$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: vbCtueo8etnSd8HlYGY6DkkfwUJ1NQckOokpe66Z8DQ= Subject key identifier: BD:EE:05:FE:D8:8D:D9:CF:E9:D6:B2:33:56:B9:15:7E:C9:98:40:9A Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584E577F48FDA5386B2AEA215E00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Tue 30 Jun 2026 09:00:12 +0000 ROA not before: Tue 30 Jun 2026 09:00:12 +0000 ROA not after: Mon 28 Sep 2026 09:00:12 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:7f:48:fd:a5:38:6b:2a:ea:21:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jun 30 09:00:12 2026 GMT Not After : Sep 28 09:00:12 2026 GMT Subject: CN=4943b1dd-bc1d-4464-9182-bdc15ce9aa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:8c:94:16:f2:64:48:be:1f:c5:cd:b5:e9: 7c:f5:37:a3:fc:d0:b8:74:66:36:16:b4:4f:f7:0e: 8a:df:41:ac:ad:43:c9:21:4d:f6:e8:c5:11:d2:b3: d3:c0:20:02:71:9f:7d:ba:af:40:8c:88:32:3d:e4: 9d:4b:82:fc:be:cc:7c:03:4c:d7:3a:60:c0:28:0a: 75:4d:33:6a:fc:e2:25:2c:ee:2c:cc:c5:56:fe:b2: 16:6c:86:70:5e:a0:65:25:82:76:21:06:45:6b:d3: bd:e9:7c:d2:2c:10:ce:97:53:42:ef:33:13:48:ea: 12:25:52:a9:ea:b4:10:52:3b:13:d2:ab:11:32:8d: 97:fc:cb:eb:e3:0e:c0:db:d5:33:23:e9:20:23:35: 7d:7d:70:90:f7:17:8e:33:fa:6e:d1:c0:ca:14:d9: 77:46:25:82:36:77:3f:9c:81:84:f0:32:20:63:a0: aa:80:f9:cf:9d:91:87:6c:74:4e:ee:59:88:e7:4d: 8f:aa:41:0c:31:e4:fa:eb:5c:a2:5f:d6:b4:1b:ab: 8d:29:5f:6a:30:7e:70:df:7b:b3:58:a0:96:69:f9: 78:bc:82:d3:a3:68:43:06:74:de:0a:ea:ea:37:7c: e3:33:98:e3:e6:eb:28:3d:53:b4:db:80:ca:f2:7f: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:05:FE:D8:8D:D9:CF:E9:D6:B2:33:56:B9:15:7E:C9:98:40:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:17:f3:ee:8b:2c:99:aa:54:4a:f7:df:cc:d1:30:d1:49:6d: 4c:fc:5c:e7:3f:77:2e:fe:19:53:b0:23:01:05:2d:b3:7d:8c: 26:fb:49:b1:19:f6:5c:c7:50:f5:2e:df:89:f8:13:79:50:a9: 1b:fe:27:94:07:27:44:6c:7c:c8:d9:7f:42:9b:25:60:0b:2f: 12:b0:14:77:dc:03:76:ec:95:3f:16:ee:8b:dc:6d:f9:42:5d: 8c:18:10:64:81:4f:76:b9:3b:70:31:5b:84:34:e4:db:6d:1a: ef:89:b4:6a:8d:b9:0e:b7:14:c6:b7:17:0b:93:0a:a9:45:75: ad:df:56:cc:b5:47:6e:aa:ec:a0:5d:af:21:47:45:7c:b1:38: a1:e2:e9:18:ce:74:35:4a:5e:d3:b0:81:72:bc:b8:bc:fc:3b: 68:c2:c3:08:ba:cb:88:72:75:bd:6b:14:3e:74:44:6d:d7:49: de:19:6f:66:ed:eb:bf:fc:5d:66:eb:47:10:54:b2:15:54:30: e4:88:1f:c8:67:4d:3e:3c:67:53:b5:27:75:05:e3:2f:35:ae: b9:53:6e:54:04:3b:79:20:77:d0:a6:dd:34:b3:3f:ad:bf:3e: c7:b9:5b:f2:43:1f:3f:e2:fe:66:68:14:89:6f:ae:21:15:03: 47:bf:28:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0j9pThrKuohXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk NDk0M2IxZGQtYmMxZC00NDY0LTkxODItYmRjMTVjZTlhYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSeMlBbyZEi+H8XNtel89Tej/NC4dGY2FrRP 9w6K30GsrUPJIU326MUR0rPTwCACcZ99uq9AjIgyPeSdS4L8vsx8A0zXOmDAKAp1 TTNq/OIlLO4szMVW/rIWbIZwXqBlJYJ2IQZFa9O96XzSLBDOl1NC7zMTSOoSJVKp 6rQQUjsT0qsRMo2X/Mvr4w7A29UzI+kgIzV9fXCQ9xeOM/pu0cDKFNl3RiWCNnc/ nIGE8DIgY6CqgPnPnZGHbHRO7lmI502PqkEMMeT661yiX9a0G6uNKV9qMH5w33uz WKCWafl4vILTo2hDBnTeCurqN3zjM5jj5usoPVO024DK8n+H3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3uBf7YjdnP6dayM1a5FX7JmECaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUX8+6LLJmqVEr338zRMNFJbUz8XOc/dy7+GVOwIwEFLbN9jCb7SbEZ 9lzHUPUu34n4E3lQqRv+J5QHJ0RsfMjZf0KbJWALLxKwFHfcA3bslT8W7ovcbflC XYwYEGSBT3a5O3AxW4Q05NttGu+JtGqNuQ63FMa3FwuTCqlFda3fVsy1R26q7KBd ryFHRXyxOKHi6RjOdDVKXtOwgXK8uLz8O2jCwwi6y4hydb1rFD50RG3XSd4Zb2bt 67/8XWbrRxBUshVUMOSIH8hnTT48Z1O1J3UF4y81rrlTblQEO3kgd9Cm3TSzP62/ Pse5W/JDHz/i/mZoFIlvriEVA0e/KCc= -----END CERTIFICATE-----Generated at Mon Jul 13 12:49:44 2026 by rpki-client