$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa File: 1a632d63-6b73-39e1-a60d-629fb0d0c198.roa (raw, json) Hash identifier: 0q+lQzEw2YPBd/wOUsSUwGFP+y4NO4YD0ee0BBpHHUE= Subject key identifier: A8:43:2D:C7:C9:21:D5:DB:20:54:71:93:CF:97:9F:D7:06:B4:85:A3 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D773A727F6FD685ECD8967880 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 6195 IP address blocks: 138.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:72:7f:6f:d6:85:ec:d8:96:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=9bffcce6-20e8-4acc-8830-4947b1c6a396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:97:6f:b9:ae:a4:3a:f7:89:e6:8f:6a:a2: 41:71:a8:e4:2d:ef:d4:31:a7:38:10:22:15:3b:45: c1:2d:f5:ea:e9:2f:4e:41:39:27:ea:02:5b:0d:49: 04:dc:e9:a9:09:9b:67:a4:47:4e:1d:0b:c7:67:1e: 68:63:5b:63:ea:6b:41:d3:9a:7d:6f:2c:de:e4:46: 6b:85:58:d4:42:2b:54:25:c9:a0:4f:9f:0f:37:a6: 0a:52:b7:85:54:a7:34:44:7a:f0:9c:ef:c0:ca:e0: 2a:f3:55:a5:ca:2a:8f:89:63:59:3c:41:d5:7d:2d: 4b:0e:51:7e:a4:51:c6:a4:6d:2e:59:aa:9c:ee:1d: 11:20:cd:fc:0e:97:cd:6b:50:a0:8d:b6:80:8f:b0: 56:02:72:22:05:93:28:09:39:4d:1b:5d:6d:0f:f6: 17:74:5a:dc:31:04:6f:df:95:87:22:51:55:0e:91: c3:3b:19:a5:46:e5:00:ea:46:ca:f1:f7:db:ea:f1: 02:71:13:83:b8:1d:0c:f9:6f:50:db:21:b9:7f:a6: 9b:70:27:64:ac:90:b0:0a:14:25:a3:ea:1e:8c:25: da:2c:e0:85:8f:4c:88:d8:96:6f:f9:f7:b6:ca:14: 24:95:c6:1b:db:0f:58:f2:6c:b5:f6:c9:2c:89:82: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:2D:C7:C9:21:D5:DB:20:54:71:93:CF:97:9F:D7:06:B4:85:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8b:a4:2d:ae:1e:59:a3:29:ec:92:4b:89:6f:54:a7:9a:35: c3:8b:b3:8e:2d:1f:d9:bd:bd:61:19:f0:96:11:b2:72:87:a5: 76:1b:3f:63:9c:b0:62:f8:cd:5f:14:f9:e6:aa:5b:6a:25:f1: d8:51:3c:43:1b:d5:54:ba:74:73:6f:75:ea:ab:ef:41:9a:48: 3f:35:66:a9:65:ec:35:ce:bc:b9:39:45:ce:45:2d:e0:3e:d3: f1:50:a1:4a:7a:83:ae:8d:7f:dd:4b:1c:43:33:48:21:88:f5: fc:04:d1:e4:64:83:1a:e8:d7:5d:f6:bf:44:25:44:52:38:ce: be:88:38:7e:46:40:c3:cc:0b:84:a3:23:30:f1:9a:fb:79:d0: 31:00:5c:c2:cb:a0:f7:09:fb:04:79:d2:61:8f:c6:f4:93:c6: d8:d4:7e:1d:e0:65:2c:f4:ac:e0:86:17:b2:18:39:30:d7:d6: 9d:7f:bd:06:20:64:f9:6e:21:b3:dc:6d:c4:83:66:34:16:30: ef:f2:14:a3:26:b6:6e:0e:2d:6b:c4:a4:c8:55:f3:9b:b2:ce: 02:81:15:64:27:fc:d4:75:f6:ae:f0:c2:bf:ef:3d:96:e2:fb: 55:6a:81:d4:ac:8d:6d:a9:c2:6e:4a:ab:bc:ac:84:e7:37:3c: 1c:0f:bc:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnJ/b9aF7NiWeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk OWJmZmNjZTYtMjBlOC00YWNjLTg4MzAtNDk0N2IxYzZhMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X+Xb7mupDr3ieaPaqJBcajkLe/UMac4ECIV O0XBLfXq6S9OQTkn6gJbDUkE3OmpCZtnpEdOHQvHZx5oY1tj6mtB05p9byze5EZr hVjUQitUJcmgT58PN6YKUreFVKc0RHrwnO/AyuAq81WlyiqPiWNZPEHVfS1LDlF+ pFHGpG0uWaqc7h0RIM38DpfNa1CgjbaAj7BWAnIiBZMoCTlNG11tD/YXdFrcMQRv 35WHIlFVDpHDOxmlRuUA6kbK8ffb6vECcRODuB0M+W9Q2yG5f6abcCdkrJCwChQl o+oejCXaLOCFj0yI2JZv+fe2yhQklcYb2w9Y8my19sksiYJrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhDLcfJIdXbIFRxk8+Xn9cGtIWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMWE2MzJkNjMtNmI3My0z OWUxLWE2MGQtNjI5ZmIwZDBjMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmLpC2uHlmjKeySS4lvVKeaNcOLs44tH9m9vWEZ8JYRsnKHpXYbP2Oc sGL4zV8U+eaqW2ol8dhRPEMb1VS6dHNvdeqr70GaSD81Zqll7DXOvLk5Rc5FLeA+ 0/FQoUp6g66Nf91LHEMzSCGI9fwE0eRkgxro1132v0QlRFI4zr6IOH5GQMPMC4Sj IzDxmvt50DEAXMLLoPcJ+wR50mGPxvSTxtjUfh3gZSz0rOCGF7IYOTDX1p1/vQYg ZPluIbPcbcSDZjQWMO/yFKMmtm4OLWvEpMhV85uyzgKBFWQn/NR19q7wwr/vPZbi +1VqgdSsjW2pwm5Kq7yshOc3PBwPvA4= -----END CERTIFICATE-----Generated at Mon Apr 13 19:33:56 2026 by rpki-client