$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa File: 458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json) Hash identifier: uIvU5yqH41GkO6wDzNi01GgOyTmk4Z27Q+f3/v9o2Ck= Subject key identifier: A3:42:18:A2:57:1B:F6:4B:1D:92:8C:CC:87:61:0D:E4:42:D3:56:76 Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584DAAE02CE9993616196C531240 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 23122 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:2c:e9:99:36:16:19:6c:53:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=23ae79b2-8e07-4ab8-a13a-8cf9494a71bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:78:02:bc:d2:16:72:b8:14:4a:e2:ef:ed: 52:5e:46:6c:e2:2a:e1:e3:84:4a:f0:2e:76:81:e6: 9b:b1:9e:4e:10:23:04:88:2b:82:7b:0d:97:b8:3e: de:b6:59:b8:4f:db:6a:98:39:61:5c:35:2d:8a:ab: af:57:f9:e0:2b:2c:ec:e4:25:dc:5c:ed:bd:d1:17: a6:e6:a7:3e:32:c7:2d:ee:27:d5:99:1f:60:c1:31: ab:5c:07:c5:c9:40:a0:88:6f:7c:21:9e:4e:54:31: fe:9a:d4:e1:23:6f:e7:5a:37:14:39:10:01:ff:32: 6a:ab:98:7c:de:3d:30:4a:5b:1c:b4:e8:07:ed:4b: 2a:9b:d6:c2:4d:c8:a0:26:7e:0b:aa:05:a5:04:4b: 73:fa:6f:fd:11:ba:60:c6:54:1b:d0:97:98:e5:29: 85:16:5d:40:66:7f:3b:34:98:4f:2f:34:b9:9a:50: 0c:c7:eb:cf:64:ba:3d:38:f5:34:1d:ed:78:5a:97: bd:01:e7:79:7c:db:87:aa:ad:47:9e:67:88:44:65: 57:9f:e5:35:c9:25:b0:01:3f:f6:f0:79:26:ca:9f: 97:97:84:b1:c8:af:a9:fd:d5:a6:85:9d:62:a7:b1: cb:18:ef:c8:cb:a1:e4:1d:4c:2f:6a:a3:2a:41:28: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:42:18:A2:57:1B:F6:4B:1D:92:8C:CC:87:61:0D:E4:42:D3:56:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:43:78:a8:ec:25:c0:6b:b5:19:70:93:bd:41:71:81:11:75: 4f:46:ab:45:0b:cd:29:e2:d3:4a:af:b2:f1:93:21:d9:c2:2c: f3:e8:c3:bc:1b:90:30:43:b9:f8:48:a0:65:03:47:28:c8:0b: dc:92:96:87:58:ec:e3:43:0a:10:cf:3c:12:42:b5:3a:72:92: 5e:8a:4f:12:de:9b:b7:e8:50:a0:38:b4:99:c8:ad:c1:eb:09: 07:a2:fd:0e:ec:a9:d7:b3:20:74:2e:4c:27:a1:c8:99:54:45: 2e:48:eb:1b:2d:9c:4b:bc:ea:e2:36:ca:17:bf:d2:98:3b:8c: fe:de:b1:22:b0:ae:6e:05:64:47:2e:9a:ab:55:10:99:6b:b0: 0a:fc:f4:63:6f:ab:e2:74:fe:7c:3e:a1:4c:51:02:1a:3f:38: a4:5b:3c:2d:12:61:d7:c6:80:be:0a:d4:8c:7d:00:c9:c2:ec: 69:47:2b:2d:52:be:a7:35:f1:03:a4:d6:9b:65:b9:3e:d4:c2: 85:cd:52:3e:c6:94:a6:38:a2:c8:7a:99:d3:49:e3:43:11:57: d3:8f:25:3c:7e:b2:2f:86:cd:6f:ee:d7:b4:00:4a:1c:6d:5d: d4:3a:79:54:c0:1b:8a:10:f5:58:e3:1c:eb:b6:d8:1a:ea:a6: 2d:1b:e8:d5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2q4CzpmTYWGWxTEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk MjNhZTc5YjItOGUwNy00YWI4LWExM2EtOGNmOTQ5NGE3MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs514ArzSFnK4FEri7+1SXkZs4irh44RK8C52 geabsZ5OECMEiCuCew2XuD7etlm4T9tqmDlhXDUtiquvV/ngKyzs5CXcXO290Rem 5qc+Msct7ifVmR9gwTGrXAfFyUCgiG98IZ5OVDH+mtThI2/nWjcUORAB/zJqq5h8 3j0wSlsctOgH7Usqm9bCTcigJn4LqgWlBEtz+m/9EbpgxlQb0JeY5SmFFl1AZn87 NJhPLzS5mlAMx+vPZLo9OPU0He14Wpe9Aed5fNuHqq1HnmeIRGVXn+U1ySWwAT/2 8Hkmyp+Xl4SxyK+p/dWmhZ1ip7HLGO/Iy6HkHUwvaqMqQSjAaQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKNCGKJXG/ZLHZKMzIdhDeRC01Z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvNDU4YTMwOTktYzFlMi0z ZmRmLWI0MjAtODBjOGZkNWM1MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAH0N4qOwlwGu1GXCTvUFxgRF1T0arRQvNKeLTSq+y8ZMh2cIs8+jDvBuQ MEO5+EigZQNHKMgL3JKWh1js40MKEM88EkK1OnKSXopPEt6bt+hQoDi0mcitwesJ B6L9Duyp17MgdC5MJ6HImVRFLkjrGy2cS7zq4jbKF7/SmDuM/t6xIrCubgVkRy6a q1UQmWuwCvz0Y2+r4nT+fD6hTFECGj84pFs8LRJh18aAvgrUjH0AycLsaUcrLVK+ pzXxA6TWm2W5PtTChc1SPsaUpjiiyHqZ00njQxFX048lPH6yL4bNb+7XtABKHG1d 1Dp5VMAbihD1WOMc67bYGuqmLRvo1Q== -----END CERTIFICATE-----Generated at Wed May 13 05:39:52 2026 by rpki-client