$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa File: 311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json) Hash identifier: q1doJ3IjbQSdRO3VMH23T6oMCT63oHWYUsz+LeUiGCc= Subject key identifier: B9:1D:2C:E1:E7:65:9E:29:8C:82:EC:8A:E6:C0:C9:6A:2B:ED:B0:E8 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584C969C65E7003610E0588B4980 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 33598 IP address blocks: 138.8.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:65:e7:00:36:10:e0:58:8b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=912ab863-bad1-44cd-b30e-e8e60164280f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:15:8a:c9:e3:83:d1:ea:17:66:27:fc:ca: 55:a7:f4:9b:8d:05:fb:9a:f0:dc:31:b5:d9:e0:bc: da:31:ca:1a:00:7b:0e:65:f6:39:58:b4:4c:c8:e2: 3c:79:c3:29:13:3c:d6:e1:62:bd:8f:7b:81:ef:2f: f3:f8:63:de:a5:60:92:16:c0:bc:ff:af:38:2e:78: b1:cc:ac:00:ce:1f:4a:9c:53:ed:19:7a:57:f0:93: 16:9f:55:97:00:e8:19:85:c7:cb:52:c7:71:f0:e6: e6:37:f2:3b:75:ae:5d:0b:6c:44:5b:a5:eb:91:2e: c9:8f:ab:16:65:eb:69:13:2a:9f:e7:cf:4b:a9:d4: 02:72:46:a0:94:9e:1d:af:9e:0d:10:90:c2:87:03: ea:79:43:7a:f4:e6:b2:74:5a:41:52:5d:e0:f7:f5: 35:3e:66:cf:55:1b:6f:84:c2:3c:bf:4f:be:8a:66: ac:96:ac:7a:a4:9e:6a:c4:28:c8:d0:31:a0:db:f3: a8:9c:2c:90:d5:a3:f3:c6:5f:e3:16:cb:54:b2:f5: f1:8c:f3:33:0f:ab:63:dc:c2:2d:c8:6c:c4:9f:fa: dc:9b:02:26:91:2b:78:b8:2c:87:4c:d1:a0:8f:a4: de:10:5f:9d:a4:d6:a4:65:f4:7b:5c:be:ea:25:a0: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:2C:E1:E7:65:9E:29:8C:82:EC:8A:E6:C0:C9:6A:2B:ED:B0:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e1:9b:4f:26:3d:17:02:7c:79:3e:db:90:7a:60:d6:bb:24: 06:27:79:7a:68:dd:b1:b7:c3:be:54:46:42:03:1c:97:e1:8f: 7d:7f:5d:96:1a:f6:22:ab:1a:be:9e:8e:ca:22:c2:cd:c7:3a: e9:e5:1d:41:fe:f3:10:5e:3e:07:dc:d4:c3:13:ab:4e:94:e4: 6a:10:3a:b6:cf:41:c2:d3:d5:08:c0:9e:fe:67:82:13:6f:f5: f1:ce:f6:cc:76:7b:44:07:a7:59:7f:41:41:0e:ce:64:eb:a5: 65:93:d1:6d:a5:c1:1f:68:c3:36:6a:dd:cb:c8:10:63:93:99: f2:db:43:a1:2f:a7:76:32:4b:82:b2:24:f7:12:93:6a:58:e9: 4a:d4:29:00:b1:62:67:93:8d:47:d1:d1:55:1d:9a:fd:26:2d: ae:85:30:0b:17:1d:ca:9c:1d:9c:c0:24:61:3c:1f:1f:34:ee: bc:33:08:08:9a:29:7c:f8:70:c1:df:cf:41:ca:ac:e5:98:2b: eb:d9:82:25:3a:ad:ce:ae:aa:92:40:13:24:4a:6a:5c:85:d0: 62:b0:10:d1:94:de:96:ec:2d:f2:a9:b6:99:3a:8c:4b:9b:59: 91:5b:98:00:f6:6c:c5:8b:02:57:f1:f3:c5:97:91:c3:72:c4: fc:32:44:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGXnADYQ4FiLSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk OTEyYWI4NjMtYmFkMS00NGNkLWIzMGUtZThlNjAxNjQyODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUMVisnjg9HqF2Yn/MpVp/SbjQX7mvDcMbXZ 4LzaMcoaAHsOZfY5WLRMyOI8ecMpEzzW4WK9j3uB7y/z+GPepWCSFsC8/684Lnix zKwAzh9KnFPtGXpX8JMWn1WXAOgZhcfLUsdx8ObmN/I7da5dC2xEW6XrkS7Jj6sW ZetpEyqf589LqdQCckaglJ4dr54NEJDChwPqeUN69OaydFpBUl3g9/U1PmbPVRtv hMI8v0++imaslqx6pJ5qxCjI0DGg2/OonCyQ1aPzxl/jFstUsvXxjPMzD6tj3MIt yGzEn/rcmwImkSt4uCyHTNGgj6TeEF+dpNakZfR7XL7qJaAYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkdLOHnZZ4pjILsiubAyWor7bDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzExYTg4ZGUtMmNkZC0z NjRiLTg2ZGUtOTkxYTgxYTk1NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfhm08mPRcCfHk+25B6YNa7JAYneXpo3bG3w75URkIDHJfhj31/XZYa 9iKrGr6ejsoiws3HOunlHUH+8xBePgfc1MMTq06U5GoQOrbPQcLT1QjAnv5nghNv 9fHO9sx2e0QHp1l/QUEOzmTrpWWT0W2lwR9owzZq3cvIEGOTmfLbQ6Evp3YyS4Ky JPcSk2pY6UrUKQCxYmeTjUfR0VUdmv0mLa6FMAsXHcqcHZzAJGE8Hx807rwzCAia KXz4cMHfz0HKrOWYK+vZgiU6rc6uqpJAEyRKalyF0GKwENGU3pbsLfKptpk6jEub WZFbmAD2bMWLAlfx88WXkcNyxPwyROE= -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:23 2026 by rpki-client