$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: 0pw/Vr/0OazAq+U5QOwE4nIpkGrKxDRudp0NPqv+0u4= Subject key identifier: 3B:B0:43:51:56:D9:06:DF:9E:12:18:14:EC:AE:58:A6:14:AD:AE:43 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584D773A727271ABEC5C424CE780 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:72:72:71:ab:ec:5c:42:4c:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=38c369d0-6b61-4e8f-8026-8793e251a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:65:9e:5e:34:52:24:bf:ba:2f:4d:f4:f2: 98:e2:d9:a6:83:8a:36:d1:b1:f1:e1:16:17:30:50: 1a:bf:3f:c3:cd:8f:f7:8c:08:5f:69:e2:05:3b:d3: fc:6f:eb:bd:8c:71:3a:8f:d0:61:be:ff:a8:83:d3: e1:a8:4d:b9:cd:27:92:99:f7:49:f2:e1:6a:49:cb: ba:db:93:f7:5b:18:59:fa:73:37:4d:87:23:ed:b0: 8d:ba:3d:38:61:50:ee:79:36:23:37:65:4f:d2:04: 33:ea:ca:08:7b:db:50:8c:41:9c:bc:8e:62:02:73: a1:4c:0e:69:ce:45:1a:9f:42:45:98:99:a2:27:82: b9:e9:88:e2:38:0b:9f:47:b9:82:14:a3:ca:8c:5d: 5b:a2:62:14:19:46:19:4d:0a:96:da:b8:ac:a7:48: 3d:cc:55:83:70:dc:4c:1d:b7:81:49:36:7b:73:f9: 8a:86:60:ef:28:be:a6:b0:29:3c:1e:6c:b6:99:e6: c4:d4:3d:4c:66:78:67:a7:0e:b9:0e:bb:58:dd:cd: 74:d8:a1:bd:5d:0c:37:c1:bd:cc:01:f6:47:30:a8: b2:4f:e6:4c:17:b4:8a:52:32:a2:da:82:5f:2d:4b: d1:77:43:ea:cb:0c:37:e1:de:f9:f5:3f:44:eb:11: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:43:51:56:D9:06:DF:9E:12:18:14:EC:AE:58:A6:14:AD:AE:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7e:34:0e:3c:1f:fc:e4:72:29:02:0f:e8:74:94:0a:b9:c7: 29:66:e9:db:ff:dd:a5:8a:bc:86:82:96:03:df:ba:6c:6e:a6: b5:8b:5c:7d:34:a9:20:b2:59:7d:bb:cf:e6:7a:17:bb:69:e4: c1:f1:57:32:ad:b0:1e:d6:3d:29:eb:e1:e5:d7:ce:49:45:dc: e3:90:cf:c1:a2:42:e0:52:a9:c8:74:39:05:80:89:4f:0f:73: 59:b8:da:43:7f:c6:d5:a5:a4:20:83:18:0c:8f:8d:86:a5:eb: 6f:da:2a:08:34:2b:1c:f1:ba:c2:0f:ef:9a:1d:bf:17:38:be: 67:dc:9f:ab:0d:b6:d1:be:9a:d2:7a:5e:e7:f8:8f:8e:4a:a0: f1:75:f6:68:46:a7:4a:f2:07:7c:c4:80:49:31:88:08:95:ef: 52:60:41:d6:3b:31:68:02:9e:a6:1c:60:0c:42:6d:5e:e7:50: 4a:e3:92:b2:5a:08:4a:96:54:3d:b5:5d:96:74:55:a5:7b:95: 1b:44:30:b7:58:f6:12:0a:b6:b2:ec:ca:12:ab:48:42:db:bc: d3:af:ad:01:17:56:5d:bb:ea:31:f3:40:93:59:75:79:59:d4: c1:09:09:ec:55:cb:b6:9e:36:1b:7e:de:a4:79:ec:16:3f:cc: a7:4b:68:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnJycavsXEJM54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MzhjMzY5ZDAtNmI2MS00ZThmLTgwMjYtODc5M2UyNTFhMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdBlnl40UiS/ui9N9PKY4tmmg4o20bHx4RYX MFAavz/DzY/3jAhfaeIFO9P8b+u9jHE6j9Bhvv+og9PhqE25zSeSmfdJ8uFqScu6 25P3WxhZ+nM3TYcj7bCNuj04YVDueTYjN2VP0gQz6soIe9tQjEGcvI5iAnOhTA5p zkUan0JFmJmiJ4K56YjiOAufR7mCFKPKjF1bomIUGUYZTQqW2risp0g9zFWDcNxM HbeBSTZ7c/mKhmDvKL6msCk8Hmy2mebE1D1MZnhnpw65DrtY3c102KG9XQw3wb3M AfZHMKiyT+ZMF7SKUjKi2oJfLUvRd0Pqyww34d759T9E6xF7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuwQ1FW2QbfnhIYFOyuWKYUra5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR+NA48H/zkcikCD+h0lAq5xylm6dv/3aWKvIaClgPfumxuprWLXH00 qSCyWX27z+Z6F7tp5MHxVzKtsB7WPSnr4eXXzklF3OOQz8GiQuBSqch0OQWAiU8P c1m42kN/xtWlpCCDGAyPjYal62/aKgg0KxzxusIP75odvxc4vmfcn6sNttG+mtJ6 Xuf4j45KoPF19mhGp0ryB3zEgEkxiAiV71JgQdY7MWgCnqYcYAxCbV7nUErjkrJa CEqWVD21XZZ0VaV7lRtEMLdY9hIKtrLsyhKrSELbvNOvrQEXVl276jHzQJNZdXlZ 1MEJCexVy7aeNht+3qR57BY/zKdLaNU= -----END CERTIFICATE-----Generated at Mon Apr 13 19:32:52 2026 by rpki-client