$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa File: 311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json) Hash identifier: 0iHo6dFAGJEs2+VQB21skRXhCyyfSBB+R7KHcCGOPV0= Subject key identifier: 7E:F4:13:0B:08:F1:46:08:00:28:99:50:63:D5:DC:72:BD:C3:4E:F5 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D773A72B40A9F4077DC9C0080 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 33598 IP address blocks: 138.8.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:72:b4:0a:9f:40:77:dc:9c:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=9397aabd-0ff9-4f2b-a28f-f41a972b5706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:05:ad:67:df:16:f6:a4:63:c8:16:0f:e5: f6:33:2f:17:a1:26:01:de:b3:cb:f6:97:27:4f:c3: b1:13:62:1b:e5:6a:99:4b:ec:f0:79:90:46:bb:b1: b8:b1:a2:40:b8:53:22:8e:61:07:84:26:4f:54:68: a0:a4:23:ba:a8:50:67:bb:5e:5f:26:99:61:ac:24: 9a:6d:9c:c8:0d:e9:0a:54:ad:e7:85:a4:a8:c2:ca: 64:27:06:22:f6:82:6e:47:4f:51:85:56:24:b6:b6: be:c8:2d:91:cc:c8:f2:c5:00:96:1e:92:cd:59:32: 58:ea:0f:f6:df:45:da:9e:7a:58:b7:25:24:5a:80: 06:45:56:13:38:54:93:ab:2c:bd:05:ee:65:c1:9e: 8d:a0:6e:a4:d6:c1:40:b9:57:0f:bd:6b:5d:bf:63: b8:b3:83:7c:09:21:c5:38:a0:3e:ee:ca:2d:4a:d5: 56:ec:59:a1:f2:5c:d7:61:09:49:ff:c4:9f:77:f2: 62:9b:8c:45:22:d6:0b:92:06:6d:39:30:49:de:6c: 4e:f8:c6:bf:07:cc:11:9b:b9:5d:90:8b:4a:82:bf: 11:7a:fa:11:15:cc:84:22:c0:72:fc:39:5c:ff:b0: 61:25:6d:35:8e:29:33:d9:5f:4f:4a:66:13:94:a1: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F4:13:0B:08:F1:46:08:00:28:99:50:63:D5:DC:72:BD:C3:4E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c5:92:ea:13:95:78:9f:83:f0:6b:b0:be:19:bc:5c:ec:c8: 1b:e3:a8:10:8e:32:d5:f6:23:a2:68:24:6d:f3:b3:8e:52:8f: 22:a5:75:8a:ed:86:f4:76:74:cc:ac:7d:68:d0:3d:c4:27:d7: c4:f2:90:48:b2:e5:52:a1:86:3e:ef:aa:01:70:f6:38:ac:20: 07:2f:fb:14:0e:c8:b8:52:ab:82:ac:d3:cf:99:1b:1e:11:2b: d7:43:d9:fe:3d:20:db:81:d1:55:ad:50:46:be:4d:48:89:96: 47:b9:ed:02:7b:8b:5a:b7:00:df:75:20:ce:43:48:f1:02:be: 82:97:94:68:5e:ae:b0:32:8a:3b:f4:a5:a9:bb:18:eb:42:c6: 0c:79:55:db:c7:04:1a:fe:b6:fe:de:48:2f:d9:90:56:fd:70: 3f:93:ec:b7:f8:20:d6:62:2b:36:85:f6:22:29:e7:e4:ee:21: ad:25:ac:99:0d:6f:22:05:34:0c:47:57:a5:f5:b8:4e:08:42: 25:fc:f0:43:9b:6e:4a:27:85:f7:97:ef:7f:b3:23:96:15:6e: 08:88:48:f5:58:25:00:51:6c:25:5e:71:b7:2e:e5:39:c2:74: b2:91:dd:5d:63:31:01:8b:5f:e1:1d:2c:79:11:bf:22:55:7a: b6:49:ef:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnK0Cp9Ad9ycAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk OTM5N2FhYmQtMGZmOS00ZjJiLWEyOGYtZjQxYTk3MmI1NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2kFrWffFvakY8gWD+X2My8XoSYB3rPL9pcn T8OxE2Ib5WqZS+zweZBGu7G4saJAuFMijmEHhCZPVGigpCO6qFBnu15fJplhrCSa bZzIDekKVK3nhaSowspkJwYi9oJuR09RhVYktra+yC2RzMjyxQCWHpLNWTJY6g/2 30XannpYtyUkWoAGRVYTOFSTqyy9Be5lwZ6NoG6k1sFAuVcPvWtdv2O4s4N8CSHF OKA+7sotStVW7Fmh8lzXYQlJ/8Sfd/Jim4xFItYLkgZtOTBJ3mxO+Ma/B8wRm7ld kItKgr8RevoRFcyEIsBy/Dlc/7BhJW01jikz2V9PSmYTlKG25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH70EwsI8UYIACiZUGPV3HK9w071MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzExYTg4ZGUtMmNkZC0z NjRiLTg2ZGUtOTkxYTgxYTk1NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7FkuoTlXifg/BrsL4ZvFzsyBvjqBCOMtX2I6JoJG3zs45SjyKldYrt hvR2dMysfWjQPcQn18TykEiy5VKhhj7vqgFw9jisIAcv+xQOyLhSq4Ks08+ZGx4R K9dD2f49INuB0VWtUEa+TUiJlke57QJ7i1q3AN91IM5DSPECvoKXlGherrAyijv0 pam7GOtCxgx5VdvHBBr+tv7eSC/ZkFb9cD+T7Lf4INZiKzaF9iIp5+TuIa0lrJkN byIFNAxHV6X1uE4IQiX88EObbkonhfeX73+zI5YVbgiISPVYJQBRbCVecbcu5TnC dLKR3V1jMQGLX+EdLHkRvyJVerZJ7+c= -----END CERTIFICATE-----Generated at Wed Apr 15 08:31:13 2026 by rpki-client