$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa File: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (raw, json) Hash identifier: qNtm1TcIoo1KcoIEUsDmP/PewoYmaahOE/5Hl9wFpyU= Subject key identifier: 3D:A0:E7:01:06:50:EA:F1:77:D3:20:37:57:A4:F6:C6:B1:C1:1F:3D Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584EA787773ACFA79FBFA0ADE840 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 216.120.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:77:3a:cf:a7:9f:bf:a0:ad:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7b81f96d-0b0f-41c9-9ed0-4b4e6a21254f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:bf:0d:5b:c2:de:3d:04:9e:df:77:83:38: 63:e5:28:f0:cd:9a:13:09:37:e5:cf:62:a0:9b:a7: 9b:15:e8:06:59:50:96:0c:b3:be:ac:e1:a4:c8:d8: 0a:ca:71:0c:d6:41:0a:69:45:07:29:62:b2:f3:a3: 83:fb:2e:53:b6:19:43:19:48:14:77:8e:ec:de:aa: 16:e2:ab:9a:27:6c:a6:93:cd:2a:8a:1a:91:4b:a8: a1:d7:72:f2:33:8c:29:a6:bd:0f:31:20:23:0a:44: 61:5a:93:47:c1:a5:3a:31:21:db:51:68:6a:9f:9d: 12:9e:74:5e:d8:92:88:d4:4f:e9:89:06:d1:36:e2: 56:68:18:87:91:ae:4e:29:b2:8f:00:f4:59:e0:4b: 3d:70:ba:25:57:30:9a:59:fe:a8:c6:f2:28:84:01: 46:b0:8f:93:9a:2d:19:8c:c8:8f:14:4c:cd:52:b4: 22:99:17:1e:bd:d9:8d:06:75:a0:68:7f:e2:f6:38: 67:ec:6e:9c:77:76:a5:59:73:13:46:15:13:5a:9d: be:67:ee:a0:c5:bf:13:0b:9d:57:94:ac:e8:b1:f1: cf:21:95:11:05:0d:c2:07:2e:8f:9c:ac:0b:ff:1b: cb:75:dd:fe:db:2d:2a:ba:5e:af:bf:e7:18:cf:9e: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:E7:01:06:50:EA:F1:77:D3:20:37:57:A4:F6:C6:B1:C1:1F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: 216.120.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5b:14:90:5f:70:19:a4:f0:3f:bf:41:fa:56:59:a0:fe:86: 24:b8:6a:f1:c3:0c:77:d9:d3:c8:ed:d0:c9:a9:09:3b:2f:7d: bd:54:fa:b4:3a:1d:8a:88:8e:42:a4:e6:64:95:d5:23:1c:23: 8a:6c:b6:f0:e2:9e:59:d1:eb:ce:5b:ac:e1:f1:b3:96:78:f9: 3e:bd:b6:57:bb:4f:48:f1:e9:fc:91:83:fc:3d:ea:cd:37:fa: 43:f3:8c:24:cf:59:3b:e0:39:93:d1:04:d1:31:15:cf:0a:f3: f1:16:80:34:15:ae:48:c4:ad:a1:65:1c:03:5a:c8:d5:a5:16: 66:41:30:0b:84:00:a1:1e:c2:88:c7:da:0d:d9:37:20:79:42: ca:de:ff:96:91:ff:65:59:32:54:e1:4d:13:c4:5e:37:dc:11: 0f:c6:18:c2:4b:4c:8c:0c:3b:ac:80:bb:e6:87:e4:4a:8c:cb: ac:51:89:9e:1a:14:9a:6a:d3:0e:6b:6d:fb:19:0e:20:af:81: ae:ea:c6:96:55:d9:a1:b7:ab:8a:c0:0f:58:0e:21:06:1d:f3: bf:b0:08:d4:33:66:30:8a:3a:d9:64:53:7a:01:a5:06:00:6a: d5:14:b7:83:16:42:82:7e:32:8b:3e:96:53:a7:33:d0:b4:5e: cf:dd:c9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3c6z6efv6Ct6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2I4MWY5NmQtMGIwZi00MWM5LTllZDAtNGI0ZTZhMjEyNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytG/DVvC3j0Ent93gzhj5SjwzZoTCTflz2Kg m6ebFegGWVCWDLO+rOGkyNgKynEM1kEKaUUHKWKy86OD+y5TthlDGUgUd47s3qoW 4quaJ2ymk80qihqRS6ih13LyM4wppr0PMSAjCkRhWpNHwaU6MSHbUWhqn50SnnRe 2JKI1E/piQbRNuJWaBiHka5OKbKPAPRZ4Es9cLolVzCaWf6oxvIohAFGsI+Tmi0Z jMiPFEzNUrQimRcevdmNBnWgaH/i9jhn7G6cd3alWXMTRhUTWp2+Z+6gxb8TC51X lKzosfHPIZURBQ3CBy6PnKwL/xvLdd3+2y0qul6vv+cYz57+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2g5wEGUOrxd9MgN1ek9saxwR89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvOTM4ZTFjMTgtNjEyMi0z NzFkLTg2NGUtNTRiMGNjOGZjYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBbFJBfcBmk8D+/QfpWWaD+hiS4avHDDHfZ08jt0MmpCTsvfb1U+rQ6 HYqIjkKk5mSV1SMcI4pstvDinlnR685brOHxs5Z4+T69tle7T0jx6fyRg/w96s03 +kPzjCTPWTvgOZPRBNExFc8K8/EWgDQVrkjEraFlHANayNWlFmZBMAuEAKEewojH 2g3ZNyB5Qsre/5aR/2VZMlThTRPEXjfcEQ/GGMJLTIwMO6yAu+aH5EqMy6xRiZ4a FJpq0w5rbfsZDiCvga7qxpZV2aG3q4rAD1gOIQYd87+wCNQzZjCKOtlkU3oBpQYA atUUt4MWQoJ+Mos+llOnM9C0Xs/dye4= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:10 2026 by rpki-client