$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa File: 81157f40-1330-3f4f-8709-0472d5c62aa1.roa (raw, json) Hash identifier: Y5jJ5LAHGUjgDA3uvYA9Xx/HvNZv+I1Fi4hE+G5FZOY= Subject key identifier: D4:8C:D3:C8:30:B3:DA:0D:30:96:F2:F5:7C:F9:66:39:C1:B9:C1:05 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584F71ED9F247FFDD50C5A70EA00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 18593 IP address blocks: 138.8.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9f:24:7f:fd:d5:0c:5a:70:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=928de4dc-e093-4112-ae90-edf658471172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:35:28:87:d3:43:6a:39:6e:e3:ce:eb:1f:f5: ba:9d:d7:38:9e:37:a3:c5:84:5d:e1:db:89:49:1c: 96:2c:d6:3f:3a:4a:69:78:7e:6b:a4:b2:44:ff:01: d2:31:70:af:7f:29:47:20:58:2c:c8:88:29:33:c0: 67:ed:af:4e:cc:05:7b:95:32:fd:1b:34:a6:af:e7: 91:03:8d:01:4d:86:82:16:7b:df:53:b3:ba:9f:50: 11:3f:4c:9a:e4:a5:32:53:21:13:2e:6a:c2:d8:fd: 5e:4e:c5:a8:68:ea:2b:0b:31:9d:41:2a:76:8f:96: 76:fa:00:e7:95:ed:57:4c:c1:fb:d4:68:55:52:6a: 68:01:4a:fa:0e:5c:34:b2:3b:66:a1:e4:80:05:23: 68:1f:97:f9:ad:f6:d2:0f:b0:8f:dd:30:f4:c2:69: b4:c1:76:b2:17:25:4f:10:4f:0d:25:b3:71:62:1f: c0:eb:47:b5:de:1d:11:a4:5d:5c:a6:60:ca:90:f2: be:f2:d0:8d:eb:ff:9f:55:75:6e:1c:46:d5:8e:fc: ea:33:1d:8d:ee:b5:7f:b3:d5:67:03:4f:b5:36:cb: 0b:88:1e:16:b5:ba:8c:a4:cd:62:80:a9:cf:e4:8d: 3e:e8:1d:e3:5a:02:b3:76:3f:4b:96:d2:df:11:c5: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:D3:C8:30:B3:DA:0D:30:96:F2:F5:7C:F9:66:39:C1:B9:C1:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ad:71:36:f2:9c:70:94:b2:c4:a8:3d:1f:51:73:a4:71:c9: 30:1e:f4:00:42:87:08:a7:0f:dc:99:8b:a8:3a:96:d1:0a:28: 88:de:51:02:7a:2b:1a:72:1e:8b:74:64:4f:88:ba:04:fd:cb: 90:2a:fe:93:b4:f4:0d:f6:0d:84:ad:3c:f6:f3:7b:6b:9a:ca: 8c:a6:1f:a1:97:4e:b8:83:3b:82:1b:06:af:1c:35:ad:26:3f: cc:22:67:81:29:c7:8e:45:b0:b3:65:22:a7:17:65:03:a3:4b: 4f:8a:44:6a:ae:ea:eb:8c:b1:1c:df:7b:13:04:f9:4e:07:49: 8e:5c:66:a6:6e:69:59:04:aa:39:9a:a1:6e:e0:ba:ed:9c:e9: c7:22:a2:66:10:50:f2:72:0e:ad:d9:7c:09:72:9e:de:7b:c0: 19:73:73:11:52:29:7a:cb:f1:a1:1d:cf:04:8b:c2:3c:61:eb: 1b:f5:30:ab:95:12:b0:a3:31:bc:14:4c:e3:b5:b7:1d:67:7f: 35:25:c3:03:e4:0f:ac:cb:eb:cb:d3:fb:4a:7e:45:e8:45:f7: 5a:6d:48:a3:da:e3:c9:88:96:bd:0c:53:0c:aa:d3:a7:c8:0f: 64:2a:67:20:e1:3d:8d:1a:3f:eb:f8:e0:7d:76:eb:57:4a:78: 9d:52:cc:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z8kf/3VDFpw6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OTI4ZGU0ZGMtZTA5My00MTEyLWFlOTAtZWRmNjU4NDcxMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjUoh9NDajlu487rH/W6ndc4njejxYRd4duJ SRyWLNY/OkppeH5rpLJE/wHSMXCvfylHIFgsyIgpM8Bn7a9OzAV7lTL9GzSmr+eR A40BTYaCFnvfU7O6n1ARP0ya5KUyUyETLmrC2P1eTsWoaOorCzGdQSp2j5Z2+gDn le1XTMH71GhVUmpoAUr6Dlw0sjtmoeSABSNoH5f5rfbSD7CP3TD0wmm0wXayFyVP EE8NJbNxYh/A60e13h0RpF1cpmDKkPK+8tCN6/+fVXVuHEbVjvzqMx2N7rV/s9Vn A0+1NssLiB4WtbqMpM1igKnP5I0+6B3jWgKzdj9LltLfEcVsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSM08gws9oNMJby9Xz5ZjnBucEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvODExNTdmNDAtMTMzMC0z ZjRmLTg3MDktMDQ3MmQ1YzYyYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWtcTbynHCUssSoPR9Rc6RxyTAe9ABChwinD9yZi6g6ltEKKIjeUQJ6 KxpyHot0ZE+IugT9y5Aq/pO09A32DYStPPbze2uayoymH6GXTriDO4IbBq8cNa0m P8wiZ4Epx45FsLNlIqcXZQOjS0+KRGqu6uuMsRzfexME+U4HSY5cZqZuaVkEqjma oW7guu2c6cciomYQUPJyDq3ZfAlynt57wBlzcxFSKXrL8aEdzwSLwjxh6xv1MKuV ErCjMbwUTOO1tx1nfzUlwwPkD6zL68vT+0p+RehF91ptSKPa48mIlr0MUwyq06fI D2QqZyDhPY0aP+v44H1261dKeJ1SzEA= -----END CERTIFICATE-----Generated at Thu Oct 15 12:38:53 2026 by rpki-client