$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: CYWcWMgNTrnq6fCFwmmrO8vjjW8cvOjhVKicvKMfmgw= Subject key identifier: 85:16:78:39:B6:12:3F:D0:77:63:02:53:CE:63:22:15:FB:44:D7:91 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584EF9E2139BF3AFAEB0E9710180 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:13:9b:f3:af:ae:b0:e9:71:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=24b827dc-319b-4899-bcd9-d203bb67dd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:35:08:b1:8d:df:81:a6:10:84:65:87:f1:f3: 29:2d:ff:7d:56:ee:4b:c0:21:92:26:7f:6a:b1:0f: 5d:84:de:a7:33:60:a9:38:51:46:e2:31:c5:dc:ac: 8c:68:04:a3:36:6e:58:a8:52:1b:d7:fb:57:aa:c0: e5:b6:c7:7f:cf:ae:26:94:56:bd:79:ba:57:0b:7c: 5a:a7:43:2e:7f:5b:ad:ed:22:24:19:cd:78:cc:b0: 90:30:c2:d9:82:7b:09:f9:6a:38:9f:de:e3:41:0b: 48:9a:93:94:c6:39:56:ef:f3:a2:28:e5:ca:ff:25: a0:60:e3:7b:fc:47:cf:72:c0:8d:dc:a3:18:71:5d: e6:38:6a:64:39:e1:e5:af:b1:14:e5:0f:ec:6f:0f: 1e:d6:5e:5d:78:5e:bf:d3:29:60:ff:1e:0f:49:67: 51:0f:b5:58:42:7e:6c:e5:01:bd:31:f1:88:7e:08: 17:e1:e3:1f:25:80:80:a6:c8:b2:bf:2d:b6:e8:25: c5:19:67:d9:25:e8:e8:12:0d:b5:af:b0:71:c0:bb: cf:76:ec:0c:ab:57:ee:71:b7:fc:2b:55:6c:ff:32: bd:a4:2a:22:fd:15:b0:49:38:45:c2:a2:ab:5f:67: 26:f7:1f:fd:c6:e9:65:d4:65:68:05:1d:e3:58:e5: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:16:78:39:B6:12:3F:D0:77:63:02:53:CE:63:22:15:FB:44:D7:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c1:20:ad:1e:92:23:4d:1c:48:03:15:7f:91:8b:10:96:52: b1:cb:52:29:0c:16:f2:8b:3c:36:4a:0f:44:0f:57:6e:bb:b8: bb:e4:66:00:83:48:21:03:2b:66:53:25:a2:f6:4c:42:cf:f6: 0e:ec:cf:73:9d:54:18:05:19:f5:b9:0d:ec:de:d6:e3:5e:b0: d5:9b:b4:5e:dd:f1:4e:79:0c:d0:c7:97:e2:ff:42:02:26:14: 30:42:a4:a5:02:b8:5b:09:fc:8a:c1:fd:e1:5c:eb:94:db:04: df:11:2b:89:65:d6:4d:33:ae:5c:50:f5:9a:a8:41:79:81:97: 9f:b0:ac:dd:13:90:43:11:a4:db:09:de:33:e3:b5:25:8b:c3: ed:b0:15:32:2a:92:51:ad:e3:bc:85:3a:5f:ac:ca:54:c8:35: 0e:63:d3:a1:17:d6:46:f2:fb:ce:e4:d5:97:49:f4:3e:0a:84: 9e:03:73:ad:0d:6a:3f:70:d6:99:29:59:c1:bb:fd:68:2c:92: 8d:17:a4:c6:6d:ce:bd:9f:b8:ba:03:3f:03:10:5b:3f:ce:fa: c6:2d:da:55:ec:56:ea:32:9a:a0:7e:f9:42:5d:70:a0:fc:33: 4f:82:98:ae:2d:3a:e8:8f:05:d7:07:13:f6:9c:af:bd:07:73: 1a:f9:2f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hOb86+usOlxAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk MjRiODI3ZGMtMzE5Yi00ODk5LWJjZDktZDIwM2JiNjdkZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDUIsY3fgaYQhGWH8fMpLf99Vu5LwCGSJn9q sQ9dhN6nM2CpOFFG4jHF3KyMaASjNm5YqFIb1/tXqsDltsd/z64mlFa9ebpXC3xa p0Muf1ut7SIkGc14zLCQMMLZgnsJ+Wo4n97jQQtImpOUxjlW7/OiKOXK/yWgYON7 /EfPcsCN3KMYcV3mOGpkOeHlr7EU5Q/sbw8e1l5deF6/0ylg/x4PSWdRD7VYQn5s 5QG9MfGIfggX4eMfJYCApsiyvy226CXFGWfZJejoEg21r7BxwLvPduwMq1fucbf8 K1Vs/zK9pCoi/RWwSThFwqKrX2cm9x/9xull1GVoBR3jWOXxfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUWeDm2Ej/Qd2MCU85jIhX7RNeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDBIK0ekiNNHEgDFX+RixCWUrHLUikMFvKLPDZKD0QPV267uLvkZgCD SCEDK2ZTJaL2TELP9g7sz3OdVBgFGfW5Deze1uNesNWbtF7d8U55DNDHl+L/QgIm FDBCpKUCuFsJ/IrB/eFc65TbBN8RK4ll1k0zrlxQ9ZqoQXmBl5+wrN0TkEMRpNsJ 3jPjtSWLw+2wFTIqklGt47yFOl+sylTINQ5j06EX1kby+87k1ZdJ9D4KhJ4Dc60N aj9w1pkpWcG7/Wgsko0XpMZtzr2fuLoDPwMQWz/O+sYt2lXsVuoymqB++UJdcKD8 M0+CmK4tOuiPBdcHE/acr70Hcxr5Ly0= -----END CERTIFICATE-----Generated at Fri Aug 28 00:40:18 2026 by rpki-client