$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: +IabKYy3dCCr3rkNGZZiF6OmgObR3B4ILIXgJGB/k7Y= Subject key identifier: F3:8E:B1:9E:A4:2C:A5:BC:42:2C:C1:1F:1B:80:49:A1:2A:C7:0A:A0 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584E577F494DD750ED2B50C32120 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Tue 30 Jun 2026 09:00:12 +0000 ROA not before: Tue 30 Jun 2026 09:00:12 +0000 ROA not after: Mon 28 Sep 2026 09:00:12 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:7f:49:4d:d7:50:ed:2b:50:c3:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jun 30 09:00:12 2026 GMT Not After : Sep 28 09:00:12 2026 GMT Subject: CN=83c94a14-55c2-475a-b215-abcbdc3e48e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:bb:80:04:1e:75:c5:5e:c6:31:9f:36:6e: 5a:78:45:90:24:55:16:8c:e1:3d:a8:d0:5a:75:98: 96:52:e8:15:d1:09:b3:76:da:ad:d5:09:58:d6:8f: 33:a4:28:05:a9:72:5a:91:26:f8:8e:c5:54:45:59: b5:8d:a8:57:e7:aa:51:7e:eb:7a:b7:e6:35:22:f5: 27:c7:98:a4:e0:82:58:a6:be:2e:bd:e3:f6:af:c8: b9:c8:54:3c:19:c5:a4:39:56:b4:62:d6:4c:0a:f3: fb:e4:cf:83:e0:c6:15:ac:6e:16:76:e7:03:01:f9: 20:07:51:b7:45:57:25:84:78:26:82:ef:28:85:df: ea:6c:23:39:f8:51:e1:23:a8:85:de:cd:21:1e:c2: 7c:a0:c3:b2:d0:75:cc:b8:73:b4:57:f9:b5:fa:eb: cf:c4:6b:40:8a:05:65:55:49:81:89:7b:2b:2d:9b: b6:ab:af:c7:c6:97:f2:b2:ca:5a:8f:0b:09:42:c1: a6:af:e9:75:04:a1:8f:13:12:0f:63:d7:9e:a8:96: 5a:c8:91:0e:60:4c:6a:6c:b3:aa:e8:fd:c2:77:20: ff:b4:28:e1:c7:2e:49:ac:47:cc:4a:00:33:c8:9b: e1:aa:ff:04:e6:03:f2:f4:d9:64:bc:c4:af:71:79: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8E:B1:9E:A4:2C:A5:BC:42:2C:C1:1F:1B:80:49:A1:2A:C7:0A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b4:8c:21:09:ae:7c:bd:2d:9c:31:d7:16:8f:80:71:03:0e: 2a:ce:c5:b9:ef:6a:3f:b8:f0:bb:b8:cd:f5:cc:6e:fa:b1:a2: 1f:75:7f:a0:0d:14:9b:b6:b2:dc:ca:66:fc:67:8d:3a:52:db: 32:55:8b:eb:c4:2b:24:df:40:63:aa:57:62:50:ce:62:c2:5f: 33:48:cf:6b:6e:d9:7c:bb:45:91:43:54:63:33:19:a9:3d:bc: 4e:3b:2c:14:5c:67:ba:83:e1:be:52:78:22:77:20:e1:6f:11: 69:8f:32:77:87:e1:41:13:43:f0:11:36:0c:16:f1:46:ba:81: 6a:bb:3f:e1:8f:ad:69:d2:cd:d4:f7:20:f3:92:f0:53:8a:07: d5:a4:da:b4:bf:c1:dc:4a:ca:59:0f:fe:94:18:53:66:4e:87: 64:9e:fd:d7:f6:8f:08:8f:91:62:ee:65:31:6d:02:61:04:b9: 3c:76:72:c9:2c:d3:99:14:57:a5:8a:fb:d8:dc:df:cc:9b:b0: 6a:b7:3f:72:7c:0d:e6:da:ca:fe:3c:9d:45:42:6b:0f:b5:fd: 5c:af:62:5c:ee:aa:7f:fc:9f:19:61:b8:78:27:11:65:b6:77: 86:2c:34:f7:af:cd:d2:83:e8:1a:44:6f:6b:97:2a:69:b9:be: 27:fa:fa:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0lN11DtK1DDISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk ODNjOTRhMTQtNTVjMi00NzVhLWIyMTUtYWJjYmRjM2U0OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloS7gAQedcVexjGfNm5aeEWQJFUWjOE9qNBa dZiWUugV0Qmzdtqt1QlY1o8zpCgFqXJakSb4jsVURVm1jahX56pRfut6t+Y1IvUn x5ik4IJYpr4uveP2r8i5yFQ8GcWkOVa0YtZMCvP75M+D4MYVrG4WducDAfkgB1G3 RVclhHgmgu8ohd/qbCM5+FHhI6iF3s0hHsJ8oMOy0HXMuHO0V/m1+uvPxGtAigVl VUmBiXsrLZu2q6/HxpfysspajwsJQsGmr+l1BKGPExIPY9eeqJZayJEOYExqbLOq 6P3CdyD/tCjhxy5JrEfMSgAzyJvhqv8E5gPy9NlkvMSvcXnoTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOOsZ6kLKW8QizBHxuASaEqxwqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq0jCEJrny9LZwx1xaPgHEDDirOxbnvaj+48Lu4zfXMbvqxoh91f6AN FJu2stzKZvxnjTpS2zJVi+vEKyTfQGOqV2JQzmLCXzNIz2tu2Xy7RZFDVGMzGak9 vE47LBRcZ7qD4b5SeCJ3IOFvEWmPMneH4UETQ/ARNgwW8Ua6gWq7P+GPrWnSzdT3 IPOS8FOKB9Wk2rS/wdxKylkP/pQYU2ZOh2Se/df2jwiPkWLuZTFtAmEEuTx2csks 05kUV6WK+9jc38ybsGq3P3J8Debayv48nUVCaw+1/VyvYlzuqn/8nxlhuHgnEWW2 d4YsNPevzdKD6BpEb2uXKmm5vif6+sE= -----END CERTIFICATE-----Generated at Fri Jul 24 04:39:49 2026 by rpki-client