$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: YcQpt5M3B3P/jeh+ZVGjFLzsrIF/hdsbKLazUCdNgTg= Subject key identifier: 6D:2E:3F:38:F6:C0:95:5B:CE:39:64:5C:B5:2F:FB:B8:0A:FF:AE:11 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584C969C65F9F65A2179A3CC7C00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:65:f9:f6:5a:21:79:a3:cc:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=5ee1b539-5af8-4d17-9297-2c3c04486851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:e4:94:b9:47:5e:c1:43:b7:f8:27:ef:60: e3:89:c2:b5:99:59:a8:fb:ae:dd:cc:79:0f:d9:13: df:c3:8f:4a:ec:91:75:22:64:60:50:7d:17:ea:84: 35:66:84:9c:4e:b8:2d:6c:91:ed:30:d1:5c:d0:fa: e1:df:22:15:c9:28:61:df:f0:c6:66:39:51:30:2e: b9:62:0e:6b:23:a9:56:5a:bd:23:bb:1c:df:e6:5b: 3a:1f:f9:5b:2c:0a:ba:e7:f6:9b:e9:ef:4a:37:94: 54:fa:ac:5c:c3:a4:69:76:ae:b8:2d:d6:d6:99:5a: 51:d6:14:9b:26:32:5b:94:10:db:14:e2:68:b5:46: d9:a0:16:60:57:64:d6:91:52:8b:02:9b:8c:7b:42: da:ed:88:41:bc:45:60:db:f4:59:a5:08:6c:91:6d: 10:78:ef:6f:55:7a:1d:e8:b6:2c:77:61:de:c3:68: 6b:37:c3:39:5f:8d:a5:d3:4f:9c:93:69:d8:65:58: a2:ee:80:9e:04:07:55:f3:fb:f7:70:0d:54:df:27: 7a:21:36:46:c3:25:c2:d6:75:db:63:82:b4:0d:31: ca:95:5c:8a:08:cb:fe:a0:63:0a:f5:33:49:ad:3f: 33:fc:c9:ef:9e:fd:a5:27:94:6f:d3:82:fe:6b:91: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:3F:38:F6:C0:95:5B:CE:39:64:5C:B5:2F:FB:B8:0A:FF:AE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7a:a9:56:f0:c4:74:23:b5:a3:21:55:25:d9:b1:fc:b9:7a: 23:26:79:29:f2:37:6d:78:6b:e8:ec:13:f5:f3:c0:86:8a:0f: a6:33:9d:89:62:42:46:0c:2a:69:b2:b8:63:51:35:18:99:bd: 5e:fc:7b:f9:c8:e9:a7:fb:80:5b:86:6e:24:11:bd:48:cc:58: 89:0f:c5:50:93:fb:75:f9:bb:fd:63:d0:da:fa:52:cf:a7:a9: 58:74:75:7a:8b:f7:c4:bf:5b:5e:a4:30:54:f9:91:d8:5a:23: 8f:d2:c9:06:7e:51:09:e1:7f:a5:07:4d:ab:f2:30:0b:bc:b1: 47:17:dc:f2:75:22:7c:5c:91:e7:ca:84:b1:cc:0e:f4:ad:49: a6:f2:e5:c3:b9:90:66:c9:65:fe:53:00:1a:01:4a:d5:a8:27: b2:2b:dc:5e:65:9c:ee:93:0f:15:5a:85:60:9c:82:04:14:fa: b8:bf:b0:74:12:6a:71:0f:1a:d5:2b:77:02:73:4e:6a:d4:c5: de:d8:65:63:e9:19:23:74:5b:de:fe:8d:2d:69:41:95:fd:6d: 8a:c2:37:b9:ab:bc:a5:60:ba:06:28:05:ab:76:8d:b5:5b:31: ac:e6:0d:1f:7b:37:e9:7f:13:c3:94:0d:d8:4f:1f:c7:cf:34: 1e:39:31:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGX59loheaPMfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk NWVlMWI1MzktNWFmOC00ZDE3LTkyOTctMmMzYzA0NDg2ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc/klLlHXsFDt/gn72DjicK1mVmo+67dzHkP 2RPfw49K7JF1ImRgUH0X6oQ1ZoScTrgtbJHtMNFc0Prh3yIVyShh3/DGZjlRMC65 Yg5rI6lWWr0juxzf5ls6H/lbLAq65/ab6e9KN5RU+qxcw6Rpdq64LdbWmVpR1hSb JjJblBDbFOJotUbZoBZgV2TWkVKLApuMe0La7YhBvEVg2/RZpQhskW0QeO9vVXod 6LYsd2Hew2hrN8M5X42l00+ck2nYZVii7oCeBAdV8/v3cA1U3yd6ITZGwyXC1nXb Y4K0DTHKlVyKCMv+oGMK9TNJrT8z/Mnvnv2lJ5Rv04L+a5FcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0uPzj2wJVbzjlkXLUv+7gK/64RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH96qVbwxHQjtaMhVSXZsfy5eiMmeSnyN214a+jsE/XzwIaKD6YznYli QkYMKmmyuGNRNRiZvV78e/nI6af7gFuGbiQRvUjMWIkPxVCT+3X5u/1j0Nr6Us+n qVh0dXqL98S/W16kMFT5kdhaI4/SyQZ+UQnhf6UHTavyMAu8sUcX3PJ1InxckefK hLHMDvStSaby5cO5kGbJZf5TABoBStWoJ7Ir3F5lnO6TDxVahWCcggQU+ri/sHQS anEPGtUrdwJzTmrUxd7YZWPpGSN0W97+jS1pQZX9bYrCN7mrvKVgugYoBat2jbVb MazmDR97N+l/E8OUDdhPH8fPNB45MU0= -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:25 2026 by rpki-client