$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa File: b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json) Hash identifier: Hr8r/zEDFTAG+v/zK63I2iGyjTds0Ry/0ZB2rhmlKxw= Subject key identifier: B8:08:22:4E:C8:A7:0B:13:09:30:2C:17:0D:E6:13:CC:2A:51:61:6D Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584F9BCDF56F4EABC68BDAFA1C80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 33598 IP address blocks: 138.8.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f5:6f:4e:ab:c6:8b:da:fa:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=3960ed59-5a9e-4d85-9247-3b895313f582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:1c:7d:d8:d6:3d:dc:bc:25:4a:1a:c8:af: f0:66:83:16:bd:03:73:20:87:47:f1:03:58:ca:92: 38:d7:0c:e6:5b:74:4a:1c:97:44:74:f2:22:58:d7: 7a:b7:72:be:c2:b3:7f:80:e9:f8:6f:50:a1:96:0d: 5d:32:9d:7e:d5:06:09:c8:14:62:e8:ee:2c:4c:9d: c7:4c:15:4c:2a:10:85:f4:77:37:59:e6:73:45:29: a0:e8:52:9c:a4:1a:f4:d0:41:30:82:1a:ed:a3:1f: de:21:2c:a5:89:d3:82:f1:9c:51:30:0a:97:fd:24: 57:a9:18:95:95:b2:d3:aa:81:45:b7:df:74:26:28: 33:c0:cb:18:ef:06:90:36:f8:59:e6:52:77:52:c8: eb:e1:7a:ff:da:a0:b7:aa:25:f9:6e:bb:39:f3:84: 78:da:b9:6d:f4:d3:62:ec:8f:ca:62:a9:5e:31:9e: a2:77:16:02:c6:80:4c:c0:bc:9d:a8:23:b5:58:66: 60:84:8d:2d:4c:80:94:14:8e:49:cd:44:7c:89:eb: 3d:be:f9:87:9f:1e:5f:4c:0c:cb:9f:0d:c3:05:41: 28:9e:9c:18:46:40:73:54:95:77:22:39:88:2f:c1: 16:9d:15:90:8d:63:19:e1:e8:c9:e1:3f:c5:c7:7e: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:08:22:4E:C8:A7:0B:13:09:30:2C:17:0D:E6:13:CC:2A:51:61:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d2:34:79:51:aa:8d:2c:56:1c:fb:42:d1:e6:a1:2e:5a:ec: ec:b8:1a:40:76:38:2c:d4:31:a4:cf:dc:ab:7b:fa:f9:7e:24: 54:d6:51:b7:36:63:d3:f5:d8:c8:15:e4:b7:3e:03:14:fb:a7: e3:a2:73:42:09:79:fe:b0:71:1d:3d:06:0c:5f:b7:8a:42:8a: 42:af:09:76:87:59:61:5c:ef:04:66:72:2d:56:1b:a6:e8:9e: 13:6a:56:d3:eb:40:db:07:b7:92:00:a9:49:b5:c2:e1:58:9a: cd:46:31:31:9c:22:03:bf:d4:e8:37:5d:25:6c:05:ed:9e:d2: 72:e5:71:c9:69:8e:23:8f:83:28:7f:d4:39:dc:1c:b6:9e:d4: 81:81:74:1b:31:34:7f:ba:a5:2c:6b:51:a9:cd:12:f8:fe:6d: 43:8f:82:db:32:49:f2:39:1e:f7:c9:2d:3a:fd:32:7b:32:08: 75:40:e0:89:ef:f9:c1:41:3c:fa:9a:9e:3e:04:fa:11:53:80: 89:3d:ca:17:3a:9b:a8:70:b4:33:cc:d4:0f:3a:ba:25:e4:b2: 79:33:0c:3b:4e:23:35:aa:93:ee:1f:34:fa:55:73:63:03:7f: d1:63:80:e3:9c:c0:c4:02:6e:1e:07:08:16:3f:98:78:22:92: 0d:69:b8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfVvTqvGi9r6HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk Mzk2MGVkNTktNWE5ZS00ZDg1LTkyNDctM2I4OTUzMTNmNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO8cfdjWPdy8JUoayK/wZoMWvQNzIIdH8QNY ypI41wzmW3RKHJdEdPIiWNd6t3K+wrN/gOn4b1Chlg1dMp1+1QYJyBRi6O4sTJ3H TBVMKhCF9Hc3WeZzRSmg6FKcpBr00EEwghrtox/eISylidOC8ZxRMAqX/SRXqRiV lbLTqoFFt990JigzwMsY7waQNvhZ5lJ3Usjr4Xr/2qC3qiX5brs584R42rlt9NNi 7I/KYqleMZ6idxYCxoBMwLydqCO1WGZghI0tTICUFI5JzUR8ies9vvmHnx5fTAzL nw3DBUEonpwYRkBzVJV3IjmIL8EWnRWQjWMZ4ejJ4T/Fx37kuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgIIk7IpwsTCTAsFw3mE8wqUWFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvYjA3YjkwNmUtMTYwMy0z OWU3LWE0NjgtNjc0Nzc2NjI1YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbSNHlRqo0sVhz7QtHmoS5a7Oy4GkB2OCzUMaTP3Kt7+vl+JFTWUbc2 Y9P12MgV5Lc+AxT7p+Oic0IJef6wcR09Bgxft4pCikKvCXaHWWFc7wRmci1WG6bo nhNqVtPrQNsHt5IAqUm1wuFYms1GMTGcIgO/1Og3XSVsBe2e0nLlcclpjiOPgyh/ 1DncHLae1IGBdBsxNH+6pSxrUanNEvj+bUOPgtsySfI5HvfJLTr9MnsyCHVA4Inv +cFBPPqanj4E+hFTgIk9yhc6m6hwtDPM1A86uiXksnkzDDtOIzWqk+4fNPpVc2MD f9FjgOOcwMQCbh4HCBY/mHgikg1puP0= -----END CERTIFICATE-----Generated at Sun Nov 1 19:55:53 2026 by rpki-client