$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa File: a26a7435-f5ab-3419-883b-022dc11c8580.roa (raw, json) Hash identifier: s5oIj+jzkYFyLV4hMyYfr2C7zGXi76Sl6vjumS2tawI= Subject key identifier: 65:F2:E6:3A:90:5F:F8:DC:3A:A2:C4:C1:C7:D1:9E:4A:5C:2E:41:94 Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584D95EFF0A030BDFF7C03A4B680 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 198949 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f0:a0:30:bd:ff:7c:03:a4:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=ea959bdd-68ff-4973-b077-f94e78338152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:79:77:ac:f9:9b:c3:b0:65:2a:25:8b:3d:cc: e8:30:2b:a2:2d:55:aa:74:01:b8:b4:8a:37:a5:18: 27:fa:22:a7:3e:5a:a0:72:2e:63:91:38:b8:e3:17: 34:a7:17:6e:59:75:34:ac:0c:12:16:94:82:52:e5: 94:bd:5c:9c:eb:78:29:9f:c6:9f:2c:45:d6:00:66: bc:04:6f:a8:57:02:5e:38:e6:db:ef:e9:49:d9:b5: bf:c8:f9:06:5a:6e:db:41:86:e9:77:a1:81:d5:45: 65:fb:89:0f:3f:fd:94:95:ff:57:c1:d0:c2:2b:49: fa:9b:7c:8f:92:06:7d:29:0c:19:25:41:fe:92:3b: 77:46:ea:42:5b:fa:37:49:b3:44:04:09:d5:cb:6b: 4b:55:df:01:19:9b:aa:a8:c5:f0:51:2b:1b:f2:1f: 04:b0:e9:a4:a7:0e:48:9f:c8:4c:3d:d1:6d:48:be: d2:81:39:31:8c:c9:11:ce:7d:1e:1d:02:3f:49:a1: 60:0b:2c:74:88:b3:1d:84:23:25:dc:dc:7d:84:cd: c3:cc:95:47:4a:65:cc:5f:d1:cb:8f:44:1e:58:96: 9f:38:f4:31:13:d7:75:46:39:81:aa:a7:22:c7:ab: ec:c8:63:5e:06:b0:e6:35:b9:e7:a0:90:97:56:a4: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F2:E6:3A:90:5F:F8:DC:3A:A2:C4:C1:C7:D1:9E:4A:5C:2E:41:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:89:f8:8b:2e:4f:93:13:17:62:4b:46:6d:93:f7:da:a1:38: af:1e:91:bb:62:c2:c1:bf:24:b0:11:91:8b:44:b3:61:48:e5: 91:05:26:06:50:5e:d8:e1:a9:44:7e:d8:c6:db:ad:e5:e6:4c: 95:9a:de:04:ce:15:df:33:37:51:bb:20:85:9c:ca:ad:0c:88: ea:08:4b:ac:ce:2c:31:0c:99:da:bc:97:fa:85:4c:38:ce:8f: b3:e4:21:d7:a9:7f:bb:43:f4:bc:0c:29:a2:1e:51:6b:ac:17: fb:26:27:63:08:e4:c2:de:f7:93:64:12:35:39:87:da:6b:57: f1:0f:2c:a5:7d:cf:9e:15:8e:03:4f:06:6a:51:f7:08:23:8a: 76:0f:9a:50:6f:5f:c4:88:ae:ec:4d:cb:24:68:eb:7b:26:f8: 9c:bb:fc:ff:38:27:06:54:e8:11:0f:cc:db:46:8c:d6:a5:ed: 90:80:83:65:7c:63:61:0c:85:a2:41:a0:e4:57:d3:11:ea:bd: 73:a6:c1:0c:25:31:2d:49:b3:d1:5f:9c:9a:e8:6c:49:01:b7: 33:e7:15:92:fd:f3:cd:3e:28:85:db:80:ac:a8:e5:05:6a:f8: 5c:a0:c4:c9:7f:70:9e:0f:b0:71:e7:65:ba:0d:1b:68:8d:5f: 87:be:99:79 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2V7/CgML3/fAOktoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZWE5NTliZGQtNjhmZi00OTczLWIwNzctZjk0ZTc4MzM4MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Hl3rPmbw7BlKiWLPczoMCuiLVWqdAG4tIo3 pRgn+iKnPlqgci5jkTi44xc0pxduWXU0rAwSFpSCUuWUvVyc63gpn8afLEXWAGa8 BG+oVwJeOObb7+lJ2bW/yPkGWm7bQYbpd6GB1UVl+4kPP/2Ulf9XwdDCK0n6m3yP kgZ9KQwZJUH+kjt3RupCW/o3SbNEBAnVy2tLVd8BGZuqqMXwUSsb8h8EsOmkpw5I n8hMPdFtSL7SgTkxjMkRzn0eHQI/SaFgCyx0iLMdhCMl3Nx9hM3DzJVHSmXMX9HL j0QeWJafOPQxE9d1RjmBqqcix6vsyGNeBrDmNbnnoJCXVqS1awIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGXy5jqQX/jcOqLEwcfRnkpcLkGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvYTI2YTc0MzUtZjVhYi0z NDE5LTg4M2ItMDIyZGMxMWM4NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATon4iy5PkxMXYktGbZP32qE4rx6Ru2LCwb8ksBGRi0SzYUjlkQUmBlBe 2OGpRH7Yxtut5eZMlZreBM4V3zM3UbsghZzKrQyI6ghLrM4sMQyZ2ryX+oVMOM6P s+Qh16l/u0P0vAwpoh5Ra6wX+yYnYwjkwt73k2QSNTmH2mtX8Q8spX3PnhWOA08G alH3CCOKdg+aUG9fxIiu7E3LJGjreyb4nLv8/zgnBlToEQ/M20aM1qXtkICDZXxj YQyFokGg5FfTEeq9c6bBDCUxLUmz0V+cmuhsSQG3M+cVkv3zzT4ohduArKjlBWr4 XKDEyX9wng+wcedlug0baI1fh76ZeQ== -----END CERTIFICATE-----Generated at Wed Apr 22 03:00:00 2026 by rpki-client