$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/22b15f53-85ad-329f-b602-c291a22fceb6.roa File: 22b15f53-85ad-329f-b602-c291a22fceb6.roa (raw, json) Hash identifier: orVTCYFv25+P7ugwVH6UbyU+ATYKIZDv5kMvN+R/SwM= Subject key identifier: EE:31:7B:2A:3C:9F:64:21:54:F0:E6:56:2C:5D:02:BD:8C:43:F5:81 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584E6EE600DBBAE81EB378EA51A0 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/22b15f53-85ad-329f-b602-c291a22fceb6.roa Signing time: Wed 08 Jul 2026 18:10:52 +0000 ROA not before: Wed 08 Jul 2026 18:10:52 +0000 ROA not after: Tue 06 Oct 2026 18:10:52 +0000 asID: 209043 IP address blocks: 138.128.135.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:e6:00:db:ba:e8:1e:b3:78:ea:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jul 8 18:10:52 2026 GMT Not After : Oct 6 18:10:52 2026 GMT Subject: CN=fded4478-91df-469f-9008-d08669bd5b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:6d:bd:52:1c:3c:c7:fb:e3:e0:1d:1b:f2: 4a:80:e8:35:f3:a2:4d:b6:c5:b9:7d:f5:e5:6f:70: 5d:24:2f:0d:db:09:af:02:59:d5:d1:db:aa:3f:c7: c4:c9:b0:b5:49:b7:25:3f:e6:08:c9:39:75:40:6a: 76:57:6f:96:4b:09:09:db:2a:0d:bd:0b:b9:00:d1: 8e:b0:f6:06:10:07:15:89:d6:58:47:a2:25:d1:19: 16:a8:62:9d:3b:9b:25:b2:33:b4:04:3d:cd:10:18: 3f:d7:4c:5a:27:0b:2f:05:05:37:5b:3a:df:8c:6e: 9f:f4:de:62:0a:5f:85:63:8f:7a:bb:da:a4:cc:de: 90:0a:fb:59:26:8f:40:11:fc:5e:1e:ea:13:cb:c3: c5:09:ca:80:bf:1e:ab:bd:da:4a:d1:c2:40:8f:fd: 13:5d:0e:2e:3b:31:00:34:40:65:db:63:ce:da:ee: 67:46:d4:e5:14:04:57:cf:07:9e:73:30:0b:f1:8c: 04:f8:aa:5e:8c:d5:24:6e:43:0d:54:f8:d0:85:bf: 9c:92:15:3e:ba:d1:c5:56:3c:db:25:8a:59:43:06: d8:7e:02:fc:82:72:c3:76:f2:24:04:0f:51:32:23: c2:b7:2a:02:2d:96:32:d9:b2:1b:5f:c2:a3:1b:93: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:7B:2A:3C:9F:64:21:54:F0:E6:56:2C:5D:02:BD:8C:43:F5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/22b15f53-85ad-329f-b602-c291a22fceb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0d:c9:a6:4c:d4:93:ce:64:9d:4f:4c:4b:4e:94:67:71:56: 17:bd:bb:0d:ce:1f:3c:75:98:18:3c:30:f8:7e:51:39:73:a0: cb:b3:e6:a0:44:12:59:1a:f8:c6:9d:41:90:de:87:73:d7:59: 96:5e:88:c7:98:6f:b6:25:43:54:f8:63:ad:cd:dd:ec:89:0f: 01:ef:58:1e:c1:e2:3d:c8:18:58:ff:90:25:50:25:c2:a4:02: 4c:5a:16:55:7b:ce:dc:36:ce:1b:4d:b1:29:cd:a0:89:3b:06: d0:6f:be:dc:4b:cb:ac:14:6d:2d:5e:f9:8b:ab:88:25:9f:99: db:4b:38:ff:5e:94:f8:2f:24:43:dc:81:e5:0f:3c:08:8e:6e: cf:c6:84:b9:b0:e3:8f:b8:af:13:27:87:5d:1b:3c:18:21:23: bc:5b:f1:90:04:0f:95:04:79:38:a5:73:6f:2b:14:14:86:27: 60:15:1d:e4:e6:11:fe:ab:44:3e:bc:42:13:c6:d0:b0:e2:e3: 96:69:b1:de:fb:6e:1a:24:40:f3:37:a3:76:f1:3e:29:3e:c0: 9f:da:49:6d:31:5b:96:a9:19:8e:78:ad:af:6a:09:35:b8:68: e7:4d:b3:94:0d:bc:e3:10:b8:82:6c:ef:85:43:d5:30:12:79: cc:48:70:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5u5gDbuuges3jqUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDcwODE4MTA1MloXDTI2MTAwNjE4MTA1MlowLzEtMCsGA1UEAxMk ZmRlZDQ0NzgtOTFkZi00NjlmLTkwMDgtZDA4NjY5YmQ1YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizNtvVIcPMf74+AdG/JKgOg186JNtsW5ffXl b3BdJC8N2wmvAlnV0duqP8fEybC1SbclP+YIyTl1QGp2V2+WSwkJ2yoNvQu5ANGO sPYGEAcVidZYR6Il0RkWqGKdO5slsjO0BD3NEBg/10xaJwsvBQU3WzrfjG6f9N5i Cl+FY496u9qkzN6QCvtZJo9AEfxeHuoTy8PFCcqAvx6rvdpK0cJAj/0TXQ4uOzEA NEBl22PO2u5nRtTlFARXzweeczAL8YwE+KpejNUkbkMNVPjQhb+ckhU+utHFVjzb JYpZQwbYfgL8gnLDdvIkBA9RMiPCtyoCLZYy2bIbX8KjG5NzHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4xeyo8n2QhVPDmVixdAr2MQ/WBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMjJiMTVmNTMtODVhZC0z MjlmLWI2MDItYzI5MWEyMmZjZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0NyaZM1JPOZJ1PTEtOlGdxVhe9uw3OHzx1mBg8MPh+UTlzoMuz5qBE Elka+MadQZDeh3PXWZZeiMeYb7YlQ1T4Y63N3eyJDwHvWB7B4j3IGFj/kCVQJcKk AkxaFlV7ztw2zhtNsSnNoIk7BtBvvtxLy6wUbS1e+YuriCWfmdtLOP9elPgvJEPc geUPPAiObs/GhLmw44+4rxMnh10bPBghI7xb8ZAED5UEeTilc28rFBSGJ2AVHeTm Ef6rRD68QhPG0LDi45Zpsd77bhokQPM3o3bxPik+wJ/aSW0xW5apGY54ra9qCTW4 aOdNs5QNvOMQuIJs74VD1TASecxIcIo= -----END CERTIFICATE-----Generated at Mon Jul 20 09:13:40 2026 by rpki-client