$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa File: 1a632d63-6b73-39e1-a60d-629fb0d0c198.roa (raw, json) Hash identifier: ne7KBpDcpP/qSWyIK4qusPJaBy0QIxGvMjvwg0XQvpw= Subject key identifier: 69:43:2C:0C:C1:B9:7D:75:08:1C:58:AE:6F:62:84:06:46:95:91:AD Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584EF9E213A868F63D37BD1C0A80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 6195 IP address blocks: 138.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:13:a8:68:f6:3d:37:bd:1c:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=8d15deae-a396-4363-8872-5583b035850a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:da:36:e7:30:78:93:5f:a6:1d:6f:db:06: f7:c0:1d:07:71:86:5f:13:dd:d8:c4:12:02:c7:eb: 7d:c3:fd:5c:a1:cc:6d:3a:98:53:5e:45:15:d2:f8: 50:a8:a8:c0:a8:80:11:5f:ab:cc:0c:1d:e5:53:50: 60:61:d9:f1:93:31:9e:c8:5b:6e:1a:e7:bf:3d:5a: 77:11:43:12:10:df:24:a9:df:4e:ae:09:34:43:e2: 02:fc:f2:74:5e:63:c5:96:60:ab:66:91:90:26:01: 2c:eb:a3:98:11:a9:bd:53:1d:a3:58:f3:8d:b8:9d: 68:d7:89:c5:78:87:6a:cc:1d:32:a7:ac:57:a3:3c: a2:6e:94:cb:11:86:5b:db:e2:0e:04:3f:1c:24:3b: e5:1c:83:2e:0d:90:e7:fb:e8:c3:61:5e:5f:1f:e2: c8:86:a5:62:c3:8d:3a:d1:12:50:d6:50:7f:d4:65: 02:44:fe:24:bb:35:be:45:9f:92:66:83:a3:77:b6: 05:6c:52:d6:1d:4b:10:fd:8f:40:ff:8d:67:b9:70: 3a:17:72:20:b9:6f:9b:47:cd:84:d2:df:a2:5c:87: f9:dd:4e:da:12:ef:f3:fb:c1:e2:a7:cc:96:ba:bb: ce:e8:53:be:60:46:84:fa:e1:26:52:e6:7e:20:8a: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:2C:0C:C1:B9:7D:75:08:1C:58:AE:6F:62:84:06:46:95:91:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1f:76:75:97:b4:71:c2:e2:3b:2d:9b:08:f1:aa:6c:4c:40: 8d:e0:b8:ac:4a:89:66:fe:8c:3b:95:68:aa:66:02:78:79:18: b4:f7:18:5b:93:5a:ba:c9:98:7b:b8:7c:4d:49:15:a5:c3:a5: 16:8d:55:b1:75:88:f9:2d:b2:b2:f7:2a:dd:70:38:0d:29:ac: 48:4a:6c:3a:f7:0c:08:3d:0a:77:51:d7:f2:c3:da:16:6d:7e: f4:49:96:e3:e5:33:d0:d9:b7:98:35:79:52:59:1e:2f:e1:b2: 94:b9:a9:ef:68:86:e2:6b:5e:d4:04:34:1e:c8:97:05:92:17: 0a:3b:a1:31:32:7f:d6:c7:42:6f:26:dd:9a:c8:4d:ee:30:11: cc:be:1e:06:98:f2:65:e3:db:ef:d6:a2:33:fb:b2:a6:e6:93: e6:e9:9e:79:49:53:23:3a:a2:5c:12:ea:ea:e9:4b:ca:23:45: d1:b4:6e:e1:b9:5b:1f:59:a7:7e:c9:9f:7a:01:4d:71:7e:05: 89:78:c1:9c:66:54:b3:7a:24:96:dd:4b:f1:9c:27:e6:de:d3: c2:aa:11:5a:f4:cf:26:3f:20:71:71:ee:7d:e7:32:d7:86:a3: 64:23:79:de:ad:1b:1f:50:35:03:9d:a5:bb:34:73:da:e6:0f: 79:2f:16:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hOoaPY9N70cCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk OGQxNWRlYWUtYTM5Ni00MzYzLTg4NzItNTU4M2IwMzU4NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJnaNucweJNfph1v2wb3wB0HcYZfE93YxBIC x+t9w/1cocxtOphTXkUV0vhQqKjAqIARX6vMDB3lU1BgYdnxkzGeyFtuGue/PVp3 EUMSEN8kqd9Orgk0Q+IC/PJ0XmPFlmCrZpGQJgEs66OYEam9Ux2jWPONuJ1o14nF eIdqzB0yp6xXozyibpTLEYZb2+IOBD8cJDvlHIMuDZDn++jDYV5fH+LIhqViw406 0RJQ1lB/1GUCRP4kuzW+RZ+SZoOjd7YFbFLWHUsQ/Y9A/41nuXA6F3IguW+bR82E 0t+iXIf53U7aEu/z+8Hip8yWurvO6FO+YEaE+uEmUuZ+IIqYcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlDLAzBuX11CBxYrm9ihAZGlZGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMWE2MzJkNjMtNmI3My0z OWUxLWE2MGQtNjI5ZmIwZDBjMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkfdnWXtHHC4jstmwjxqmxMQI3guKxKiWb+jDuVaKpmAnh5GLT3GFuT WrrJmHu4fE1JFaXDpRaNVbF1iPktsrL3Kt1wOA0prEhKbDr3DAg9CndR1/LD2hZt fvRJluPlM9DZt5g1eVJZHi/hspS5qe9ohuJrXtQENB7IlwWSFwo7oTEyf9bHQm8m 3ZrITe4wEcy+HgaY8mXj2+/WojP7sqbmk+bpnnlJUyM6olwS6urpS8ojRdG0buG5 Wx9Zp37Jn3oBTXF+BYl4wZxmVLN6JJbdS/GcJ+be08KqEVr0zyY/IHFx7n3nMteG o2Qjed6tGx9QNQOdpbs0c9rmD3kvFsM= -----END CERTIFICATE-----Generated at Fri Aug 28 00:40:30 2026 by rpki-client