$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: XBXlmQaLzRIZ4Lsa4ajkHPu1+kgWR7cV0xN0j9F+XbI= Subject key identifier: 09:2E:8B:FF:BE:D2:80:4B:93:F6:AF:BE:85:B2:5C:74:59:BC:E8:B7 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584C969C659039AF86ACB372E9C8 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:65:90:39:af:86:ac:b3:72:e9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=4f0d8ef0-ec5f-4155-aa24-a958bb08d155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:50:57:2f:ba:7d:fc:17:a5:13:f2:34:63:9a: 33:d0:2e:47:c4:ce:e9:72:7d:74:51:a5:35:08:b1: 30:9a:3f:65:c5:c3:ef:0d:d2:85:42:77:fe:04:09: 67:33:a2:34:28:5b:87:9f:65:c9:a4:df:10:0a:61: 26:8b:09:b5:73:bc:60:48:18:4b:a8:94:ed:60:46: bd:2b:04:8f:a1:04:04:d5:88:a5:26:0d:1b:08:38: e9:99:a6:cc:f4:4d:38:8e:cd:14:ec:15:6a:be:eb: bb:e4:cb:35:2c:f1:e6:39:80:40:59:81:dd:6c:c4: 47:1d:43:73:1d:16:b9:bb:6a:0a:f7:5f:f4:c0:f2: 53:4e:b3:b0:ea:2e:a0:80:18:de:83:a5:47:18:8e: 29:75:69:a0:fd:ca:68:91:88:0d:7d:27:77:e4:57: ca:fe:6d:2f:de:81:d4:03:d2:cd:f1:af:81:9a:28: 6e:d8:f0:a4:a7:e9:94:63:75:ac:a5:d7:ac:ab:13: eb:59:6f:3b:9e:d1:22:a6:3d:f8:f8:d1:2e:9a:66: 91:cf:50:73:93:d1:7c:9e:55:5c:d3:85:d3:7e:0f: b0:ee:1e:93:c4:98:4d:8b:97:a4:f1:51:38:3c:48: e9:39:da:fe:3a:ee:1b:3b:9d:74:87:4d:9a:3a:4f: 60:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2E:8B:FF:BE:D2:80:4B:93:F6:AF:BE:85:B2:5C:74:59:BC:E8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:02:1f:af:cc:ea:8d:e9:d2:e5:2f:e6:f4:ef:5d:ff:97:9b: 48:3c:e9:03:a3:b5:8b:e2:12:d1:3c:80:10:33:a0:54:d6:8a: 26:ef:af:96:9b:27:7b:e5:ae:19:3c:34:bf:2c:c4:7f:86:2a: 90:42:74:52:fd:07:b6:51:9f:50:a7:f7:0a:bf:f5:07:7e:ea: 09:f2:66:63:84:e7:4f:8c:11:a8:28:18:26:2c:5d:01:28:5a: 87:78:79:0d:c6:4b:ed:ca:d9:82:d6:30:16:18:40:b9:bc:2a: db:8b:b5:e0:ad:37:c1:35:1c:23:99:a5:20:a6:9a:78:be:3d: ca:9c:c5:d0:eb:c6:e9:64:e5:ae:e2:ea:b2:96:4d:45:2a:01: 8f:02:ee:55:26:8d:0f:a9:01:f1:fc:a8:8a:0a:01:82:f2:5a: 6d:1c:cc:cd:8a:df:74:65:04:ed:92:c6:40:ec:2c:12:be:eb: a2:59:27:4f:69:4b:e1:82:66:75:93:8d:bf:d6:f4:b3:83:66: 7e:62:ee:89:ac:38:ce:e3:cb:b0:16:b2:17:29:7b:d5:97:66: ef:b7:01:d4:11:4b:3d:35:c2:a9:f0:ea:fe:f1:64:0e:83:eb: 49:3a:5e:bf:80:c1:13:4e:9d:7a:e6:fa:6c:54:27:ee:d7:a5: f3:44:43:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGWQOa+GrLNy6cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk NGYwZDhlZjAtZWM1Zi00MTU1LWFhMjQtYTk1OGJiMDhkMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VBXL7p9/BelE/I0Y5oz0C5HxM7pcn10UaU1 CLEwmj9lxcPvDdKFQnf+BAlnM6I0KFuHn2XJpN8QCmEmiwm1c7xgSBhLqJTtYEa9 KwSPoQQE1YilJg0bCDjpmabM9E04js0U7BVqvuu75Ms1LPHmOYBAWYHdbMRHHUNz HRa5u2oK91/0wPJTTrOw6i6ggBjeg6VHGI4pdWmg/cpokYgNfSd35FfK/m0v3oHU A9LN8a+Bmihu2PCkp+mUY3WspdesqxPrWW87ntEipj34+NEummaRz1Bzk9F8nlVc 04XTfg+w7h6TxJhNi5ek8VE4PEjpOdr+Ou4bO510h02aOk9gFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkui/++0oBLk/avvoWyXHRZvOi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcCH6/M6o3p0uUv5vTvXf+Xm0g86QOjtYviEtE8gBAzoFTWiibvr5ab J3vlrhk8NL8sxH+GKpBCdFL9B7ZRn1Cn9wq/9Qd+6gnyZmOE50+MEagoGCYsXQEo Wod4eQ3GS+3K2YLWMBYYQLm8KtuLteCtN8E1HCOZpSCmmni+PcqcxdDrxulk5a7i 6rKWTUUqAY8C7lUmjQ+pAfH8qIoKAYLyWm0czM2K33RlBO2SxkDsLBK+66JZJ09p S+GCZnWTjb/W9LODZn5i7omsOM7jy7AWshcpe9WXZu+3AdQRSz01wqnw6v7xZA6D 60k6Xr+AwRNOnXrm+mxUJ+7XpfNEQ7Y= -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:07 2026 by rpki-client