$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa File: 87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa (raw, json) Hash identifier: wjhs9pUTBPe63pysSplHP/1gyw6PnqmK6ub2mQVIRdw= Subject key identifier: 02:C7:4F:F7:94:74:66:83:DE:0C:18:72:A3:6C:46:84:9C:3C:DC:53 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E5FDF76143185D6D82D907940 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 138.2.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:76:14:31:85:d6:d8:2d:90:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=5d792a15-08e4-46b1-bce5-643786f44d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:c0:81:f6:d2:b6:5d:ea:fb:d5:fb:68:12: 8e:88:31:ab:f9:88:80:e9:14:ac:6d:28:d5:57:0c: 4e:b4:a8:83:9c:1b:27:51:08:84:f5:fa:4d:47:48: c7:be:36:ed:ee:24:ce:cc:d1:62:5d:99:76:e4:3d: 1e:82:50:87:c9:1b:c4:12:bd:b4:8f:41:61:e9:5d: 82:70:fa:ef:a0:71:23:48:54:fa:99:6b:1f:56:7c: f3:42:c5:ee:69:26:10:2f:9f:82:31:29:0d:19:76: 8d:2e:cd:3e:86:6d:db:59:73:4c:98:9a:d7:a3:3b: b7:f0:b6:23:9f:2e:40:e2:87:c2:19:c4:29:3d:97: b0:90:4e:47:99:29:e2:3f:34:0b:47:04:0c:d6:d5: 68:3a:11:bf:dd:1f:cd:4c:b4:8e:40:2b:6a:cd:4e: 0c:e4:31:21:4f:bb:af:ea:9c:14:70:61:f5:e9:12: ca:b6:58:68:00:48:8c:c6:39:f8:e0:9f:4e:48:bd: f1:87:46:36:0d:45:39:a8:38:99:12:bd:36:c2:1d: 61:99:54:55:0f:1e:22:8c:6b:f9:19:37:e8:30:b6: 5c:2c:f0:23:85:f7:58:65:09:0c:bf:4e:d4:35:26: ba:c2:09:31:91:6d:25:d0:5e:8a:5e:46:53:e6:a3: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:4F:F7:94:74:66:83:DE:0C:18:72:A3:6C:46:84:9C:3C:DC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e7:3e:27:a2:8f:40:e3:c9:97:90:5d:dd:dc:f9:9f:53:55: e8:3b:80:00:41:02:b8:a4:88:66:1b:7f:7b:cb:0d:d3:62:f8: b5:3a:4f:ff:43:c9:7f:27:ca:ce:50:e7:d2:98:05:cf:d0:29: e0:f5:c8:8f:ba:e9:8c:cf:be:05:fe:2b:b9:8b:68:0e:f8:95: 2c:f9:5b:4c:e6:7c:9e:7b:69:6e:1e:69:1b:8d:7b:3e:5b:70: fe:87:0b:ad:d3:d0:0f:67:00:69:9e:3f:f3:08:6e:c8:e2:d3: 13:86:0a:e2:28:39:07:b3:e6:01:14:55:c0:5e:88:61:2b:ef: 4e:4e:ac:7f:22:18:27:73:23:19:cf:ef:5e:22:d8:64:fa:f8: 17:74:da:36:38:74:e0:ea:2d:35:ea:f5:51:45:6a:b1:a6:ca: d9:cd:45:8f:e6:d4:70:f9:13:5b:df:4b:b5:fa:11:65:72:fd: 02:7d:3d:5c:49:66:23:8e:85:bc:34:10:b6:ec:32:c5:38:2e: bf:b8:14:b3:9f:ed:72:1e:c2:06:0d:3a:95:3b:ac:18:0f:e2: f5:59:26:9b:61:eb:50:19:0c:8f:10:46:d6:32:8c:5b:59:54: d4:2a:89:87:03:fb:84:d9:f7:25:37:19:23:5a:60:23:a8:fd: 5a:5a:41:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f33YUMYXW2C2QeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NWQ3OTJhMTUtMDhlNC00NmIxLWJjZTUtNjQzNzg2ZjQ0ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/AgfbStl3q+9X7aBKOiDGr+YiA6RSsbSjV VwxOtKiDnBsnUQiE9fpNR0jHvjbt7iTOzNFiXZl25D0eglCHyRvEEr20j0Fh6V2C cPrvoHEjSFT6mWsfVnzzQsXuaSYQL5+CMSkNGXaNLs0+hm3bWXNMmJrXozu38LYj ny5A4ofCGcQpPZewkE5HmSniPzQLRwQM1tVoOhG/3R/NTLSOQCtqzU4M5DEhT7uv 6pwUcGH16RLKtlhoAEiMxjn44J9OSL3xh0Y2DUU5qDiZEr02wh1hmVRVDx4ijGv5 GTfoMLZcLPAjhfdYZQkMv07UNSa6wgkxkW0l0F6KXkZT5qP9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALHT/eUdGaD3gwYcqNsRoScPNxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODc1MDNhMjAtZjdiOS0z MzgyLWE3ZWQtYWM2YTY0OWY3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTnPieij0DjyZeQXd3c+Z9TVeg7gABBArikiGYbf3vLDdNi+LU6T/9D yX8nys5Q59KYBc/QKeD1yI+66YzPvgX+K7mLaA74lSz5W0zmfJ57aW4eaRuNez5b cP6HC63T0A9nAGmeP/MIbsji0xOGCuIoOQez5gEUVcBeiGEr705OrH8iGCdzIxnP 714i2GT6+Bd02jY4dODqLTXq9VFFarGmytnNRY/m1HD5E1vfS7X6EWVy/QJ9PVxJ ZiOOhbw0ELbsMsU4Lr+4FLOf7XIewgYNOpU7rBgP4vVZJpth61AZDI8QRtYyjFtZ VNQqiYcD+4TZ9yU3GSNaYCOo/VpaQeo= -----END CERTIFICATE-----Generated at Mon Jul 6 20:14:27 2026 by rpki-client