$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa File: 674b559a-b866-3bcd-84f6-457b70f279d7.roa (raw, json) Hash identifier: QGpusSaC2cv/VSqPRPoPboHCg2WdJ7XVDuhHzudWLEY= Subject key identifier: AE:62:1F:0F:D8:E0:A4:23:66:5B:4E:EA:45:84:38:D4:0C:D9:24:69 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D6515305599E52FAC87BB9480 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 33598 IP address blocks: 138.8.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:30:55:99:e5:2f:ac:87:bb:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=c809cd00-5066-4427-9b0c-f20a19577632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:f6:a1:0a:f9:21:53:32:bc:c9:56:8f:85: aa:a3:71:7b:48:4f:cc:73:d7:c8:f0:d9:47:0b:70: 22:a4:26:7a:d6:71:a0:a2:db:90:30:90:bd:0d:0d: 55:c4:3a:2f:37:a3:d7:76:7f:70:0a:a6:41:7a:dd: b2:70:d4:b7:fb:17:30:ae:fe:3e:de:83:0b:05:5b: 6b:a6:28:b0:30:95:4a:f1:cd:95:5a:2d:12:47:24: 2d:0b:0a:70:f7:fd:4f:55:d8:f9:92:77:f6:d0:5d: dc:b9:80:d8:c9:de:f7:3d:8f:bf:b1:89:be:e8:97: 2f:81:99:df:70:56:08:e6:40:ed:26:62:f2:57:7b: 63:dc:44:53:9e:05:b2:6f:18:40:fc:7e:0d:0e:a4: d7:b8:92:bb:e5:48:37:15:16:eb:54:6c:d6:1d:15: 7e:a6:6c:e8:a8:06:1b:59:9e:f9:cb:6a:1f:ad:1f: c3:a9:a6:f0:6f:2e:e5:fe:48:08:bb:c2:a5:b6:8f: 2d:96:28:65:7f:0d:5c:73:d2:d0:35:17:6c:7f:64: 3f:96:6b:86:d4:28:35:a8:ed:72:17:b4:e3:6e:d1: 2f:c5:03:8c:6e:4b:8e:fb:13:93:43:7b:73:ad:ca: 09:f5:d3:a1:ea:ff:72:42:83:f6:ab:2e:0a:8a:8d: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:62:1F:0F:D8:E0:A4:23:66:5B:4E:EA:45:84:38:D4:0C:D9:24:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:da:b3:88:38:d2:26:ae:9b:24:02:bc:61:56:62:84:57:f7: f7:ad:2c:5d:0f:61:e5:71:19:1f:de:76:84:15:77:99:e1:21: 84:56:ab:0d:b3:94:76:da:11:a2:a1:99:45:da:e6:4d:d2:0e: 14:f1:c5:d9:35:97:69:c7:3c:24:8d:b4:6c:69:0a:b9:a6:cd: f6:4c:75:98:a4:bd:6e:47:a4:61:04:89:2b:48:1c:a8:66:9a: f7:11:c7:43:df:58:e4:51:92:50:6a:b8:02:58:2c:83:65:40: 11:6f:25:59:f9:67:de:85:94:4e:c2:d9:79:c3:af:1f:f1:3a: 61:7c:48:bd:b5:75:ec:f3:c8:4e:83:49:09:fe:09:68:ae:e1: 00:cb:89:e1:86:2a:15:5d:5a:62:8f:a0:48:fb:9a:d0:1a:60: 0b:b0:be:37:0e:ec:61:9d:5a:10:50:d1:99:b9:d2:f6:f4:0f: 74:7d:38:d8:5f:a4:99:c1:27:29:29:3b:b3:d4:21:13:49:bf: 7d:62:b0:8a:13:34:29:4a:aa:c1:b5:7d:1e:c8:aa:fb:d1:74: 96:fe:a6:48:28:fd:7e:cf:f2:13:30:8f:b2:8e:4d:87:4c:aa: a8:9a:be:7e:19:f7:6c:bb:49:bf:f3:55:0a:c9:33:3c:51:87: a8:88:04:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTBVmeUvrIe7lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YzgwOWNkMDAtNTA2Ni00NDI3LTliMGMtZjIwYTE5NTc3NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn72oQr5IVMyvMlWj4Wqo3F7SE/Mc9fI8NlH C3AipCZ61nGgotuQMJC9DQ1VxDovN6PXdn9wCqZBet2ycNS3+xcwrv4+3oMLBVtr piiwMJVK8c2VWi0SRyQtCwpw9/1PVdj5knf20F3cuYDYyd73PY+/sYm+6JcvgZnf cFYI5kDtJmLyV3tj3ERTngWybxhA/H4NDqTXuJK75Ug3FRbrVGzWHRV+pmzoqAYb WZ75y2ofrR/Dqabwby7l/kgIu8Klto8tlihlfw1cc9LQNRdsf2Q/lmuG1Cg1qO1y F7TjbtEvxQOMbkuO+xOTQ3tzrcoJ9dOh6v9yQoP2qy4Kio15OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5iHw/Y4KQjZltO6kWEONQM2SRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNjc0YjU1OWEtYjg2Ni0z YmNkLTg0ZjYtNDU3YjcwZjI3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbas4g40iaumyQCvGFWYoRX9/etLF0PYeVxGR/edoQVd5nhIYRWqw2z lHbaEaKhmUXa5k3SDhTxxdk1l2nHPCSNtGxpCrmmzfZMdZikvW5HpGEEiStIHKhm mvcRx0PfWORRklBquAJYLINlQBFvJVn5Z96FlE7C2XnDrx/xOmF8SL21dezzyE6D SQn+CWiu4QDLieGGKhVdWmKPoEj7mtAaYAuwvjcO7GGdWhBQ0Zm50vb0D3R9ONhf pJnBJykpO7PUIRNJv31isIoTNClKqsG1fR7IqvvRdJb+pkgo/X7P8hMwj7KOTYdM qqiavn4Z92y7Sb/zVQrJMzxRh6iIBIE= -----END CERTIFICATE-----Generated at Wed Apr 15 08:30:26 2026 by rpki-client