$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa File: 311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json) Hash identifier: 7VNMhjFodyCwZTrM0hatQhNIbEwRHsiO2ztYaAJpYhA= Subject key identifier: AD:AD:29:89:30:FB:27:DB:42:E1:54:C4:14:CA:31:67:71:BB:AB:C8 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584F9BCDF57AAC8C3B68FF614840 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 33598 IP address blocks: 138.8.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f5:7a:ac:8c:3b:68:ff:61:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=7ccf459c-9964-4abd-ab9a-e4f47d273eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0a:a0:22:3f:c4:94:86:ff:20:f4:06:01:ea: e8:a2:e0:7b:29:07:0d:e4:ea:23:e4:84:18:d2:b7: ac:63:2b:cf:8c:8f:a8:29:b9:f2:63:1b:1b:1a:6b: 41:88:2e:96:5e:b6:6e:0f:15:59:27:f7:00:76:5c: fc:d1:90:bf:77:49:11:e7:a0:40:7e:cd:de:28:3f: fa:48:80:ed:5f:41:d1:93:51:72:06:b6:72:8d:67: 49:c8:4a:f9:b8:72:c3:a7:f0:dd:db:c8:50:4f:d2: ef:08:85:35:54:29:d6:c0:07:07:8f:fd:cf:02:7b: f9:ac:17:5c:67:4e:dd:aa:33:7d:4e:6e:5b:9c:d1: 37:93:5a:6b:8d:b3:47:ac:1d:fa:8a:a7:93:82:72: 1f:df:52:e1:99:17:eb:1c:1b:87:b6:dd:30:d8:ca: 59:38:38:28:97:aa:62:46:74:c0:33:bc:22:db:a9: e7:6f:8b:73:e5:6f:09:09:86:40:7f:dd:3d:7c:d5: 0b:47:84:a9:77:bb:81:20:9a:25:f3:23:2e:a9:31: e7:1b:9a:a3:23:97:21:ee:a8:33:b5:35:cd:8c:87: 39:1e:ca:47:46:9a:91:fb:94:18:2e:41:16:7d:ae: 08:36:2b:b8:b9:ab:5c:e2:00:60:8c:0a:22:13:93: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AD:29:89:30:FB:27:DB:42:E1:54:C4:14:CA:31:67:71:BB:AB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6c:99:da:b4:0b:b8:f4:95:9a:13:4a:54:41:ce:55:74:c8: 0d:62:e2:8a:27:4e:1d:6a:b3:e7:5d:8a:3a:db:ab:61:54:62: 7a:7a:bf:24:6d:aa:85:e5:60:58:82:36:95:03:6b:1e:e3:80: 9b:ab:81:95:75:16:4c:50:ab:bb:20:2f:39:aa:dd:95:06:0c: 83:4f:c2:bf:89:61:b7:de:d9:37:23:bd:7c:db:05:53:26:fa: e0:7d:d0:fb:1c:4a:72:7e:a8:e1:45:d9:b0:d2:c7:50:ba:ce: bf:91:34:aa:b6:86:09:33:58:59:e3:5a:3b:ea:41:a4:f7:51: a1:40:15:56:b3:7b:57:ae:87:08:81:45:05:89:8e:06:fa:d9: 43:74:52:52:fe:d0:b2:f3:43:04:a3:a4:5a:f3:ec:e4:84:cd: cd:63:b6:3e:57:ec:be:6f:04:7e:25:3f:f1:40:06:45:5e:55: 8c:55:2f:b0:b5:4e:ea:fa:da:ab:e0:02:70:b6:80:da:33:15: 1f:94:4a:a0:7f:b1:c2:77:1d:6d:7e:8a:1c:8a:83:72:8e:ad: ca:ff:ba:88:02:61:97:87:3d:33:ef:0d:73:2f:37:da:1a:a0: 7a:fc:d7:1c:80:3e:42:6f:71:d7:67:cf:cb:69:32:2a:d7:6a: db:bb:a9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfV6rIw7aP9hSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk N2NjZjQ1OWMtOTk2NC00YWJkLWFiOWEtZTRmNDdkMjczZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwqgIj/ElIb/IPQGAeroouB7KQcN5Ooj5IQY 0resYyvPjI+oKbnyYxsbGmtBiC6WXrZuDxVZJ/cAdlz80ZC/d0kR56BAfs3eKD/6 SIDtX0HRk1FyBrZyjWdJyEr5uHLDp/Dd28hQT9LvCIU1VCnWwAcHj/3PAnv5rBdc Z07dqjN9Tm5bnNE3k1prjbNHrB36iqeTgnIf31LhmRfrHBuHtt0w2MpZODgol6pi RnTAM7wi26nnb4tz5W8JCYZAf909fNULR4Spd7uBIJol8yMuqTHnG5qjI5ch7qgz tTXNjIc5HspHRpqR+5QYLkEWfa4INiu4uatc4gBgjAoiE5O4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2tKYkw+yfbQuFUxBTKMWdxu6vIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzExYTg4ZGUtMmNkZC0z NjRiLTg2ZGUtOTkxYTgxYTk1NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxsmdq0C7j0lZoTSlRBzlV0yA1i4oonTh1qs+ddijrbq2FUYnp6vyRt qoXlYFiCNpUDax7jgJurgZV1FkxQq7sgLzmq3ZUGDINPwr+JYbfe2TcjvXzbBVMm +uB90PscSnJ+qOFF2bDSx1C6zr+RNKq2hgkzWFnjWjvqQaT3UaFAFVaze1euhwiB RQWJjgb62UN0UlL+0LLzQwSjpFrz7OSEzc1jtj5X7L5vBH4lP/FABkVeVYxVL7C1 Tur62qvgAnC2gNozFR+USqB/scJ3HW1+ihyKg3KOrcr/uogCYZeHPTPvDXMvN9oa oHr81xyAPkJvcddnz8tpMirXatu7qSw= -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:05 2026 by rpki-client