$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: qSrfGfWtr/zTVV+mS3k4mxQuwMDan4jTrkAslLQ5Eq0= Subject key identifier: CA:98:53:3A:6A:A1:45:CA:16:BE:60:72:F5:4F:80:61:77:43:B3:6F Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584F9BCDF5872533B0894339CB80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f5:87:25:33:b0:89:43:39:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=885128a4-ba27-4752-88fd-6b1415d7fab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:14:12:a3:ec:c5:99:e4:c5:1c:e1:f4:a3:74: 99:05:d4:fe:2d:49:02:24:42:a7:be:2c:3a:58:96: 52:ea:97:43:0a:2b:16:46:48:f3:94:77:c9:9b:76: cc:a1:f4:52:45:23:18:4d:8d:21:ab:71:33:46:ba: e7:00:62:38:e1:01:61:2f:0e:13:64:e7:26:91:68: 27:68:f5:b9:46:f0:0d:4b:65:24:b9:1a:0c:0a:bb: 9c:82:a5:b6:15:6f:b5:03:8b:e1:d3:95:a0:36:cc: 61:94:7b:5c:4c:6f:dc:5b:af:d0:54:4e:93:54:03: 7e:cc:34:df:00:e8:e7:43:05:be:3f:77:f9:f5:40: 41:9a:6f:90:d8:b9:46:be:48:46:75:56:cd:25:b3: eb:50:b6:cb:d1:0f:a9:70:e4:c0:fd:3c:8b:be:9f: 89:f1:32:aa:e0:9d:02:90:47:58:cf:3d:ae:f1:de: 29:df:07:5a:0e:60:c2:da:16:93:3c:e4:44:1a:b8: 69:c4:16:5a:03:0e:ff:18:71:65:47:a4:75:28:a5: bb:75:c2:f9:26:8d:6c:91:04:b0:57:aa:0d:a6:30: fb:c5:4e:a0:91:4c:51:c5:da:07:b6:24:cb:cb:6e: b2:54:be:50:7a:4a:a4:85:09:1e:f1:4f:4e:31:40: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:53:3A:6A:A1:45:CA:16:BE:60:72:F5:4F:80:61:77:43:B3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:db:0e:ab:18:ec:df:21:ef:7d:cc:1c:50:16:8d:98:08:e4: f5:64:94:2d:16:e1:97:73:ca:b5:ec:15:aa:cd:84:54:03:62: 79:e0:49:4f:7f:3c:5c:fe:8a:25:a0:59:72:2f:2f:70:32:9a: fa:7d:d8:75:45:9d:4a:50:d5:bd:72:12:e8:f5:c4:a3:75:86: f6:c9:d3:79:31:2a:4a:42:bd:8d:ee:78:74:df:b8:4d:9f:20: 05:4c:55:79:90:81:e6:bd:45:11:3f:6a:27:6e:74:59:50:08: cb:42:fc:ac:b3:f0:d3:4b:21:52:bf:0d:61:61:c4:6b:8c:f7: 84:d1:e5:34:86:4b:67:7c:a6:46:6b:4b:a1:ea:e7:3c:1e:b2: a6:92:cd:4e:51:ec:ec:8d:20:59:11:51:92:50:45:7f:96:e4: a1:c1:2f:0f:89:3a:54:b0:8a:38:f1:0e:3d:7b:bf:a3:89:83: 23:c3:9e:c2:00:d7:f9:9b:c2:97:61:98:89:bb:83:0e:41:88: 40:ec:54:11:79:22:74:4c:7a:3d:35:05:30:a8:f1:ef:c1:bb: 7c:01:a7:bd:27:03:15:d5:86:b7:5b:dc:7e:1a:e4:58:0c:78: 89:b4:bb:c5:0a:0a:42:d3:5e:0a:59:2d:79:b4:1f:ab:c8:98: 4d:8a:a6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfWHJTOwiUM5y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ODg1MTI4YTQtYmEyNy00NzUyLTg4ZmQtNmIxNDE1ZDdmYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xQSo+zFmeTFHOH0o3SZBdT+LUkCJEKnviw6 WJZS6pdDCisWRkjzlHfJm3bMofRSRSMYTY0hq3EzRrrnAGI44QFhLw4TZOcmkWgn aPW5RvANS2UkuRoMCrucgqW2FW+1A4vh05WgNsxhlHtcTG/cW6/QVE6TVAN+zDTf AOjnQwW+P3f59UBBmm+Q2LlGvkhGdVbNJbPrULbL0Q+pcOTA/TyLvp+J8TKq4J0C kEdYzz2u8d4p3wdaDmDC2haTPOREGrhpxBZaAw7/GHFlR6R1KKW7dcL5Jo1skQSw V6oNpjD7xU6gkUxRxdoHtiTLy26yVL5QekqkhQke8U9OMUBsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqYUzpqoUXKFr5gcvVPgGF3Q7NvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXbDqsY7N8h733MHFAWjZgI5PVklC0W4ZdzyrXsFarNhFQDYnngSU9/ PFz+iiWgWXIvL3Aymvp92HVFnUpQ1b1yEuj1xKN1hvbJ03kxKkpCvY3ueHTfuE2f IAVMVXmQgea9RRE/aidudFlQCMtC/Kyz8NNLIVK/DWFhxGuM94TR5TSGS2d8pkZr S6Hq5zwesqaSzU5R7OyNIFkRUZJQRX+W5KHBLw+JOlSwijjxDj17v6OJgyPDnsIA 1/mbwpdhmIm7gw5BiEDsVBF5InRMej01BTCo8e/Bu3wBp70nAxXVhrdb3H4a5FgM eIm0u8UKCkLTXgpZLXm0H6vImE2Kpi0= -----END CERTIFICATE-----Generated at Sun Nov 1 13:02:03 2026 by rpki-client