$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa File: a26a7435-f5ab-3419-883b-022dc11c8580.roa (raw, json) Hash identifier: e6zCZhqydKvPTKjtSBpQnO4jiSuPmx1EbLhbRhekA3o= Subject key identifier: C4:A5:98:26:FC:80:CA:CE:33:2C:BF:30:C0:A7:43:22:B4:41:05:DB Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584F189794529C08B1F4B0CD4500 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 198949 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:94:52:9c:08:b1:f4:b0:cd:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=018d2c1a-56ee-4e61-9ce4-97873fbf2230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:58:30:98:a3:bb:ee:58:00:ed:1c:9c:6e: 9f:33:69:52:b3:6e:e3:18:92:26:b7:24:d2:29:81: 8e:7f:9b:34:d6:71:2b:dc:18:69:92:59:09:09:cc: 5e:46:3e:96:70:51:a8:db:bb:1f:d0:de:f8:56:66: 57:0b:0b:79:08:0f:bd:5e:b0:95:28:93:48:7d:de: 89:c4:ad:34:15:43:93:b5:0f:bf:22:04:3c:36:d4: 18:d6:cc:b7:7b:20:84:68:47:b2:af:f3:86:2a:7d: 67:bf:f3:cf:15:61:f5:0b:2a:ed:1b:f8:1a:bd:46: df:05:f1:f3:db:92:3a:60:95:a5:45:1f:63:d7:ae: 92:2c:18:ea:73:92:64:3f:a8:60:43:4b:a5:c7:ac: 9a:53:9c:aa:11:12:21:af:b2:a0:37:dd:73:d0:bf: 97:c0:a3:e3:68:e6:67:99:81:93:0c:7f:b6:4d:2d: 82:58:a6:6d:b3:68:10:64:49:60:11:7e:96:d2:b0: c8:ff:3c:0b:8e:9e:c1:be:35:5a:11:1d:4c:38:8f: 98:af:cf:01:9c:a8:0a:af:a6:5b:db:32:aa:a6:05: f7:4f:3a:ee:a5:32:91:27:e9:1f:cf:0f:ab:1f:4b: 61:32:21:70:b9:bf:b8:f6:86:da:ff:08:4d:ab:bd: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A5:98:26:FC:80:CA:CE:33:2C:BF:30:C0:A7:43:22:B4:41:05:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cf:8d:3d:c7:07:13:db:68:03:8c:1f:91:09:da:20:e9:ef: b5:8e:9d:49:0e:6b:23:63:32:65:5e:5e:55:b2:80:43:70:f5: f2:a0:db:85:e2:6b:09:48:4f:3d:a2:93:90:4d:dd:92:df:57: 28:ba:85:8e:e8:5d:ec:5e:33:70:75:76:f9:d5:b3:88:3d:38: 1f:0e:04:e1:da:23:b4:35:fe:5d:22:a9:c1:1d:74:97:23:ee: 91:dd:53:ee:6b:1f:78:73:6f:2e:ef:a0:0b:dd:08:a7:f2:5d: b8:bb:12:22:45:32:f9:73:26:40:32:dd:52:77:54:49:07:b8: c0:ff:4b:00:1e:c3:34:b4:7d:45:fc:74:2c:06:a8:f9:d8:4f: cb:2f:ac:e6:ec:08:65:6e:a5:e6:ff:4b:cf:f8:58:16:47:d7: 24:03:38:94:b5:f3:4d:4f:d5:24:19:98:0a:4a:e7:c7:cb:17: 32:63:65:76:84:e8:fe:86:f5:0b:27:1c:94:7b:28:ab:3d:ab: f4:b2:47:2f:c1:1e:43:77:1e:8a:a9:1e:b9:3f:93:ec:b2:17: 11:b5:a6:ec:00:9c:7f:5e:c7:0c:df:8b:ed:ca:3c:59:9a:46: bd:75:df:4b:dd:07:f9:06:06:6d:05:e2:07:53:f8:1f:17:8d: ca:e8:91:8c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8Yl5RSnAix9LDNRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MDE4ZDJjMWEtNTZlZS00ZTYxLTljZTQtOTc4NzNmYmYyMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgptYMJiju+5YAO0cnG6fM2lSs27jGJImtyTS KYGOf5s01nEr3BhpklkJCcxeRj6WcFGo27sf0N74VmZXCwt5CA+9XrCVKJNIfd6J xK00FUOTtQ+/IgQ8NtQY1sy3eyCEaEeyr/OGKn1nv/PPFWH1CyrtG/gavUbfBfHz 25I6YJWlRR9j166SLBjqc5JkP6hgQ0ulx6yaU5yqERIhr7KgN91z0L+XwKPjaOZn mYGTDH+2TS2CWKZts2gQZElgEX6W0rDI/zwLjp7BvjVaER1MOI+Yr88BnKgKr6Zb 2zKqpgX3TzrupTKRJ+kfzw+rH0thMiFwub+49oba/whNq73OSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMSlmCb8gMrOMyy/MMCnQyK0QQXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvYTI2YTc0MzUtZjVhYi0z NDE5LTg4M2ItMDIyZGMxMWM4NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAF8+NPccHE9toA4wfkQnaIOnvtY6dSQ5rI2MyZV5eVbKAQ3D18qDbheJr CUhPPaKTkE3dkt9XKLqFjuhd7F4zcHV2+dWziD04Hw4E4dojtDX+XSKpwR10lyPu kd1T7msfeHNvLu+gC90Ip/JduLsSIkUy+XMmQDLdUndUSQe4wP9LAB7DNLR9Rfx0 LAao+dhPyy+s5uwIZW6l5v9Lz/hYFkfXJAM4lLXzTU/VJBmYCkrnx8sXMmNldoTo /ob1CycclHsoqz2r9LJHL8EeQ3ceiqkeuT+T7LIXEbWm7ACcf17HDN+L7co8WZpG vXXfS90H+QYGbQXiB1P4HxeNyuiRjA== -----END CERTIFICATE-----Generated at Sat Sep 26 17:08:31 2026 by rpki-client