$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa File: 493b6a29-354a-3d5c-9e76-86357ec364ec.roa (raw, json) Hash identifier: GWoOnfqe7AANzS/uUhIJ51mZBCyhzG/KKQVfyWyabk8= Subject key identifier: C1:20:C2:59:AB:7F:82:CA:6C:F1:F2:4A:02:BA:F9:E8:55:32:76:24 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D4D5A6FE84104907CC04E8700 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 18593 IP address blocks: 138.8.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6f:e8:41:04:90:7c:c0:4e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=4a246cd7-ca01-466d-92c2-50bc3aa35c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:0e:49:a6:83:dd:3c:88:61:33:19:60:c4: f4:77:7e:60:4a:23:94:02:fb:1e:4b:9d:e1:a8:8d: 5c:83:7a:11:2d:ed:e6:f4:5a:c5:ff:f1:78:ed:23: c9:3b:58:c5:81:28:f0:f2:c6:eb:bb:a0:7b:db:23: 09:c7:52:28:c6:7f:8e:20:52:a0:e5:e3:50:90:40: 2d:28:29:4e:b5:d5:42:50:b3:62:3e:45:ce:6e:68: e9:65:04:bd:47:8a:e1:4b:aa:51:42:12:60:62:61: 18:b9:f0:60:7b:49:48:95:c4:ac:32:79:d8:8d:2c: 05:0a:b6:6e:17:75:22:b5:5b:24:77:1e:d4:b2:9e: 93:09:95:7a:3c:d6:b3:68:3b:48:8f:e4:fc:55:ef: 73:2c:b7:96:13:25:f9:6e:6c:3f:8f:3b:52:9e:a5: 78:3d:31:55:0e:fa:f6:7a:cc:1a:ad:95:94:44:1d: 07:84:12:ee:c4:bf:22:97:4e:48:25:5b:76:68:90: 1e:3a:fc:5a:3b:63:01:97:ac:67:68:be:a3:e8:11: a1:17:b3:7c:8a:1f:47:b8:1b:a2:3b:1e:5f:48:0e: 16:06:57:e9:d8:70:af:cc:1a:5e:22:ae:49:09:da: 56:a6:0c:5a:c2:52:26:81:57:47:5e:db:b9:e4:83: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:20:C2:59:AB:7F:82:CA:6C:F1:F2:4A:02:BA:F9:E8:55:32:76:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c1:7c:96:6c:a4:93:67:98:63:3d:47:1a:4d:a5:21:f7:a8: 34:05:5d:39:fa:4d:65:b0:2a:46:82:6e:63:9e:6a:98:9d:dc: 52:ce:b8:56:17:db:ab:75:a4:d5:d0:1a:47:a9:f7:ca:ff:43: 2b:e2:df:fe:a5:40:5e:7e:7c:b5:15:a4:51:68:d6:d7:6e:10: 47:0a:53:58:c7:d7:8c:0d:7a:39:9e:71:fb:8f:a2:4a:07:86: 0a:76:5d:56:9c:d8:76:47:17:df:fd:17:cf:57:f0:b4:c1:99: 0f:61:73:2b:1c:3e:07:c4:82:4c:8e:ed:7d:0b:bb:eb:82:16: ae:6f:d7:48:9d:32:a9:4f:60:5e:18:ee:2f:c3:4b:cb:e1:b3: 3e:e6:b8:9a:d3:6a:0b:80:7b:f8:b8:84:08:5a:c1:a9:74:e1: c0:48:66:b3:fb:75:a8:71:ef:82:81:ad:29:10:37:31:af:bf: cb:7d:11:09:37:1e:7d:8d:16:79:82:41:e3:cd:36:1f:16:a3: 38:74:08:ec:fe:cf:bf:f9:97:e5:5f:1b:a6:10:59:83:7e:34: ca:b5:4e:61:83:57:00:87:a0:a3:a9:6c:25:0b:b9:de:1e:8f: 45:68:e0:a8:06:53:77:53:78:6d:e3:6c:72:98:0a:eb:42:b8: 86:ef:1d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWm/oQQSQfMBOhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NGEyNDZjZDctY2EwMS00NjZkLTkyYzItNTBiYzNhYTM1YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklEOSaaD3TyIYTMZYMT0d35gSiOUAvseS53h qI1cg3oRLe3m9FrF//F47SPJO1jFgSjw8sbru6B72yMJx1Ioxn+OIFKg5eNQkEAt KClOtdVCULNiPkXObmjpZQS9R4rhS6pRQhJgYmEYufBge0lIlcSsMnnYjSwFCrZu F3UitVskdx7Usp6TCZV6PNazaDtIj+T8Ve9zLLeWEyX5bmw/jztSnqV4PTFVDvr2 eswarZWURB0HhBLuxL8il05IJVt2aJAeOvxaO2MBl6xnaL6j6BGhF7N8ih9HuBui Ox5fSA4WBlfp2HCvzBpeIq5JCdpWpgxawlImgVdHXtu55IM2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEgwlmrf4LKbPHySgK6+ehVMnYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDkzYjZhMjktMzU0YS0z ZDVjLTllNzYtODYzNTdlYzM2NGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnBfJZspJNnmGM9RxpNpSH3qDQFXTn6TWWwKkaCbmOeapid3FLOuFYX 26t1pNXQGkep98r/Qyvi3/6lQF5+fLUVpFFo1tduEEcKU1jH14wNejmecfuPokoH hgp2XVac2HZHF9/9F89X8LTBmQ9hcyscPgfEgkyO7X0Lu+uCFq5v10idMqlPYF4Y 7i/DS8vhsz7muJrTaguAe/i4hAhawal04cBIZrP7dahx74KBrSkQNzGvv8t9EQk3 Hn2NFnmCQePNNh8Wozh0COz+z7/5l+VfG6YQWYN+NMq1TmGDVwCHoKOpbCULud4e j0Vo4KgGU3dTeG3jbHKYCutCuIbvHVI= -----END CERTIFICATE-----Generated at Mon Apr 13 19:33:56 2026 by rpki-client