$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa File: 674b559a-b866-3bcd-84f6-457b70f279d7.roa (raw, json) Hash identifier: /8ePszyfs55WnmAg6JOJOI7zYuaEqEfscTHd2arMXiI= Subject key identifier: FE:A9:47:9B:1A:33:82:B3:C3:00:60:1D:D9:27:66:48:2E:F8:0D:79 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584C8476F46EA21B4F33CB3DAD80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 33598 IP address blocks: 138.8.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:f4:6e:a2:1b:4f:33:cb:3d:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=689251ae-05fb-4a91-b471-dbd29d3e1dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:75:01:3e:ca:e4:81:95:96:3a:9b:03:97: 33:58:38:61:87:bf:cb:0d:06:a7:25:d1:80:f1:d9: e1:8a:70:68:8a:23:f9:d1:52:04:63:93:67:0f:c2: aa:26:37:12:a7:b3:40:3d:c0:c9:7d:c0:a5:18:83: d0:16:e6:04:bc:66:f7:6f:d3:e1:d3:5e:79:2e:e9: 6a:a6:f3:40:cb:7e:cb:47:91:35:46:13:4d:b8:67: 43:1b:e9:69:74:58:18:f6:d9:02:8c:5d:3d:11:89: 48:d0:5e:83:84:f6:7a:b2:bd:41:a7:c6:8b:f2:80: e6:3f:21:96:b7:11:97:5d:ea:70:a2:6f:eb:c8:d8: 35:82:dd:66:d4:99:87:e5:41:4d:34:85:a2:35:91: 3b:63:3a:5d:67:39:fb:e8:28:16:e1:9a:08:c7:f4: 08:ba:54:11:7b:51:1b:94:a1:87:75:51:6d:35:94: 70:27:bb:97:5f:b6:9f:7c:32:eb:e4:5c:fe:1f:c0: b7:9d:0d:00:e3:31:fd:89:4d:27:4c:0d:c5:59:69: 36:68:05:8e:09:07:2a:5a:d7:88:ba:79:5e:45:e8: f0:6a:01:90:30:e8:15:f6:05:11:1b:f7:a0:a7:b4: bb:7b:f6:4b:7a:a4:a2:ad:ae:6e:af:ee:da:74:2e: 68:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:47:9B:1A:33:82:B3:C3:00:60:1D:D9:27:66:48:2E:F8:0D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:69:40:bb:38:28:da:87:cb:2d:bc:57:9b:22:e3:87:0e:da: 4a:44:86:11:cd:43:19:ac:b2:03:c2:cd:53:18:21:84:04:d4: 68:9d:a8:7e:0f:55:60:f3:1a:ac:d2:a3:a1:05:96:de:65:a8: 83:35:56:e8:56:f2:f9:5f:06:d5:95:3d:b1:5f:0a:09:f3:80: f3:67:2f:75:e2:05:03:4d:d4:f5:50:a3:8e:8e:c1:aa:51:ee: fe:e2:8e:63:6b:39:53:c3:66:0a:99:5c:32:84:fd:c3:b1:1a: 5d:11:c8:c1:15:c5:c4:1e:62:23:d1:d6:25:16:37:58:44:cc: 3c:22:aa:af:95:5c:40:3c:1b:a7:c6:3a:ef:b2:c1:23:1f:21: 8e:7a:9f:86:63:70:bf:3c:f2:db:f6:b0:90:e3:cf:4a:c0:93: 7f:61:23:d4:db:4f:7f:49:df:5f:b9:8c:4d:0e:f0:6c:ec:72: 14:c2:91:8b:ce:33:d1:6c:1d:a9:1a:3c:d6:87:8a:bb:a3:4e: da:10:f5:8e:1d:f5:d0:cd:ba:57:75:8c:59:f8:db:66:1a:d2: c6:41:d9:69:a0:14:31:23:e8:0b:0e:42:7c:36:37:01:5b:b3: f0:6b:0c:04:3d:e7:87:96:af:73:ec:2a:5d:d0:e8:b9:ac:12: 71:3a:b7:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdvRuohtPM8s9rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk Njg5MjUxYWUtMDVmYi00YTkxLWI0NzEtZGJkMjlkM2UxZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwt1AT7K5IGVljqbA5czWDhhh7/LDQanJdGA 8dnhinBoiiP50VIEY5NnD8KqJjcSp7NAPcDJfcClGIPQFuYEvGb3b9Ph0155Lulq pvNAy37LR5E1RhNNuGdDG+lpdFgY9tkCjF09EYlI0F6DhPZ6sr1Bp8aL8oDmPyGW txGXXepwom/ryNg1gt1m1JmH5UFNNIWiNZE7YzpdZzn76CgW4ZoIx/QIulQRe1Eb lKGHdVFtNZRwJ7uXX7affDLr5Fz+H8C3nQ0A4zH9iU0nTA3FWWk2aAWOCQcqWteI unleRejwagGQMOgV9gURG/egp7S7e/ZLeqSira5ur+7adC5oRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6pR5saM4KzwwBgHdknZkgu+A15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNjc0YjU1OWEtYjg2Ni0z YmNkLTg0ZjYtNDU3YjcwZjI3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFpQLs4KNqHyy28V5si44cO2kpEhhHNQxmssgPCzVMYIYQE1GidqH4P VWDzGqzSo6EFlt5lqIM1VuhW8vlfBtWVPbFfCgnzgPNnL3XiBQNN1PVQo46OwapR 7v7ijmNrOVPDZgqZXDKE/cOxGl0RyMEVxcQeYiPR1iUWN1hEzDwiqq+VXEA8G6fG Ou+ywSMfIY56n4ZjcL888tv2sJDjz0rAk39hI9TbT39J31+5jE0O8GzschTCkYvO M9FsHakaPNaHirujTtoQ9Y4d9dDNuld1jFn422Ya0sZB2WmgFDEj6AsOQnw2NwFb s/BrDAQ954eWr3PsKl3Q6LmsEnE6tyI= -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:24 2026 by rpki-client