$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa File: 8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa (raw, json) Hash identifier: C8A5eF1uKHvIIyGa7TY1vGpAdHMOLjShvYtb+7869FE= Subject key identifier: 89:F1:A1:45:85:45:4F:01:44:DD:89:26:37:83:60:BC:AA:9B:44:DB Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D6515303E48EF750BA10E0000 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 6195 IP address blocks: 138.8.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:30:3e:48:ef:75:0b:a1:0e:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=7adb1add-8e17-475f-89fc-d8778e344aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:63:79:ba:f3:31:57:e6:64:36:9d:af:b5: 49:7e:79:29:9b:86:eb:f9:b0:14:b6:a2:e1:cb:21: 75:48:17:4f:69:36:2b:ce:4a:bf:8c:84:ed:5c:1f: f9:41:d7:af:1a:cd:2d:f7:3d:cb:8e:47:32:d6:92: ab:a9:aa:35:7f:17:69:60:f0:4d:f4:b8:5d:f4:5b: 34:91:ba:95:16:3c:76:02:af:1b:41:69:db:0e:9b: 75:ea:a9:24:95:b4:f1:0c:45:5b:6b:cd:5c:08:fa: cc:0e:22:f6:fa:65:23:95:6c:22:4d:e3:f6:74:39: 8b:4d:60:b5:3c:0f:46:b1:64:7e:a3:0b:29:81:a9: 26:a0:d5:d1:c7:6d:39:fe:39:d2:c9:88:9a:2e:f6: a9:5d:6e:e1:ed:77:ca:97:22:86:ee:3e:be:38:08: 53:09:5c:2b:f7:e6:e1:76:02:95:20:7f:93:e7:aa: 7f:60:56:e1:f2:f9:b3:5f:73:9b:9b:33:4a:b7:fb: cc:16:03:54:b3:b5:5b:85:34:44:5e:25:b0:09:56: da:d0:8b:53:3b:cd:c3:87:58:c6:2f:58:24:e0:c0: 7d:3c:b2:74:80:14:b7:6a:45:7b:f8:26:b4:a1:8e: 6a:11:3d:e4:4e:f5:46:3a:05:35:30:04:9d:a7:04: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:A1:45:85:45:4F:01:44:DD:89:26:37:83:60:BC:AA:9B:44:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:42:d6:55:c5:e1:40:72:a0:f6:03:55:fe:8a:6a:e8:5d:98: 12:47:93:ac:c5:a5:ee:fa:00:84:50:d8:df:34:98:ba:ca:8e: e5:f0:ba:5e:16:7d:5f:48:e5:5b:26:1f:7e:43:2b:c8:fc:63: 54:8d:df:7b:14:38:ba:8e:18:c0:60:8b:d6:72:cb:e4:90:ea: 7c:bd:72:5d:31:7c:f5:52:26:91:34:00:4b:db:44:19:34:0b: 47:4b:61:10:33:44:c3:bb:f1:d9:79:7b:6f:cc:df:77:5e:c3: 67:69:67:ac:0d:d7:75:da:c9:a8:23:54:2a:e0:63:b0:96:65: 4f:95:42:1b:fa:40:e7:2e:06:67:85:16:2e:b0:2a:85:0f:4d: bd:a5:1c:28:a1:c3:9e:55:3f:97:81:e1:37:22:85:4d:5f:39: 48:1d:4b:03:06:84:fc:2b:a7:4f:8c:78:f5:f1:1a:5e:92:33: 3d:41:c0:02:02:99:a9:cf:ea:0c:77:91:3b:66:4b:8c:ec:2f: 66:5a:ae:30:38:06:b9:09:de:87:4b:5c:7a:a5:e5:7c:54:ac: bf:c2:5a:18:a0:04:6f:9e:83:49:20:1e:94:07:6d:c6:32:e7: 9d:f3:88:7f:b9:25:26:6b:ae:cd:6f:bb:b8:53:7f:a7:f1:04: 6a:b1:f4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTA+SO91C6EOAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk N2FkYjFhZGQtOGUxNy00NzVmLTg5ZmMtZDg3NzhlMzQ0YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlINjebrzMVfmZDadr7VJfnkpm4br+bAUtqLh yyF1SBdPaTYrzkq/jITtXB/5QdevGs0t9z3Ljkcy1pKrqao1fxdpYPBN9Lhd9Fs0 kbqVFjx2Aq8bQWnbDpt16qkklbTxDEVba81cCPrMDiL2+mUjlWwiTeP2dDmLTWC1 PA9GsWR+owspgakmoNXRx205/jnSyYiaLvapXW7h7XfKlyKG7j6+OAhTCVwr9+bh dgKVIH+T56p/YFbh8vmzX3ObmzNKt/vMFgNUs7VbhTREXiWwCVba0ItTO83Dh1jG L1gk4MB9PLJ0gBS3akV7+Ca0oY5qET3kTvVGOgU1MASdpwSCbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInxoUWFRU8BRN2JJjeDYLyqm0TbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOGU3YTcwN2YtYjFlZC0z MzMwLWIyMmUtYTU4MWRjZjEzYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdC1lXF4UByoPYDVf6KauhdmBJHk6zFpe76AIRQ2N80mLrKjuXwul4W fV9I5VsmH35DK8j8Y1SN33sUOLqOGMBgi9Zyy+SQ6ny9cl0xfPVSJpE0AEvbRBk0 C0dLYRAzRMO78dl5e2/M33dew2dpZ6wN13XayagjVCrgY7CWZU+VQhv6QOcuBmeF Fi6wKoUPTb2lHCihw55VP5eB4TcihU1fOUgdSwMGhPwrp0+MePXxGl6SMz1BwAIC manP6gx3kTtmS4zsL2ZarjA4BrkJ3odLXHql5XxUrL/CWhigBG+eg0kgHpQHbcYy 553ziH+5JSZrrs1vu7hTf6fxBGqx9Nk= -----END CERTIFICATE-----Generated at Mon Apr 13 19:32:51 2026 by rpki-client