$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/a0831ed5-47d8-3899-9d66-56ccf52ef23d.roa File: a0831ed5-47d8-3899-9d66-56ccf52ef23d.roa (raw, json) Hash identifier: R8L/AADug9rM03B4LQBW4iycQmBXOdjTlW8PLXjQy50= Subject key identifier: 85:09:A7:29:45:FC:E8:2E:68:AA:CA:DB:25:13:4A:80:52:E2:A9:20 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584EBA71FEB090605B543690D7C0 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/a0831ed5-47d8-3899-9d66-56ccf52ef23d.roa Signing time: Tue 04 Aug 2026 19:38:33 +0000 ROA not before: Tue 04 Aug 2026 19:38:33 +0000 ROA not after: Mon 02 Nov 2026 20:38:33 +0000 asID: 13335 IP address blocks: 128.254.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:71:fe:b0:90:60:5b:54:36:90:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Aug 4 19:38:33 2026 GMT Not After : Nov 2 20:38:33 2026 GMT Subject: CN=e95bc7c0-53e9-4c1b-82e4-b057ceee770c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:76:3c:10:a8:f0:c1:e1:f1:0e:35:83:32: 86:72:a1:46:a8:5e:7a:06:22:cf:1d:bf:85:d3:96: bb:23:1e:51:d4:f0:20:ea:ae:c8:19:62:23:a8:3f: 70:21:c4:33:92:1f:68:18:0c:ea:29:bd:3d:52:34: 14:a0:57:a1:59:a8:0c:6b:15:50:ac:4e:77:cb:75: fc:d9:ae:ab:4d:64:c0:4a:98:0d:c4:d4:b3:52:80: dc:22:56:e3:0e:c3:93:09:9f:b5:c0:5f:01:70:12: c0:69:07:7f:97:89:24:26:f8:67:a1:2c:90:7f:ca: 94:d5:b0:5e:04:5f:b8:94:a1:0c:1f:ee:4f:81:fa: 93:5a:65:2a:81:bd:d6:8e:19:6f:a9:83:78:ae:db: 03:3e:d8:34:89:29:20:88:ad:de:12:80:a7:db:66: f6:aa:91:3e:8d:aa:2e:26:6d:de:86:d2:18:b9:ed: 75:36:99:47:36:d3:6b:cf:4e:4c:c0:12:c3:75:6f: 19:d8:ab:e8:92:d6:01:06:2b:fa:05:f6:fa:7a:77: c6:fc:0c:00:e3:41:7e:84:af:92:5b:31:0a:77:ce: 9f:96:98:49:48:43:cb:f8:c8:ac:5b:7a:5d:29:7a: aa:a9:db:a7:50:ab:7d:e7:29:33:d6:52:eb:37:82: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:A7:29:45:FC:E8:2E:68:AA:CA:DB:25:13:4A:80:52:E2:A9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/a0831ed5-47d8-3899-9d66-56ccf52ef23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:98:ea:a2:cd:96:c0:18:94:24:85:3e:b0:a5:2a:b6:d4:12: c1:b4:72:3a:c4:4e:01:f2:e5:63:fd:d8:0a:35:6a:5b:1f:84: 33:bd:c3:a9:23:0b:5b:94:bb:82:ad:da:7d:88:de:c0:99:e7: b5:43:f7:9f:4f:5b:20:e5:5a:db:cc:c9:3a:cc:fd:f9:0f:04: 97:4a:a7:2b:c3:58:64:68:52:22:33:1a:bf:ee:b4:28:b9:a2: a0:3a:3d:fa:cf:9d:6d:a8:3c:fd:03:99:9b:e8:be:89:44:fc: f4:03:5a:a7:be:eb:c1:b3:3e:63:a8:a3:3d:c3:19:68:77:26: 04:d9:f0:57:73:97:d7:04:21:c3:05:88:23:25:de:e4:5b:b8: 10:73:99:13:c3:2e:f6:ce:d0:90:89:11:de:6e:8d:89:26:14: e3:b6:6b:b1:e7:db:09:ac:44:09:85:f0:49:e6:51:f7:ed:37: 7a:17:c2:e8:95:37:fd:5d:8c:31:6a:79:b7:30:90:bf:0f:87: ae:18:46:c6:18:09:a9:e4:dd:4d:68:11:ce:72:ab:da:af:0b: 1c:cf:8c:b5:a7:d4:84:03:a5:f7:ed:b7:84:7a:eb:15:70:e9: 3e:39:fc:5b:78:d5:cd:0a:17:89:52:33:76:5c:cc:eb:04:b7: 8a:33:d3:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66cf6wkGBbVDaQ18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI2MDgwNDE5MzgzM1oXDTI2MTEwMjIwMzgzM1owLzEtMCsGA1UEAxMk ZTk1YmM3YzAtNTNlOS00YzFiLTgyZTQtYjA1N2NlZWU3NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCR2PBCo8MHh8Q41gzKGcqFGqF56BiLPHb+F 05a7Ix5R1PAg6q7IGWIjqD9wIcQzkh9oGAzqKb09UjQUoFehWagMaxVQrE53y3X8 2a6rTWTASpgNxNSzUoDcIlbjDsOTCZ+1wF8BcBLAaQd/l4kkJvhnoSyQf8qU1bBe BF+4lKEMH+5PgfqTWmUqgb3WjhlvqYN4rtsDPtg0iSkgiK3eEoCn22b2qpE+jaou Jm3ehtIYue11NplHNtNrz05MwBLDdW8Z2KvoktYBBiv6Bfb6enfG/AwA40F+hK+S WzEKd86flphJSEPL+MisW3pdKXqqqdunUKt95ykz1lLrN4IqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUJpylF/OguaKrK2yUTSoBS4qkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYTA4MzFlZDUtNDdkOC0z ODk5LTlkNjYtNTZjY2Y1MmVmMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP66MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWY6qLNlsAYlCSFPrClKrbUEsG0cjrETgHy5WP92Ao1alsfhDO9w6kj C1uUu4Kt2n2I3sCZ57VD959PWyDlWtvMyTrM/fkPBJdKpyvDWGRoUiIzGr/utCi5 oqA6PfrPnW2oPP0DmZvovolE/PQDWqe+68GzPmOooz3DGWh3JgTZ8Fdzl9cEIcMF iCMl3uRbuBBzmRPDLvbO0JCJEd5ujYkmFOO2a7Hn2wmsRAmF8EnmUfftN3oXwuiV N/1djDFqebcwkL8Ph64YRsYYCank3U1oEc5yq9qvCxzPjLWn1IQDpfftt4R66xVw 6T45/Ft41c0KF4lSM3ZczOsEt4oz04s= -----END CERTIFICATE-----Generated at Tue Sep 1 02:08:45 2026 by rpki-client