$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa File: 9822c890-e8ba-385d-95be-f63542145365.roa (raw, json) Hash identifier: PQKYAOxCSHOBWF8fZwaperlWDbJ+1LQOBrQ3q6tgaTc= Subject key identifier: D3:AA:DB:78:7C:94:36:34:B4:32:69:F6:7F:9C:86:AF:E4:F9:BB:AB Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584C8476F42FB83EC8DBAE280080 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 6195 IP address blocks: 138.8.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:f4:2f:b8:3e:c8:db:ae:28:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=0d07491d-5440-4fa0-bd42-59f80ef45aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:17:59:43:cb:a6:86:5f:3b:fc:d3:cd:b0: 4e:c9:22:c1:d3:09:5d:90:1a:87:2b:6e:05:69:ad: f9:4a:6b:96:c0:c1:51:82:7e:42:0d:77:d2:2e:7e: a6:6a:ad:57:e9:21:18:b1:f7:98:7a:10:03:46:42: ef:f5:b2:d7:10:4c:c8:60:b5:64:6a:3d:7c:be:f2: fa:c5:c8:dc:e7:c5:1e:47:20:09:1f:83:b3:63:6d: 5a:58:fc:e9:6e:d7:3f:1a:cd:d3:7e:c3:34:95:8e: 39:9f:d4:a0:42:71:12:ad:5c:08:c9:0a:78:3a:97: e9:f2:29:6b:5b:6c:e7:b0:5e:5e:11:91:40:47:9f: 4c:23:0b:3c:7e:f4:57:dd:1d:3b:8c:a5:6a:b2:6b: c4:68:b4:13:1a:b4:78:fb:82:7d:29:95:f2:1d:a9: e1:a4:63:55:23:02:f7:cf:c3:2f:b4:dc:94:bc:27: 74:d9:b7:ea:4f:a0:61:52:c5:5e:ee:bc:5b:07:91: f4:70:ee:f5:ad:45:80:98:2e:ab:80:69:a6:eb:d9: ba:eb:aa:db:c4:36:cd:13:55:2b:57:70:6c:01:11: 2c:14:2d:39:a7:a2:35:9f:fd:30:61:b2:56:40:cc: 15:8b:a5:a2:d9:fd:db:d2:0d:1b:e9:e0:9d:bd:fb: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AA:DB:78:7C:94:36:34:B4:32:69:F6:7F:9C:86:AF:E4:F9:BB:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8f:7d:8e:9b:31:76:74:0a:74:0d:6b:bc:1f:c0:38:62:4a: f9:e2:de:0f:a2:8d:a8:a2:ee:be:de:ba:ce:bc:fb:14:e1:e9: 65:8f:2d:a3:29:6d:1b:71:cf:db:f2:ea:ba:11:09:7b:53:3f: f0:05:a0:b1:ca:6e:fb:6c:4b:89:e9:ff:1d:0d:74:d8:3d:c6: a4:89:08:66:fc:72:26:a0:2a:bc:74:b0:44:ee:50:91:d7:67: 8d:02:3f:9e:60:95:0f:03:d6:e3:11:df:53:9f:08:48:73:79: 97:42:85:3e:0a:32:9b:d5:ee:52:6d:d3:bc:56:1e:9c:99:aa: 5d:8d:3f:1a:70:18:d9:df:fb:7a:e3:51:f2:21:2c:24:3f:c2: f9:57:c9:fd:9e:e2:02:9e:3e:7c:d1:8f:00:41:04:fc:1c:1b: 87:7e:16:e5:d9:c5:92:ef:08:61:c1:78:a6:70:64:4e:31:c7: f5:9a:95:b7:e0:5a:fc:14:4c:50:23:ab:18:bd:fd:8a:3f:1a: 89:4a:fb:f0:c9:bd:08:06:fa:f7:72:da:45:7b:7a:69:95:7e: 42:1c:66:44:d0:89:75:a4:88:1f:14:30:d0:cb:92:9c:91:5f: 16:f5:43:db:db:76:aa:c4:b9:d1:f2:72:b0:c1:46:62:04:05: d9:b1:7e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdvQvuD7I264oAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk MGQwNzQ5MWQtNTQ0MC00ZmEwLWJkNDItNTlmODBlZjQ1YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirYXWUPLpoZfO/zTzbBOySLB0wldkBqHK24F aa35SmuWwMFRgn5CDXfSLn6maq1X6SEYsfeYehADRkLv9bLXEEzIYLVkaj18vvL6 xcjc58UeRyAJH4OzY21aWPzpbtc/Gs3TfsM0lY45n9SgQnESrVwIyQp4Opfp8ilr W2znsF5eEZFAR59MIws8fvRX3R07jKVqsmvEaLQTGrR4+4J9KZXyHanhpGNVIwL3 z8MvtNyUvCd02bfqT6BhUsVe7rxbB5H0cO71rUWAmC6rgGmm69m666rbxDbNE1Ur V3BsAREsFC05p6I1n/0wYbJWQMwVi6Wi2f3b0g0b6eCdvfsLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOq23h8lDY0tDJp9n+chq/k+burMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTgyMmM4OTAtZThiYS0z ODVkLTk1YmUtZjYzNTQyMTQ1MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqPfY6bMXZ0CnQNa7wfwDhiSvni3g+ijaii7r7eus68+xTh6WWPLaMp bRtxz9vy6roRCXtTP/AFoLHKbvtsS4np/x0NdNg9xqSJCGb8ciagKrx0sETuUJHX Z40CP55glQ8D1uMR31OfCEhzeZdChT4KMpvV7lJt07xWHpyZql2NPxpwGNnf+3rj UfIhLCQ/wvlXyf2e4gKePnzRjwBBBPwcG4d+FuXZxZLvCGHBeKZwZE4xx/Walbfg WvwUTFAjqxi9/Yo/GolK+/DJvQgG+vdy2kV7emmVfkIcZkTQiXWkiB8UMNDLkpyR Xxb1Q9vbdqrEudHycrDBRmIEBdmxft4= -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:21 2026 by rpki-client