$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json) Hash identifier: gfSaHlxoBTIA4px/v6NqOmLkh/27qh7a53JVz9qk1TU= Subject key identifier: 85:AD:3A:0A:39:C5:B7:E1:F1:F1:5C:C0:8F:30:AD:7A:67:99:3F:73 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584E2D9F232A64FA3141B0945E20 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 18593 IP address blocks: 138.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:23:2a:64:fa:31:41:b0:94:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=912e509f-c5f9-415c-8b05-a9db85e5b6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:98:10:f6:f9:05:b4:b7:1a:8d:4d:6d:69:d5: 70:5e:77:a3:4a:b8:31:ec:d7:fa:ec:c6:5d:b3:b3: 5e:af:d0:03:81:b3:78:2e:14:95:0f:d1:0e:b5:ee: 97:fe:4c:42:98:bf:c7:51:9e:58:6d:ac:33:93:21: bd:38:24:9a:ba:32:59:91:f1:f3:65:2b:d8:f9:21: 37:42:e2:95:a3:48:8c:98:3b:e5:49:3e:61:97:03: 44:12:0c:12:8d:a7:39:0b:73:13:74:6a:3c:95:c9: dd:e4:1d:2e:16:62:fb:8a:d0:56:20:8f:a7:8f:a0: e8:fb:08:d4:0c:2a:ef:57:87:9b:75:97:d2:1d:24: 22:78:db:57:45:95:0e:21:2c:e7:d9:0e:c6:e3:73: 0d:08:95:b3:18:e2:d1:ee:e3:d6:88:3b:50:ea:42: de:ef:99:17:c2:c6:63:47:2f:eb:17:2b:0a:86:10: 3c:25:1a:0c:09:c3:f4:9c:fd:3c:df:71:74:59:83: a1:5c:0f:32:ad:54:d8:b8:31:93:14:73:2e:5f:4a: 60:f9:a2:bf:c8:f2:fe:67:a8:01:f4:a2:7a:ad:e4: 12:78:17:1a:ba:f0:d8:09:0c:d2:45:cc:bb:96:64: 8c:47:9b:32:91:fb:73:d8:2f:63:a5:77:9a:a8:1e: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AD:3A:0A:39:C5:B7:E1:F1:F1:5C:C0:8F:30:AD:7A:67:99:3F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:93:b6:15:1f:96:39:fe:44:ac:bc:8b:6c:24:f3:23:22:4a: 55:69:a0:49:85:f0:74:3e:9a:e5:b4:3e:1b:15:6a:c4:6c:07: 78:3e:19:41:86:5d:ef:67:61:e9:a1:a4:84:9b:ed:b1:2c:93: 01:38:27:83:af:a5:89:1f:16:23:02:e7:b2:dd:cb:06:2e:c9: 49:d6:48:19:66:50:ac:cb:05:16:7d:d1:67:2e:0f:45:02:60: 1c:d8:fc:23:b3:06:00:f1:ff:a7:01:ad:17:d5:51:06:8c:4a: a8:ae:76:e4:0c:af:c0:11:ee:b1:c1:fd:59:cf:2f:c0:29:de: aa:26:60:e4:df:a4:1f:c3:a4:e4:c6:49:1a:bc:c6:22:60:92: 10:a8:3e:b8:f8:a3:23:c2:06:73:9b:62:14:73:9c:05:24:c5: c2:43:61:6d:74:34:df:2c:f5:f8:9a:19:02:2d:62:2d:14:7f: ca:ee:0d:ff:26:52:0e:ba:74:fa:1d:18:34:f3:04:c2:b8:c4: b5:ce:1d:42:b6:97:c9:77:99:44:b7:b4:1e:2f:31:06:b7:d3: 2e:4a:2b:c8:c0:ed:1b:8b:a7:2c:12:0c:d8:d2:bc:59:8f:d7: eb:ff:25:07:e5:b0:30:9d:5d:b3:58:33:66:36:29:1d:38:0f: ba:e2:12:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyMqZPoxQbCUXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk OTEyZTUwOWYtYzVmOS00MTVjLThiMDUtYTlkYjg1ZTViNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JgQ9vkFtLcajU1tadVwXnejSrgx7Nf67MZd s7Ner9ADgbN4LhSVD9EOte6X/kxCmL/HUZ5YbawzkyG9OCSaujJZkfHzZSvY+SE3 QuKVo0iMmDvlST5hlwNEEgwSjac5C3MTdGo8lcnd5B0uFmL7itBWII+nj6Do+wjU DCrvV4ebdZfSHSQieNtXRZUOISzn2Q7G43MNCJWzGOLR7uPWiDtQ6kLe75kXwsZj Ry/rFysKhhA8JRoMCcP0nP0833F0WYOhXA8yrVTYuDGTFHMuX0pg+aK/yPL+Z6gB 9KJ6reQSeBcauvDYCQzSRcy7lmSMR5sykftz2C9jpXeaqB4vKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWtOgo5xbfh8fFcwI8wrXpnmT9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDE0Nzc4N2EtODBjMi0z YjhhLTljYTUtNDk5ODRjOTY3MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiTthUfljn+RKy8i2wk8yMiSlVpoEmF8HQ+muW0PhsVasRsB3g+GUGG Xe9nYemhpISb7bEskwE4J4OvpYkfFiMC57LdywYuyUnWSBlmUKzLBRZ90WcuD0UC YBzY/COzBgDx/6cBrRfVUQaMSqiuduQMr8AR7rHB/VnPL8Ap3qomYOTfpB/DpOTG SRq8xiJgkhCoPrj4oyPCBnObYhRznAUkxcJDYW10NN8s9fiaGQItYi0Uf8ruDf8m Ug66dPodGDTzBMK4xLXOHUK2l8l3mUS3tB4vMQa30y5KK8jA7RuLpywSDNjSvFmP 1+v/JQflsDCdXbNYM2Y2KR04D7riEpE= -----END CERTIFICATE-----Generated at Mon Jul 13 12:50:45 2026 by rpki-client