$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa File: 0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa (raw, json) Hash identifier: O9O0G+FzWH9sTSUv+H9Ty7WsvEu6qUTvNEKwCTVVKxI= Subject key identifier: 41:87:B8:C2:5B:5F:21:00:82:D7:9E:6D:B1:99:7F:E4:BF:3D:8E:B8 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584E2D9F2307338A400E6ED71500 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 18593 IP address blocks: 138.8.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:23:07:33:8a:40:0e:6e:d7:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=c2229982-e0f7-4f07-8c52-afb539314ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9e:80:a6:47:1b:7b:4a:eb:07:15:1b:46:63: 81:53:93:1e:5e:6e:34:cf:ce:60:74:6f:6e:af:7c: b9:29:bb:2c:bc:4d:e9:e2:04:83:ce:10:90:a9:73: d4:a3:93:a7:04:e6:8d:72:a3:f1:b9:a9:ba:9b:b7: 3d:d5:27:1a:ce:5b:4f:95:59:36:9f:5b:74:04:ca: 8d:e0:f1:a4:38:4d:1b:56:99:8c:91:d2:0c:0a:ee: ce:a9:54:fc:45:42:f9:42:b6:6d:6f:79:67:63:e3: c2:1f:0a:6a:a5:a9:69:4f:1a:98:d8:41:71:ea:de: ed:bb:8e:fe:4a:a4:41:7e:d6:6c:32:8e:03:d7:4c: ad:7d:a8:30:9a:ee:3b:a4:ef:65:47:b6:06:32:91: f3:e6:51:56:4e:86:2b:3d:84:48:cf:1d:ee:32:c5: 80:ce:61:cd:44:af:f9:e2:fd:7a:29:5d:f1:12:c6: 6b:ff:46:4c:0c:f7:be:d4:3e:d7:87:67:60:68:71: b9:a0:b0:47:15:78:69:e4:7c:ee:b9:5c:55:b4:25: e8:c5:62:fc:1a:a1:e8:d3:f4:1e:b4:41:41:36:cb: 26:b6:5b:b8:b9:01:ed:81:63:c9:e7:d7:18:c0:50: 93:aa:2d:ab:78:6c:35:c9:60:21:10:82:4d:5b:a3: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:B8:C2:5B:5F:21:00:82:D7:9E:6D:B1:99:7F:E4:BF:3D:8E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:93:a7:2c:b9:f3:cc:7b:5f:20:24:7b:c8:5b:dd:cd:ff:b6: 42:cf:e7:f7:0c:79:ae:5f:12:5f:47:0e:ba:4d:bc:8f:16:54: 21:cd:65:70:70:5c:99:06:c9:bc:aa:06:d1:70:d0:b8:a1:df: 71:2b:6b:a4:3b:4c:a8:28:fe:17:a8:02:c9:a0:ed:3d:7d:36: 8a:d1:88:be:4b:e6:4b:9d:d5:7f:fe:d8:be:15:ec:ed:11:00: 71:fb:27:bb:53:6a:e3:b5:d2:7e:41:a8:6b:1e:a4:6a:d3:c1: 6c:d1:ef:52:b5:db:59:48:ac:fd:e4:ba:41:a6:01:18:62:3e: 49:26:1e:74:e9:5d:16:17:d1:7a:a1:c5:95:74:3f:61:07:39: 30:43:64:5c:59:78:ad:67:5c:51:64:08:4d:03:c6:b3:a5:f3: 5d:e9:db:9a:d6:be:64:97:ae:3a:fd:51:eb:09:dd:9b:07:07: 2c:47:ab:44:2b:d0:ed:30:a1:d5:5b:fc:ae:24:3d:46:54:2f: 7c:60:9e:12:a1:5b:cb:7a:fc:4d:ba:d9:73:df:58:71:57:b5: 5e:90:00:3a:ff:fe:33:cf:b1:7d:1c:83:25:24:7d:9f:3e:d6: 33:18:64:b2:99:93:0e:91:3d:c8:38:71:70:c3:a4:a3:77:e2: 64:3a:4c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyMHM4pADm7XFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk YzIyMjk5ODItZTBmNy00ZjA3LThjNTItYWZiNTM5MzE0ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ6Apkcbe0rrBxUbRmOBU5MeXm40z85gdG9u r3y5KbssvE3p4gSDzhCQqXPUo5OnBOaNcqPxuam6m7c91ScazltPlVk2n1t0BMqN 4PGkOE0bVpmMkdIMCu7OqVT8RUL5QrZtb3lnY+PCHwpqpalpTxqY2EFx6t7tu47+ SqRBftZsMo4D10ytfagwmu47pO9lR7YGMpHz5lFWToYrPYRIzx3uMsWAzmHNRK/5 4v16KV3xEsZr/0ZMDPe+1D7Xh2dgaHG5oLBHFXhp5HzuuVxVtCXoxWL8GqHo0/Qe tEFBNssmtlu4uQHtgWPJ59cYwFCTqi2reGw1yWAhEIJNW6Ox7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGHuMJbXyEAgteebbGZf+S/PY64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDE1NWU0ZjEtN2NkNC0z ZGI3LWFhNDktNWRkMjc2YWM4YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAightMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Tpyy588x7XyAke8hb3c3/tkLP5/cMea5fEl9HDrpNvI8WVCHNZXBw XJkGybyqBtFw0Lih33Era6Q7TKgo/heoAsmg7T19NorRiL5L5kud1X/+2L4V7O0R AHH7J7tTauO10n5BqGsepGrTwWzR71K121lIrP3kukGmARhiPkkmHnTpXRYX0Xqh xZV0P2EHOTBDZFxZeK1nXFFkCE0DxrOl813p25rWvmSXrjr9UesJ3ZsHByxHq0Qr 0O0wodVb/K4kPUZUL3xgnhKhW8t6/E262XPfWHFXtV6QADr//jPPsX0cgyUkfZ8+ 1jMYZLKZkw6RPcg4cXDDpKN34mQ6TPc= -----END CERTIFICATE-----Generated at Mon Jul 13 12:49:45 2026 by rpki-client