$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa File: 9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa (raw, json) Hash identifier: y/0OPMcI0oqKFMn6aJT6C4x6bIbRsdifRBhRiCqVrUk= Subject key identifier: CF:53:A3:97:8A:D2:75:8A:D8:DA:80:A0:68:3F:8D:6D:83:81:8A:D0 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584EE7BCBFBEAFC08C18065F8480 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 33598 IP address blocks: 138.8.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:bf:be:af:c0:8c:18:06:5f:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=501fb1e1-76a3-45f3-9349-4476b2c4a46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:07:ee:01:cf:c6:90:c6:9c:2b:9b:c1:0d: 15:71:9c:06:48:68:22:94:43:fe:72:ee:af:77:92: 2c:72:71:f1:dc:b7:63:3a:cc:ea:e5:18:94:c6:0c: 15:6d:0d:33:8e:03:e2:0c:b5:b5:b6:80:6d:c1:15: 4e:6b:ae:ef:57:bb:c3:39:1c:b4:9f:05:34:37:74: e5:d7:19:69:9d:e5:9a:96:eb:c8:b1:22:71:74:d6: ba:50:87:f7:14:c1:f7:bd:24:3f:3b:48:7f:63:dd: 63:8c:41:ed:29:fa:8b:81:76:13:c9:50:9c:8a:df: 2f:c9:78:f4:23:f7:65:2a:b4:d1:04:74:a7:88:14: 6b:c8:ce:aa:fd:16:29:14:ef:78:b0:11:95:e3:73: 5e:f0:32:fd:2e:f6:3e:f8:ec:b8:45:ec:5e:01:37: 61:80:d3:2a:8d:63:cc:8d:1c:d3:63:a9:08:59:cd: 43:fc:ed:76:ae:ba:8c:1b:8e:7e:99:f0:59:d8:5e: 3d:64:c9:5a:13:a2:de:cf:fb:f2:23:91:21:2e:f5: e5:fb:bb:b3:5b:25:b1:40:5a:71:0b:da:f2:50:3a: 4f:14:a0:a4:61:47:50:17:cb:25:04:c6:51:8c:ba: a7:60:07:72:c5:d1:81:fa:8e:d9:35:86:a5:56:b8: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:A3:97:8A:D2:75:8A:D8:DA:80:A0:68:3F:8D:6D:83:81:8A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:92:86:4c:75:e7:f7:0d:ae:a4:4b:ff:8d:7c:3a:08:04:cb: e7:b6:47:2c:7a:1c:56:36:e3:94:3a:ab:c3:a5:7f:28:06:41: 42:a8:4d:4e:2a:f4:68:7e:29:bf:2d:5f:7a:91:74:80:c8:9f: 59:68:9e:4d:51:a4:96:8b:c3:5f:5e:35:0a:75:33:69:ee:b3: 9a:87:69:0e:07:76:f5:ec:c2:ec:95:5c:74:16:fc:3e:04:a9: 7b:35:2b:91:61:55:db:92:6d:a7:c8:da:25:5c:48:ae:55:25: 07:de:dd:ca:20:8b:20:35:a4:e5:40:14:ac:e9:d2:b8:f0:e8: 4b:7f:9c:84:41:61:9e:33:0a:bb:a7:09:74:49:c9:15:0f:b8: 68:45:54:6c:b9:c8:af:8b:fc:8f:e5:4e:bc:30:22:81:39:da: a7:ea:0d:84:8c:74:67:e5:e6:91:56:3e:cd:fc:b5:c3:a8:ab: 48:cf:27:e9:3a:ca:16:0f:7d:2d:b0:fe:ff:59:8d:a2:23:7d: 1a:5c:36:21:c5:88:a7:96:9a:64:77:e3:e3:97:ae:85:20:a1: 21:65:8f:b3:b8:8a:cf:f3:6f:1c:dc:96:1a:bc:6b:20:db:a0: 22:e9:29:ba:f4:ae:ac:6f:bb:e9:7f:42:d3:29:90:20:c8:1f: 8b:0f:7b:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvL++r8CMGAZfhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NTAxZmIxZTEtNzZhMy00NWYzLTkzNDktNDQ3NmIyYzRhNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNIH7gHPxpDGnCubwQ0VcZwGSGgilEP+cu6v d5IscnHx3LdjOszq5RiUxgwVbQ0zjgPiDLW1toBtwRVOa67vV7vDORy0nwU0N3Tl 1xlpneWaluvIsSJxdNa6UIf3FMH3vSQ/O0h/Y91jjEHtKfqLgXYTyVCcit8vyXj0 I/dlKrTRBHSniBRryM6q/RYpFO94sBGV43Ne8DL9LvY++Oy4RexeATdhgNMqjWPM jRzTY6kIWc1D/O12rrqMG45+mfBZ2F49ZMlaE6Lez/vyI5EhLvXl+7uzWyWxQFpx C9ryUDpPFKCkYUdQF8slBMZRjLqnYAdyxdGB+o7ZNYalVriIgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9To5eK0nWK2NqAoGg/jW2DgYrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY0M2JlYzMtYmY0Yi0z ZWJlLWI5NmQtMDE0OGJjZmNlMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuShkx15/cNrqRL/418OggEy+e2Ryx6HFY245Q6q8OlfygGQUKoTU4q 9Gh+Kb8tX3qRdIDIn1lonk1RpJaLw19eNQp1M2nus5qHaQ4HdvXswuyVXHQW/D4E qXs1K5FhVduSbafI2iVcSK5VJQfe3cogiyA1pOVAFKzp0rjw6Et/nIRBYZ4zCrun CXRJyRUPuGhFVGy5yK+L/I/lTrwwIoE52qfqDYSMdGfl5pFWPs38tcOoq0jPJ+k6 yhYPfS2w/v9ZjaIjfRpcNiHFiKeWmmR34+OXroUgoSFlj7O4is/zbxzclhq8ayDb oCLpKbr0rqxvu+l/QtMpkCDIH4sPe/4= -----END CERTIFICATE-----Generated at Sun Sep 13 12:34:02 2026 by rpki-client