$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/4afc4940-05c4-3c19-91a0-255a430a9b06.roa File: 4afc4940-05c4-3c19-91a0-255a430a9b06.roa (raw, json) Hash identifier: qxNseCcM64k8pUf6zILOcBfoO+IUIOf5MxNr+luVgVY= Subject key identifier: 28:A3:A8:A8:16:3B:96:B4:0B:C3:B6:39:7F:00:F3:BA:14:F7:20:6F Certificate issuer: /CN=5138ff7a-a438-4510-900e-06d2a889f64d Certificate serial: 010D0C9F4328584EA78772DF2A5A8F56DBAA0D20 Authority key identifier: CE:5B:8A:C6:88:96:F1:CA:2D:E9:E4:EE:A5:EF:E4:28:8F:CF:8C:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/4afc4940-05c4-3c19-91a0-255a430a9b06.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397315 IP address blocks: 65.87.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:72:df:2a:5a:8f:56:db:aa:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5138ff7a-a438-4510-900e-06d2a889f64d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aba50f0e-da60-40be-80ef-e770be619417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:7b:83:c6:e3:2d:98:1a:37:67:ea:bd:4b: 1a:8d:92:23:3e:39:eb:a6:75:c6:48:85:1c:9b:c3: cc:26:dd:ce:dd:32:35:f1:fd:9e:1b:82:c5:19:e6: b0:c2:80:90:32:52:f6:5f:a1:fe:e0:01:5a:ec:ea: 0f:e6:cd:f0:a4:0c:a7:1f:c0:a0:b9:87:73:60:7b: 59:9b:04:3b:6d:85:e3:4e:ff:84:eb:a2:02:13:01: ca:a5:28:2e:5d:a0:e2:f3:e9:b1:cf:32:93:c7:77: 6d:93:ff:f6:71:86:bd:35:99:31:81:f9:96:9f:ad: ae:6d:c1:bc:d5:28:d1:17:40:13:71:47:25:56:09: 17:6e:01:93:e8:8c:4f:2c:f6:7d:d4:74:49:99:75: dc:87:69:81:cb:ac:45:83:b7:d5:09:b6:32:cd:3a: 35:73:54:4b:c1:ad:b7:34:4e:76:04:16:c3:45:6c: bb:0c:28:3b:af:56:bb:84:8f:b4:89:8a:c0:d2:d6: a8:c3:81:b5:8e:77:e9:f1:55:35:7e:b4:fd:52:b8: 20:a3:b7:59:e5:fd:52:ac:68:cb:a0:35:1b:28:e3: da:d2:13:33:48:99:b6:cb:43:f8:4b:5f:f2:c8:31: 9b:1e:4b:5a:8e:10:e0:e1:1a:5e:28:f2:e9:bc:7e: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:A8:A8:16:3B:96:B4:0B:C3:B6:39:7F:00:F3:BA:14:F7:20:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/4afc4940-05c4-3c19-91a0-255a430a9b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.crl X509v3 Authority Key Identifier: keyid:CE:5B:8A:C6:88:96:F1:CA:2D:E9:E4:EE:A5:EF:E4:28:8F:CF:8C:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer sbgp-ipAddrBlock: critical IPv4: 65.87.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:85:b3:d5:9d:a2:60:14:d0:f5:55:cf:cc:c1:f9:e8:25:ff: 4f:30:f0:6a:58:be:70:cd:91:8d:7f:60:73:df:5e:5f:73:70: a0:29:0c:26:3e:62:f8:89:c4:f4:8c:63:ae:43:bb:d6:a5:77: 5a:4e:71:85:0d:da:76:b0:ae:c3:f5:a3:a1:d5:2a:74:9a:57: b5:68:7a:30:3d:51:ba:d5:01:29:b4:1a:ec:9f:ba:9c:f9:02: 9a:0e:0b:4f:aa:f3:84:9b:56:11:f5:d5:76:93:90:09:31:57: 90:12:ae:09:15:6f:c3:a3:1b:5d:f3:32:92:e5:73:57:90:c4: 24:bb:96:77:2b:ad:58:0a:e8:3d:5f:de:ed:11:cd:12:97:7e: 6f:c6:28:fc:d2:dc:05:41:85:4e:70:4f:17:99:c3:05:1f:bc: 6a:90:ba:36:8d:8e:da:db:96:53:81:04:3d:fe:c5:5a:84:95: 13:99:42:d1:d1:98:af:e3:95:b0:5d:04:f9:1f:45:eb:55:d2: cb:b0:c0:b7:c0:34:a3:6a:4c:9a:67:bb:45:af:f6:a5:c9:b6: 90:41:1f:71:a6:bf:8b:1d:3c:5f:84:96:22:f7:71:73:2b:c4: 3a:fa:a0:66:6a:c8:58:cc:4d:66:ba:c6:cd:43:62:ec:76:84: a8:01:42:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3LfKlqPVtuqDSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTEzOGZmN2EtYTQzOC00NTEwLTkwMGUtMDZkMmE4ODlm NjRkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWJhNTBmMGUtZGE2MC00MGJlLTgwZWYtZTc3MGJlNjE5NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxah7g8bjLZgaN2fqvUsajZIjPjnrpnXGSIUc m8PMJt3O3TI18f2eG4LFGeawwoCQMlL2X6H+4AFa7OoP5s3wpAynH8CguYdzYHtZ mwQ7bYXjTv+E66ICEwHKpSguXaDi8+mxzzKTx3dtk//2cYa9NZkxgfmWn62ubcG8 1SjRF0ATcUclVgkXbgGT6IxPLPZ91HRJmXXch2mBy6xFg7fVCbYyzTo1c1RLwa23 NE52BBbDRWy7DCg7r1a7hI+0iYrA0taow4G1jnfp8VU1frT9Urggo7dZ5f1SrGjL oDUbKOPa0hMzSJm2y0P4S1/yyDGbHktajhDg4RpeKPLpvH5Y3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCijqKgWO5a0C8O2OX8A87oU9yBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MTM4 ZmY3YS1hNDM4LTQ1MTAtOTAwZS0wNmQyYTg4OWY2NGQvNGFmYzQ5NDAtMDVjNC0z YzE5LTkxYTAtMjU1YTQzMGE5YjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTEzOGZmN2EtYTQzOC00NTEwLTkw MGUtMDZkMmE4ODlmNjRkLzUxMzhmZjdhLWE0MzgtNDUxMC05MDBlLTA2ZDJhODg5 ZjY0ZC5jcmwwHwYDVR0jBBgwFoAUzluKxoiW8cot6eTupe/kKI/PjCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MTM4ZmY3YS1hNDM4LTQ1MTAtOTAwZS0wNmQy YTg4OWY2NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVfSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Fs9WdomAU0PVVz8zB+egl/08w8GpYvnDNkY1/YHPfXl9zcKApDCY+ YviJxPSMY65Du9ald1pOcYUN2nawrsP1o6HVKnSaV7VoejA9UbrVASm0Guyfupz5 ApoOC0+q84SbVhH11XaTkAkxV5ASrgkVb8OjG13zMpLlc1eQxCS7lncrrVgK6D1f 3u0RzRKXfm/GKPzS3AVBhU5wTxeZwwUfvGqQujaNjtrbllOBBD3+xVqElROZQtHR mK/jlbBdBPkfRetV0suwwLfANKNqTJpnu0Wv9qXJtpBBH3Gmv4sdPF+EliL3cXMr xDr6oGZqyFjMTWa6xs1DYux2hKgBQsI= -----END CERTIFICATE-----Generated at Mon Aug 31 10:24:31 2026 by rpki-client