$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: +qpZ1HmbaEzX8M8+E3MPbfmuqgYxKHwQwFPfhg609NI= Subject key identifier: 27:66:CE:46:A9:90:2B:62:51:10:EF:BC:52:FA:8B:E1:54:38:C2:7F Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D773A72C101FE64C1EE7C98A0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:72:c1:01:fe:64:c1:ee:7c:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=5ed31d06-f427-49c2-bb2c-c6f42b361b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:00:57:6f:dd:ff:35:a8:38:18:12:f3:ea: b4:ab:4d:55:5d:25:8b:e6:c9:51:b1:81:63:81:68: a2:26:0a:6b:47:df:1a:fa:a8:04:c2:6a:45:ca:bb: 20:14:ef:30:b2:73:e6:96:21:7a:ea:54:45:fa:c0: f0:58:3c:85:93:cb:db:db:5b:85:ae:b1:d3:ec:3b: 6a:ad:a9:ef:07:b1:89:d9:35:0b:2e:73:f6:39:a5: 04:41:ea:dc:7b:b0:62:46:1a:40:cd:5c:95:cc:1f: 35:bf:fb:73:7b:70:bd:d7:ad:0a:85:4a:4b:0a:78: 27:38:0c:8a:cc:99:9e:62:12:09:44:9d:03:10:9f: 2d:02:6c:a0:6b:74:34:98:1e:55:83:3e:52:ec:4e: d0:fa:9e:e0:4f:e7:8f:f2:d0:c8:c2:b5:b2:cf:6e: 08:f4:0a:bc:b5:5c:74:f8:a6:bf:c5:ad:de:55:7f: 99:f1:d8:aa:6f:23:ba:53:7a:97:bb:f4:f1:eb:1c: 6c:87:ec:a4:00:39:e7:9b:50:41:e8:8c:07:d6:64: e2:da:d2:86:5f:00:5e:e6:50:e9:39:35:17:e4:05: 55:34:43:fc:ca:cf:0a:5d:a7:37:e0:79:42:7a:73: 61:97:be:c1:19:fe:59:5b:c2:27:cb:2d:09:2e:d5: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:66:CE:46:A9:90:2B:62:51:10:EF:BC:52:FA:8B:E1:54:38:C2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:52:0e:a8:d0:d3:26:1c:98:9d:91:ee:2b:04:2c:f8:fd:f4: 77:fd:f2:e4:68:39:dd:99:9e:4b:eb:ec:15:11:c0:eb:c8:e6: 32:bc:ef:d0:80:6c:02:93:0a:14:96:c3:75:80:95:8d:ea:43: 37:25:0c:fb:b8:17:bc:aa:e2:b2:c7:ad:d3:76:b9:c3:bb:1f: 2e:cf:a3:c2:d4:bb:85:18:6a:03:24:55:44:9f:9f:08:82:8c: 42:be:b8:07:4c:3f:e3:b5:8d:86:c4:39:c9:dd:25:a2:d1:9a: d1:ed:ab:c7:eb:7c:09:9e:b6:fa:10:c7:f6:4a:b7:13:4f:e7: 06:94:2a:56:07:b9:58:44:0c:d5:1b:80:fb:d7:ef:9b:e2:87: 15:bb:50:49:94:f9:76:1a:c5:19:1e:10:10:a9:0e:e6:99:39: 7c:cf:87:a9:c1:95:2e:5c:21:02:12:67:b1:13:04:99:47:65: 65:7c:61:a0:3b:69:c2:20:1f:00:4e:06:d3:db:ac:86:35:cf: c2:03:59:bf:c5:10:57:17:43:cf:08:8e:96:1c:b2:4f:48:15: af:5a:1f:b7:74:8d:15:84:fb:1b:e1:10:d8:f5:2a:88:29:88: 82:16:bb:ec:77:c9:eb:4f:5c:dc:7d:36:bd:72:58:59:1e:36: 72:52:6a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnLBAf5kwe58mKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NWVkMzFkMDYtZjQyNy00OWMyLWJiMmMtYzZmNDJiMzYxYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys0AV2/d/zWoOBgS8+q0q01VXSWL5slRsYFj gWiiJgprR98a+qgEwmpFyrsgFO8wsnPmliF66lRF+sDwWDyFk8vb21uFrrHT7Dtq ranvB7GJ2TULLnP2OaUEQerce7BiRhpAzVyVzB81v/tze3C9160KhUpLCngnOAyK zJmeYhIJRJ0DEJ8tAmyga3Q0mB5Vgz5S7E7Q+p7gT+eP8tDIwrWyz24I9Aq8tVx0 +Ka/xa3eVX+Z8diqbyO6U3qXu/Tx6xxsh+ykADnnm1BB6IwH1mTi2tKGXwBe5lDp OTUX5AVVNEP8ys8KXac34HlCenNhl77BGf5ZW8Inyy0JLtWLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdmzkapkCtiURDvvFL6i+FUOMJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFSDqjQ0yYcmJ2R7isELPj99Hf98uRoOd2Znkvr7BURwOvI5jK879CA bAKTChSWw3WAlY3qQzclDPu4F7yq4rLHrdN2ucO7Hy7Po8LUu4UYagMkVUSfnwiC jEK+uAdMP+O1jYbEOcndJaLRmtHtq8frfAmetvoQx/ZKtxNP5waUKlYHuVhEDNUb gPvX75vihxW7UEmU+XYaxRkeEBCpDuaZOXzPh6nBlS5cIQISZ7ETBJlHZWV8YaA7 acIgHwBOBtPbrIY1z8IDWb/FEFcXQ88IjpYcsk9IFa9aH7d0jRWE+xvhENj1Kogp iIIWu+x3yetPXNx9Nr1yWFkeNnJSaqE= -----END CERTIFICATE-----Generated at Wed Apr 15 10:44:42 2026 by rpki-client