$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa File: 4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json) Hash identifier: nDFN3wf9QNPl74511esTFs+cAA7K51sFkYgcCuOJzqs= Subject key identifier: DB:70:8D:F5:5A:D2:0A:68:D8:E9:73:58:FF:35:C3:A0:69:5B:3E:C9 Certificate issuer: /CN=24c594b2-08c8-4864-afae-a607d79beb73 Certificate serial: 010D0C9F4328584DB4A5896B0E59B9995AE85580 Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 398178 IP address blocks: 138.43.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:89:6b:0e:59:b9:99:5a:e8:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=18910b45-e814-440b-aaaa-d30badebb12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:23:de:36:5c:30:81:cd:5a:dd:3d:b2:16: 68:98:91:65:ae:fa:47:02:cf:54:2d:20:14:e8:46: 4e:b7:2f:19:bc:59:04:4b:47:e0:c4:2b:2d:68:cc: 5e:1e:78:b5:8e:ab:6c:21:7a:9e:f9:a0:7e:1f:c0: 59:0d:7e:c3:c5:13:82:4a:43:91:3f:3e:d6:40:20: fd:5b:18:6b:b3:93:f5:8f:7a:74:c3:7c:a9:be:47: 62:30:f8:11:43:ed:b0:61:5f:c6:46:a8:69:5e:c0: ca:d5:82:1d:c0:3f:05:45:7b:d2:5b:a9:d5:fc:f4: c0:ee:b5:7a:62:6b:49:8a:07:15:64:41:4f:37:5e: 1a:dc:38:39:ae:b4:0b:13:28:f0:cf:67:c1:35:e5: 9e:66:17:91:e9:77:d1:29:f2:92:a9:86:83:5d:e8: 50:c1:48:bb:28:4c:b0:4d:3a:e8:3b:92:89:19:6c: 11:ff:6c:78:3d:52:4b:95:6b:66:82:7b:9b:b8:32: 52:4c:38:a6:e2:8e:93:e4:4e:92:48:e0:fd:42:6d: cc:f7:13:a5:d6:b2:29:60:0f:75:07:82:e7:b0:9f: 81:43:15:f5:1e:b7:53:27:0d:f3:b0:bd:78:b0:f6: f5:43:37:34:8b:16:5c:14:c4:c5:e4:10:01:d5:8b: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:8D:F5:5A:D2:0A:68:D8:E9:73:58:FF:35:C3:A0:69:5B:3E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl X509v3 Authority Key Identifier: keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer sbgp-ipAddrBlock: critical IPv4: 138.43.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:df:64:d9:a7:14:d2:8d:66:85:92:d5:1c:b8:26:6d:f2:ee: 2d:0d:c7:b4:48:c2:7e:38:26:56:a0:1c:4c:1d:89:aa:04:22: c4:b7:a1:e5:3c:a4:97:47:56:2e:48:a2:f2:aa:be:7d:c3:54: 4a:30:87:2f:94:0a:14:2e:39:31:c3:e0:4a:3d:8a:2f:98:73: e0:19:be:30:af:4f:c0:10:57:34:3e:30:15:82:bf:77:fe:3f: e5:43:aa:ad:89:a4:d2:ab:18:5b:34:fe:73:e6:f1:00:a1:10: 87:0b:65:05:b7:d0:35:c6:a8:89:73:93:aa:36:59:1c:78:33: c1:a2:1c:28:18:88:ba:e1:97:3b:48:58:be:78:f8:a4:ae:a5: af:a3:ea:ed:6c:1b:0b:bf:c1:f1:40:76:aa:27:cc:3d:84:d0: 01:f3:56:88:07:c6:78:d9:8f:3f:30:54:76:ed:3f:52:76:12: dd:78:04:6a:df:8c:01:40:ba:03:14:31:23:4c:33:67:92:75: 1c:c6:2b:36:a6:d2:ea:26:3e:c8:d4:d7:a5:db:c3:07:4a:5a: 19:42:02:c4:fa:71:a4:34:fa:fd:c5:8b:5d:21:16:c8:33:12: 4c:7b:db:35:96:20:cb:f3:ca:49:08:af:0d:7e:c1:15:91:3a: 43:6b:db:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYlrDlm5mVroVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjNTk0YjItMDhjOC00ODY0LWFmYWUtYTYwN2Q3OWJl YjczMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MTg5MTBiNDUtZTgxNC00NDBiLWFhYWEtZDMwYmFkZWJiMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAsj3jZcMIHNWt09shZomJFlrvpHAs9ULSAU 6EZOty8ZvFkES0fgxCstaMxeHni1jqtsIXqe+aB+H8BZDX7DxROCSkORPz7WQCD9 Wxhrs5P1j3p0w3ypvkdiMPgRQ+2wYV/GRqhpXsDK1YIdwD8FRXvSW6nV/PTA7rV6 YmtJigcVZEFPN14a3Dg5rrQLEyjwz2fBNeWeZheR6XfRKfKSqYaDXehQwUi7KEyw TTroO5KJGWwR/2x4PVJLlWtmgnubuDJSTDim4o6T5E6SSOD9Qm3M9xOl1rIpYA91 B4LnsJ+BQxX1HrdTJw3zsL14sPb1Qzc0ixZcFMTF5BAB1Ys2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtwjfVa0gpo2OlzWP81w6BpWz7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNGM1 OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3ZDc5YmViNzMvNDg0NzI1MmMtMGQyNC0z NTM3LWE4NGItYWQ2MmNiMjkzOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjRjNTk0YjItMDhjOC00ODY0LWFm YWUtYTYwN2Q3OWJlYjczLzI0YzU5NGIyLTA4YzgtNDg2NC1hZmFlLWE2MDdkNzli ZWI3My5jcmwwHwYDVR0jBBgwFoAUgoeFKgr4Ck4pP6waYgLkT6jsMGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNGM1OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3 ZDc5YmViNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7fZNmnFNKNZoWS1Ry4Jm3y7i0Nx7RIwn44JlagHEwdiaoEIsS3oeU8 pJdHVi5IovKqvn3DVEowhy+UChQuOTHD4Eo9ii+Yc+AZvjCvT8AQVzQ+MBWCv3f+ P+VDqq2JpNKrGFs0/nPm8QChEIcLZQW30DXGqIlzk6o2WRx4M8GiHCgYiLrhlztI WL54+KSupa+j6u1sGwu/wfFAdqonzD2E0AHzVogHxnjZjz8wVHbtP1J2Et14BGrf jAFAugMUMSNMM2eSdRzGKzam0uomPsjU16XbwwdKWhlCAsT6caQ0+v3Fi10hFsgz Ekx72zWWIMvzykkIrw1+wRWROkNr26E= -----END CERTIFICATE-----Generated at Wed May 13 11:18:14 2026 by rpki-client