$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa File: d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa (raw, json) Hash identifier: 6JpPbsq6phjcIQPXTbdyZgnS1F3icAB0vEJYPF1Ojlw= Subject key identifier: 3C:A2:86:F2:BF:63:53:22:F2:D9:ED:20:7D:5A:3E:C6:80:17:C8:6E Certificate issuer: /CN=65b75871-7632-4a71-a4a9-41f38235fc29 Certificate serial: 010D0C9F4328584ED2CC7919CFB24887F690B9A0 Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 13431 IP address blocks: 174.138.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:79:19:cf:b2:48:87:f6:90:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=836bd9a7-cbaf-47a0-8364-504e45c10947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:4c:e9:03:58:0a:8b:5d:7d:92:dc:63:9e: d4:82:13:8b:21:84:d7:19:7e:cb:88:45:ec:c6:6f: 1d:b4:40:5b:5a:f0:da:d4:2d:88:e3:15:9d:c9:78: 1c:93:b7:8e:c6:49:85:a7:d5:c6:d9:94:d5:45:01: 2a:63:4f:f9:1b:88:42:32:b6:ca:54:b2:ec:16:3d: 0b:7c:2a:ae:57:59:3c:81:68:be:85:fb:08:11:c9: 05:b7:fd:4b:b0:9b:e1:bc:d3:f0:87:6a:55:65:1c: 38:ad:e5:8d:cf:ef:b7:5d:b3:16:3f:46:f4:bc:aa: 51:a4:f5:28:8f:fc:89:77:f7:72:17:f1:0e:83:93: bc:6a:58:8e:51:6f:87:c0:fa:df:e5:99:ab:c1:77: 9b:39:3b:87:7d:d3:5b:fa:01:68:f8:d7:a6:0b:c6: 69:ce:b6:8b:76:9b:34:90:e2:47:f4:a5:42:b1:c4: 18:5e:51:e0:8c:63:20:64:1f:06:e8:3c:78:de:5d: 37:35:69:91:e5:0c:8d:bb:f4:d3:67:e0:ae:89:47: 26:86:c7:b3:a2:53:9c:d7:c8:7f:09:6c:67:8e:fb: b9:20:ca:64:c1:57:44:1f:a4:7c:0d:cd:a4:47:92: 7b:09:2e:fa:e4:aa:2f:48:ef:68:da:b3:e8:68:39: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:86:F2:BF:63:53:22:F2:D9:ED:20:7D:5A:3E:C6:80:17:C8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl X509v3 Authority Key Identifier: keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer sbgp-ipAddrBlock: critical IPv4: 174.138.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1a:74:2c:ea:05:75:61:35:57:dd:ed:d2:b0:ea:49:24:4a: 95:26:82:c1:cf:96:52:2c:7e:d7:dd:e4:0e:67:8a:2f:e4:ef: 8b:0a:43:3c:a2:9b:48:cd:3a:8a:49:3c:12:d1:6f:ba:a2:35: 83:b4:4a:50:24:f0:9d:52:e8:7f:54:aa:a9:2d:01:0a:22:0a: 50:79:79:c3:28:ea:80:2c:d5:10:a9:9d:a9:c8:f7:9d:02:5e: 6f:a4:75:03:76:9f:f5:e4:36:b8:77:50:b4:13:b9:83:ac:ab: fa:7e:af:ca:ea:bd:4c:d4:d2:1e:9f:c7:1e:1c:cb:41:2d:c2: 3e:8e:d6:cc:98:09:e5:f9:dc:53:32:ae:cd:03:3a:ff:09:ee: fe:db:ca:fc:23:74:2c:c4:9e:6c:b3:6c:0a:67:8a:25:c8:e7: 35:d1:5e:71:61:64:5d:13:14:d6:67:c1:62:07:8d:ad:ad:e0: 12:c4:99:f3:14:f3:a7:78:8c:7e:d4:88:1e:2a:c5:9a:66:81: de:ac:26:bb:75:fc:33:27:45:27:2a:84:27:ec:57:a3:6c:21: 9c:ac:d5:56:5d:c2:f0:44:03:36:f6:df:40:2a:5b:ea:5b:62: 9d:ae:68:09:7d:0f:b0:99:1c:2c:7b:c3:9f:62:0b:52:de:46: 7a:92:3a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHkZz7JIh/aQuaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViNzU4NzEtNzYzMi00YTcxLWE0YTktNDFmMzgyMzVm YzI5MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk ODM2YmQ5YTctY2JhZi00N2EwLTgzNjQtNTA0ZTQ1YzEwOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OFM6QNYCotdfZLcY57UghOLIYTXGX7LiEXs xm8dtEBbWvDa1C2I4xWdyXgck7eOxkmFp9XG2ZTVRQEqY0/5G4hCMrbKVLLsFj0L fCquV1k8gWi+hfsIEckFt/1LsJvhvNPwh2pVZRw4reWNz++3XbMWP0b0vKpRpPUo j/yJd/dyF/EOg5O8aliOUW+HwPrf5ZmrwXebOTuHfdNb+gFo+NemC8ZpzraLdps0 kOJH9KVCscQYXlHgjGMgZB8G6Dx43l03NWmR5QyNu/TTZ+CuiUcmhsezolOc18h/ CWxnjvu5IMpkwVdEH6R8Dc2kR5J7CS765KovSO9o2rPoaDmHhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyihvK/Y1Mi8tntIH1aPsaAF8huMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWI3 NTg3MS03NjMyLTRhNzEtYTRhOS00MWYzODIzNWZjMjkvZDkxN2IzMDMtNmZhOS0z YmI3LWEzYTItZjcwZTk5ODlkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjViNzU4NzEtNzYzMi00YTcxLWE0 YTktNDFmMzgyMzVmYzI5LzY1Yjc1ODcxLTc2MzItNGE3MS1hNGE5LTQxZjM4MjM1 ZmMyOS5jcmwwHwYDVR0jBBgwFoAUx7CJHk/VIi/Bgn4+zl2FHCmNPeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWI3NTg3MS03NjMyLTRhNzEtYTRhOS00MWYz ODIzNWZjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkadCzqBXVhNVfd7dKw6kkkSpUmgsHPllIsftfd5A5nii/k74sKQzyi m0jNOopJPBLRb7qiNYO0SlAk8J1S6H9UqqktAQoiClB5ecMo6oAs1RCpnanI950C Xm+kdQN2n/XkNrh3ULQTuYOsq/p+r8rqvUzU0h6fxx4cy0Etwj6O1syYCeX53FMy rs0DOv8J7v7byvwjdCzEnmyzbApniiXI5zXRXnFhZF0TFNZnwWIHja2t4BLEmfMU 86d4jH7UiB4qxZpmgd6sJrt1/DMnRScqhCfsV6NsIZys1VZdwvBEAzb230AqW+pb Yp2uaAl9D7CZHCx7w59iC1LeRnqSOs4= -----END CERTIFICATE-----Generated at Thu Aug 27 08:55:14 2026 by rpki-client