$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa File: 4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json) Hash identifier: kWliItw7i8yCjhaBnAx7pOCk6xxMRixqfekRx1BL2b8= Subject key identifier: 66:76:E4:D8:5F:FD:19:33:26:DD:AA:F3:97:E2:19:F2:F1:A5:77:ED Certificate issuer: /CN=24c594b2-08c8-4864-afae-a607d79beb73 Certificate serial: 010D0C9F4328584E94EA5F646F0EAFC75AC82980 Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 398178 IP address blocks: 138.43.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:5f:64:6f:0e:af:c7:5a:c8:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=1a823234-de8c-434d-ae2e-fba2a52199d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:a4:44:ec:6a:ea:4c:1d:e0:13:92:70:85: ae:0c:89:47:60:d2:4c:56:e6:39:27:43:31:a3:be: 77:42:07:58:ea:ec:80:c9:08:3e:4f:18:3a:96:a1: 25:18:cc:f7:5b:df:18:c0:1b:20:21:77:25:b1:6c: 8b:f0:f8:fe:79:5f:8f:88:73:1b:f9:80:94:45:d9: e4:ad:8a:ea:59:48:01:a1:3a:96:bc:b1:63:41:dc: 50:1c:c2:2f:56:22:f1:6e:f9:9f:ea:d5:b2:1e:a1: 28:f2:c3:8d:a6:84:3c:77:c0:33:a3:3c:b7:e6:ff: 66:bc:ba:88:3a:b2:20:ef:07:7c:31:e7:fc:a7:ba: 22:91:da:97:7e:4c:fb:8e:6b:9f:81:1b:fe:8e:f1: 3d:28:00:7f:ac:cd:21:76:a2:7a:ed:01:e3:80:98: 43:57:c2:68:eb:85:7d:7e:68:8c:22:fc:f9:08:04: 3d:3e:3d:6c:55:4a:40:b9:91:6a:8f:a9:51:f2:1e: f7:ff:f5:17:bb:46:12:f0:86:c3:a3:92:66:8b:93: 22:28:8e:be:fc:80:3a:b2:be:78:b7:34:1c:8b:ac: b9:11:2b:0a:10:55:84:2c:a6:be:41:85:8a:6b:11: 8c:f2:3c:b1:02:be:f5:9d:e3:e2:5a:10:bb:35:44: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:76:E4:D8:5F:FD:19:33:26:DD:AA:F3:97:E2:19:F2:F1:A5:77:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl X509v3 Authority Key Identifier: keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer sbgp-ipAddrBlock: critical IPv4: 138.43.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a8:b7:3f:f0:c3:d0:f5:d9:2e:56:1c:5f:5d:1a:5e:11:34: 0c:0e:e7:1a:31:e6:35:f7:3a:5e:64:b0:ef:9b:4a:b5:bd:b9: 09:9a:4e:cc:cf:12:3a:0f:d9:60:f5:04:0c:9e:09:17:c5:bf: ce:6b:5c:72:0d:d2:02:de:b0:e8:65:cc:64:1a:9b:6a:ab:bc: 83:de:de:9b:70:a7:18:cb:26:cb:e6:17:fc:a1:20:4c:32:fe: 72:80:86:40:ae:44:36:aa:a6:55:62:98:d1:ae:b7:7b:bf:7e: 22:25:ce:4e:7f:05:e2:b0:28:c8:52:1c:57:26:c0:cb:3f:ec: 61:98:28:86:84:7b:12:0d:6a:b8:98:72:30:25:1f:22:7f:7f: b7:48:25:cc:13:9b:d8:32:97:6d:d9:f2:98:3b:a2:4b:55:05: e9:5d:79:2e:63:69:dc:06:7b:85:b0:07:ef:b6:3c:6d:96:43: 16:94:3d:27:d5:5d:d8:17:db:e2:6e:2f:9c:2b:c4:5d:c6:03: 1c:2b:50:9f:87:86:fb:d0:b8:21:16:94:b8:07:27:84:2b:0e: cc:75:ba:ab:46:c6:f0:27:69:ea:20:4b:ef:3d:74:78:47:db: 8d:55:fa:23:ef:3b:64:13:06:a9:66:be:43:bc:2e:95:fb:d3: e6:bf:32:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6l9kbw6vx1rIKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjNTk0YjItMDhjOC00ODY0LWFmYWUtYTYwN2Q3OWJl YjczMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk MWE4MjMyMzQtZGU4Yy00MzRkLWFlMmUtZmJhMmE1MjE5OWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH6kROxq6kwd4BOScIWuDIlHYNJMVuY5J0Mx o753QgdY6uyAyQg+Txg6lqElGMz3W98YwBsgIXclsWyL8Pj+eV+PiHMb+YCURdnk rYrqWUgBoTqWvLFjQdxQHMIvViLxbvmf6tWyHqEo8sONpoQ8d8Azozy35v9mvLqI OrIg7wd8Mef8p7oikdqXfkz7jmufgRv+jvE9KAB/rM0hdqJ67QHjgJhDV8Jo64V9 fmiMIvz5CAQ9Pj1sVUpAuZFqj6lR8h73//UXu0YS8IbDo5Jmi5MiKI6+/IA6sr54 tzQci6y5ESsKEFWELKa+QYWKaxGM8jyxAr71nePiWhC7NUTB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ25Nhf/RkzJt2q85fiGfLxpXftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNGM1 OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3ZDc5YmViNzMvNDg0NzI1MmMtMGQyNC0z NTM3LWE4NGItYWQ2MmNiMjkzOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjRjNTk0YjItMDhjOC00ODY0LWFm YWUtYTYwN2Q3OWJlYjczLzI0YzU5NGIyLTA4YzgtNDg2NC1hZmFlLWE2MDdkNzli ZWI3My5jcmwwHwYDVR0jBBgwFoAUgoeFKgr4Ck4pP6waYgLkT6jsMGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNGM1OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3 ZDc5YmViNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+otz/ww9D12S5WHF9dGl4RNAwO5xox5jX3Ol5ksO+bSrW9uQmaTszP EjoP2WD1BAyeCRfFv85rXHIN0gLesOhlzGQam2qrvIPe3ptwpxjLJsvmF/yhIEwy /nKAhkCuRDaqplVimNGut3u/fiIlzk5/BeKwKMhSHFcmwMs/7GGYKIaEexINariY cjAlHyJ/f7dIJcwTm9gyl23Z8pg7oktVBeldeS5jadwGe4WwB++2PG2WQxaUPSfV XdgX2+JuL5wrxF3GAxwrUJ+HhvvQuCEWlLgHJ4QrDsx1uqtGxvAnaeogS+89dHhH 241V+iPvO2QTBqlmvkO8LpX70+a/MvA= -----END CERTIFICATE-----Generated at Fri Jul 24 10:29:26 2026 by rpki-client