$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa File: cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa (raw, json) Hash identifier: wLrSO7xYCXoCThKksCRclFaGOuKjT3VwaC+XUO/wl6I= Subject key identifier: 7D:D2:1F:51:2B:10:39:57:4D:0A:98:EC:DA:B9:79:9E:5E:AC:36:62 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D6515301C1D9E6B9E4FBA0AC0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 6195 IP address blocks: 138.8.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:30:1c:1d:9e:6b:9e:4f:ba:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=9dd1a727-2da1-41cd-a8e9-3c17530c7b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:dc:ee:0d:9f:99:bb:3f:18:8f:78:95:b8: 49:61:a5:05:49:53:66:d9:ae:8b:16:c5:77:2e:87: 46:ea:19:b2:79:e9:7c:5c:54:6d:6c:44:57:65:00: a0:70:ed:37:b9:aa:4e:10:a5:98:b1:31:c9:6c:23: ae:97:68:db:ad:ec:14:37:2f:38:b5:58:78:79:f5: 0f:32:e7:b3:15:04:e4:5c:1b:f9:c8:71:c9:3c:2e: 86:14:75:32:de:3b:10:af:5d:bf:92:6b:10:21:8d: ce:41:ff:65:19:76:d2:13:74:12:a6:c1:74:60:8f: 2a:17:ac:53:fa:78:9c:7d:47:cf:95:e1:a1:88:19: 91:50:27:41:08:0b:db:63:13:5f:87:7d:8e:59:a9: 93:36:dc:3e:4e:03:dd:86:13:e4:21:70:f3:05:4a: da:d2:44:51:78:1e:84:1a:29:c0:85:98:bc:4f:40: 27:28:6f:58:6c:ff:e0:4c:92:cb:cc:13:50:04:09: 25:64:77:d4:53:53:cb:54:c5:2d:04:0d:73:72:6a: 75:f9:ba:92:c6:f1:8f:22:0b:59:30:5d:86:74:12: d8:16:3e:4c:f6:97:30:3e:d5:fd:54:5b:10:92:d3: e1:fd:d1:8e:f3:f8:d8:e4:fa:fc:21:d8:e0:4b:2f: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D2:1F:51:2B:10:39:57:4D:0A:98:EC:DA:B9:79:9E:5E:AC:36:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1e:0f:68:7e:42:c0:aa:44:70:93:4a:3f:59:05:4b:17:3e: 5b:55:d0:ae:39:53:d2:fe:26:de:d9:44:51:16:77:a6:8e:f1: 94:eb:0d:7a:5a:2a:75:fa:06:a3:31:5d:cc:08:e9:cf:26:f1: 5c:04:98:83:c4:db:83:cd:67:28:76:b5:59:cd:cb:14:56:1b: 71:7a:63:ff:d9:2d:41:3d:f6:25:19:68:db:16:df:85:eb:8a: 9f:54:12:cb:84:03:6b:8d:f4:c8:2e:cc:f9:b5:d2:c0:bc:ad: 49:e5:d0:ba:47:5b:0b:2b:1b:5e:67:4a:3e:be:f0:0e:6b:a8: ad:ed:4a:1b:72:5e:6b:71:99:b4:88:5a:73:f2:4a:4a:e1:2a: c5:f1:0c:e7:a8:16:29:1c:0a:c7:b6:c4:a8:5c:99:90:a3:2d: e5:28:57:47:13:d4:86:73:e9:c5:57:9a:92:aa:9b:69:6a:81: 4c:f1:38:2d:88:45:a7:cf:6c:00:fd:1f:10:66:6d:46:57:f9: 25:55:7a:7f:98:6f:48:f5:b6:ba:97:2a:f2:a7:3b:43:29:8c: ad:2d:e6:74:32:93:19:f5:f9:f2:0d:a6:b5:ee:16:e1:aa:b1: d2:06:1e:e3:47:7e:9d:dc:2f:73:de:95:28:c3:a7:0c:71:41: 58:ea:05:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTAcHZ5rnk+6CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OWRkMWE3MjctMmRhMS00MWNkLWE4ZTktM2MxNzUzMGM3YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRPc7g2fmbs/GI94lbhJYaUFSVNm2a6LFsV3 LodG6hmyeel8XFRtbERXZQCgcO03uapOEKWYsTHJbCOul2jbrewUNy84tVh4efUP MuezFQTkXBv5yHHJPC6GFHUy3jsQr12/kmsQIY3OQf9lGXbSE3QSpsF0YI8qF6xT +nicfUfPleGhiBmRUCdBCAvbYxNfh32OWamTNtw+TgPdhhPkIXDzBUra0kRReB6E GinAhZi8T0AnKG9YbP/gTJLLzBNQBAklZHfUU1PLVMUtBA1zcmp1+bqSxvGPIgtZ MF2GdBLYFj5M9pcwPtX9VFsQktPh/dGO8/jY5Pr8IdjgSy+7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3SH1ErEDlXTQqY7Nq5eZ5erDZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvY2Q4ZjY5MTktYmE4Zi0z MjJjLTg1MDUtYzlmMmFkZDhlYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUeD2h+QsCqRHCTSj9ZBUsXPltV0K45U9L+Jt7ZRFEWd6aO8ZTrDXpa KnX6BqMxXcwI6c8m8VwEmIPE24PNZyh2tVnNyxRWG3F6Y//ZLUE99iUZaNsW34Xr ip9UEsuEA2uN9MguzPm10sC8rUnl0LpHWwsrG15nSj6+8A5rqK3tShtyXmtxmbSI WnPySkrhKsXxDOeoFikcCse2xKhcmZCjLeUoV0cT1IZz6cVXmpKqm2lqgUzxOC2I RafPbAD9HxBmbUZX+SVVen+Yb0j1trqXKvKnO0MpjK0t5nQykxn1+fINprXuFuGq sdIGHuNHfp3cL3PelSjDpwxxQVjqBeM= -----END CERTIFICATE-----Generated at Mon Apr 13 19:32:50 2026 by rpki-client