$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json) Hash identifier: L9/tOKwP7L1YbV+uW0vgZMvD27SUctMkNHO/XtNGpL8= Subject key identifier: 79:7B:19:A0:78:83:1F:E2:8B:7F:6C:93:9D:DA:FA:84:3F:AF:D3:76 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584ED001F06044E957097C26BC40 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 18593 IP address blocks: 138.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f0:60:44:e9:57:09:7c:26:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=0574f5ce-a7d7-474b-8b32-4483eee8e025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:c8:ac:82:55:ec:68:96:04:c5:2f:20:6a: 73:ee:64:eb:2e:3e:f0:cb:ad:a2:0f:6d:13:1e:80: c6:01:fa:b1:ac:48:cf:4a:13:81:b0:72:23:c6:85: 6a:d2:13:cf:7a:4e:9f:90:98:41:08:cf:29:65:52: 55:63:6f:f3:51:6f:f2:18:59:38:6c:d8:8f:02:98: 3c:14:e1:17:41:32:42:41:01:73:6f:f2:fc:1b:48: 1e:63:e5:dd:c2:3c:cb:a0:31:e3:a5:bf:c6:35:f6: f1:17:8e:8d:f3:07:08:70:14:ea:7d:91:c1:0d:1a: 56:23:f3:1f:06:f0:8e:a0:a8:c6:a4:1f:80:b8:57: 5d:e5:f5:97:92:b4:27:11:4b:c4:fa:fc:45:e1:29: 14:67:0c:47:06:bf:3f:86:b5:da:ba:25:d0:ed:85: fc:fa:91:37:22:b1:3b:87:62:c9:85:43:31:e9:ab: 81:ed:7f:f5:a4:e8:36:90:ca:e5:b9:4f:15:f0:9a: 8e:72:18:c6:c0:21:0e:fc:c2:cf:9a:c1:4d:4c:f0: 0b:d4:4e:92:dd:23:0c:1f:0e:d7:ea:72:e2:20:ec: 62:51:82:b1:ab:7e:f4:cc:63:52:6c:eb:a3:e2:2b: b5:36:74:a3:68:91:69:30:34:4b:69:9e:81:4c:a7: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:19:A0:78:83:1F:E2:8B:7F:6C:93:9D:DA:FA:84:3F:AF:D3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e2:ab:60:db:80:7c:b5:d3:ec:63:56:59:a8:80:f9:94:22: 6a:eb:56:be:e1:2f:06:70:94:b1:01:dc:65:c2:f0:d7:32:5f: 5e:57:60:ec:8c:f1:08:8b:28:09:cd:70:d1:d9:11:5b:6f:f4: 96:d7:93:69:ad:2d:b4:c1:f6:7a:6e:a0:39:ca:c2:97:69:75: f5:af:6c:01:0e:be:eb:4f:60:9c:ba:11:98:da:55:1f:2c:ec: c6:91:a1:a4:7f:44:61:06:c0:cf:33:2c:da:39:59:03:e6:24: 1e:d4:f7:81:24:9f:ff:7e:0d:e8:06:0b:08:df:88:a0:04:70: c0:e3:20:bf:85:d8:fd:cc:ae:b7:31:9e:92:f7:ec:68:72:9c: 5a:95:80:b9:14:f3:dd:f1:6a:1c:e7:cc:0f:98:53:35:b8:39: e5:53:29:9f:39:b1:e4:5d:4e:0a:db:0c:32:90:b5:e1:93:48: 2e:0d:25:47:72:19:57:f7:91:76:fe:34:27:13:38:00:25:56: 27:44:81:c0:15:82:fd:04:b1:ac:1a:e6:ce:b8:61:2e:ee:d4: ae:24:20:49:bb:da:2f:5c:e3:09:bd:70:8c:75:e8:da:49:f5: 98:46:ae:b4:8c:54:cb:43:ef:75:17:52:5d:f2:41:7d:18:b2: fd:df:50:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfBgROlXCXwmvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MDU3NGY1Y2UtYTdkNy00NzRiLThiMzItNDQ4M2VlZThlMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3XIrIJV7GiWBMUvIGpz7mTrLj7wy62iD20T HoDGAfqxrEjPShOBsHIjxoVq0hPPek6fkJhBCM8pZVJVY2/zUW/yGFk4bNiPApg8 FOEXQTJCQQFzb/L8G0geY+XdwjzLoDHjpb/GNfbxF46N8wcIcBTqfZHBDRpWI/Mf BvCOoKjGpB+AuFdd5fWXkrQnEUvE+vxF4SkUZwxHBr8/hrXauiXQ7YX8+pE3IrE7 h2LJhUMx6auB7X/1pOg2kMrluU8V8JqOchjGwCEO/MLPmsFNTPAL1E6S3SMMHw7X 6nLiIOxiUYKxq370zGNSbOuj4iu1NnSjaJFpMDRLaZ6BTKc/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl7GaB4gx/ii39sk53a+oQ/r9N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDE0Nzc4N2EtODBjMi0z YjhhLTljYTUtNDk5ODRjOTY3MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALiq2DbgHy10+xjVlmogPmUImrrVr7hLwZwlLEB3GXC8NcyX15XYOyM 8QiLKAnNcNHZEVtv9JbXk2mtLbTB9npuoDnKwpdpdfWvbAEOvutPYJy6EZjaVR8s 7MaRoaR/RGEGwM8zLNo5WQPmJB7U94Ekn/9+DegGCwjfiKAEcMDjIL+F2P3Mrrcx npL37GhynFqVgLkU893xahznzA+YUzW4OeVTKZ85seRdTgrbDDKQteGTSC4NJUdy GVf3kXb+NCcTOAAlVidEgcAVgv0Esawa5s64YS7u1K4kIEm72i9c4wm9cIx16NpJ 9ZhGrrSMVMtD73UXUl3yQX0Ysv3fUIA= -----END CERTIFICATE-----Generated at Fri Aug 28 02:38:25 2026 by rpki-client