:57: 39:c7:31:02:74:34:c2:a2:e9:9a:da:93:c4:52:49:af:02:2a: 56:4c:89:18:2c:57:4a:b7:f4:87:87:2a:e7:d0:cf:34:b5:b7: 8f:7a:b8:2b:88:d0:2f:77:59:f0:54:4e:17:82:5e:10:94:94: 30:2d:75:48:08:73:1a:00:ad:d0:f6:bd:a6:73:e4:21:d0:21: b1:40:07:b1:c4:3b:07:74:05:7d:1e:c4:9a:cb:87:e8:57:f1: 4c:2a:a7:ce:34:49:d7:75:5d:fa:03:49:60:2f:bb:11:a7:04: c7:c0:ef:8a:21:ac:0e:39:4a:aa:45:6b:72:1f:cd:79:ce:6b: fd:8e:81:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMiyh3kw44KnFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2QwZWQyZGItM2EyOC00Y2M4LTgzMzYtZTIxMDBlOTFjYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOa/+0gJm0TwiwsJd0Wz8RfTIJ45KZ/48AUF Xp2xf3DkSxkMFo2WOl2FH0tUa/qkeRi2Nanflkvmor/245tSLVHqpyJs6oVJ+G5Z 4FsXGhOZbUkRw6TTHeERB9F8avSYo1FWqAVFYE85aiFP0NIbv9gCeFgan+6ujKv8 iaHo8Nbl/1EEmRoUAmbGFKUrV+AqlKXe+Dpi1EqtCh6PZax+JA4lJd0MpwUozpq9 7y+MTnnoxCwjacw1wRKpHzDA4tIaXRksBQ3NkyiXgkScVqsNQmCuN78xJ3A6+GfZ h/iSn/zA+/BHv3hSFJ4gaJvg7cJjsdr/3oOjOD6NAYvPxibq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzZHHAZtRoHug2EZc13DJ63zD0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOWZiMTIyMDctZDNhMy0z ZDBiLWI1MDItZmJmMTU0YTY3YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtGWgZ9TcleE7U1HAfMJRwYEPfUOkYaDU9bJcAKsV0dxxDHWEqrcozz M11WbVfuOR2uj78cKdKn2KegmmnqSrQCD7oIFNWXjphP5qK35uURgG8Qjj/Fl8Ua jd9d/NwneQoAztOtoCX+xzqSTyOy/gbNzD/JaZbre8f7X+IyVznHMQJ0NMKi6Zra k8RSSa8CKlZMiRgsV0q39IeHKufQzzS1t496uCuI0C93WfBUTheCXhCUlDAtdUgI cxoArdD2vaZz5CHQIbFAB7HEOwd0BX0exJrLh+hX8Uwqp840Sdd1XfoDSWAvuxGn BMfA74ohrA45SqpFa3IfzXnOa/2OgZc= -----END CERTIFICATE-----Generated at Sat Sep 5 13:25:48 2026 by rpki-client