$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa File: 3df8bceb-a2e2-3194-b950-40db68d2b35f.roa (raw, json) Hash identifier: RKDEobT2YJR3NnxuXKo4V3Oucbllp9T2wmakFy/xpHA= Subject key identifier: F7:19:0E:4A:94:3C:D7:22:C9:B1:7D:B4:EB:21:6A:22:C3:16:F0:53 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584F4976D2EA97AB739EFC99DC80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33598 IP address blocks: 138.8.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d2:ea:97:ab:73:9e:fc:99:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09c74ac1-a965-4bda-8f34-8e0542f77447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:00:13:c9:4c:a7:8e:b0:2b:60:c8:09:39: c7:67:16:3a:1a:99:59:60:36:12:c7:cf:9f:45:19: 37:7b:91:2b:eb:55:06:50:e4:37:df:cb:59:27:4a: 55:79:74:e3:51:8d:0e:1e:7c:73:2c:72:1d:f0:e9: b0:c5:03:7f:52:29:4c:8f:0b:30:b0:e5:9a:ea:f4: 8f:91:73:f9:76:05:0c:51:6d:0b:0d:0e:89:74:eb: 1a:54:cc:d3:22:05:12:8d:0d:8f:12:ec:b1:47:75: da:a1:11:7c:fd:77:ce:60:13:96:60:8d:3c:df:00: 2f:46:3d:ff:2a:d1:1f:67:f4:fe:24:75:b9:f5:fc: 1c:46:43:ef:b2:d1:43:9d:23:2a:18:6f:ee:83:e3: 60:26:5c:32:29:e8:d2:7a:14:a6:2d:05:f8:23:9d: ac:f9:a9:d1:b3:52:7b:10:6d:05:fb:fa:9c:41:39: fb:82:c8:d4:16:fb:15:0f:e6:2c:89:f7:89:79:9c: eb:db:cb:1c:09:81:99:33:54:12:07:10:39:00:a4: 97:b2:fc:67:d3:64:3a:83:e7:d9:80:46:20:cb:c5: c2:6c:a1:eb:d2:2b:71:f1:e6:31:6c:3b:f5:c3:b0: 69:d3:4b:e3:18:45:b7:84:93:97:3a:e5:82:37:3f: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:19:0E:4A:94:3C:D7:22:C9:B1:7D:B4:EB:21:6A:22:C3:16:F0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:18:26:94:4f:4e:5d:61:29:56:05:19:fa:f3:b8:aa:b9:37: b8:f3:1f:aa:ba:e8:59:fa:50:47:fd:2f:65:6a:6d:74:b9:a4: e5:84:ac:f5:a8:b7:09:7c:90:b7:82:ec:1a:35:f2:34:cb:0c: d4:36:b5:f1:1f:18:3d:18:c2:19:47:19:c3:5c:7b:c9:4c:56: 6f:7d:1e:f6:38:50:db:a4:af:74:d7:f8:75:4a:d9:f1:2c:9e: 03:1d:0d:82:b2:43:be:5e:c7:0b:4d:57:73:3c:a2:95:47:b2: 7e:3d:4f:1a:55:f5:29:b9:0e:4c:77:ba:20:d0:8c:51:b2:14: 09:14:46:f9:df:41:61:cf:e8:24:2f:58:4f:48:7a:dd:a4:df: df:d5:dd:1f:3c:15:80:63:ae:4d:8a:9d:31:cf:a4:91:d8:b8: 0d:78:25:f7:9c:a5:30:97:8b:d6:6d:90:c2:78:ba:41:7f:ec: f2:48:2a:d9:17:3a:4a:aa:bd:25:8c:6a:77:8b:28:63:5d:03: 6d:59:68:2f:3e:13:2d:c4:94:65:6c:dd:a7:55:f1:db:0a:0e: 7d:68:98:8c:a9:f4:4a:97:d9:24:55:a0:8e:bd:7f:80:f9:5d: 26:23:5d:27:49:5e:45:26:fa:da:bd:b2:a0:61:27:79:90:d9: ba:ee:8d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtLql6tznvyZ3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDljNzRhYzEtYTk2NS00YmRhLThmMzQtOGUwNTQyZjc3NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qEAE8lMp46wK2DICTnHZxY6GplZYDYSx8+f RRk3e5Er61UGUOQ338tZJ0pVeXTjUY0OHnxzLHId8OmwxQN/UilMjwswsOWa6vSP kXP5dgUMUW0LDQ6JdOsaVMzTIgUSjQ2PEuyxR3XaoRF8/XfOYBOWYI083wAvRj3/ KtEfZ/T+JHW59fwcRkPvstFDnSMqGG/ug+NgJlwyKejSehSmLQX4I52s+anRs1J7 EG0F+/qcQTn7gsjUFvsVD+YsifeJeZzr28scCYGZM1QSBxA5AKSXsvxn02Q6g+fZ gEYgy8XCbKHr0itx8eYxbDv1w7Bp00vjGEW3hJOXOuWCNz9LGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcZDkqUPNciybF9tOshaiLDFvBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvM2RmOGJjZWItYTJlMi0z MTk0LWI5NTAtNDBkYjY4ZDJiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUYJpRPTl1hKVYFGfrzuKq5N7jzH6q66Fn6UEf9L2VqbXS5pOWErPWo twl8kLeC7Bo18jTLDNQ2tfEfGD0YwhlHGcNce8lMVm99HvY4UNukr3TX+HVK2fEs ngMdDYKyQ75exwtNV3M8opVHsn49TxpV9Sm5Dkx3uiDQjFGyFAkURvnfQWHP6CQv WE9Iet2k39/V3R88FYBjrk2KnTHPpJHYuA14JfecpTCXi9ZtkMJ4ukF/7PJIKtkX OkqqvSWManeLKGNdA21ZaC8+Ey3ElGVs3adV8dsKDn1omIyp9EqX2SRVoI69f4D5 XSYjXSdJXkUm+tq9sqBhJ3mQ2brujdY= -----END CERTIFICATE-----Generated at Sat Sep 26 02:10:48 2026 by rpki-client