$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa File: 458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json) Hash identifier: qdZVtM6V1aFvjXDIUQpYRc5tubLWbO+5mZcvPSaVLBQ= Subject key identifier: 7E:D6:FA:2D:91:77:32:56:4E:1E:3B:BA:05:B2:08:B3:EF:28:6A:12 Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584F2D87BD788813AEFBE8CC8580 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 23122 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:bd:78:88:13:ae:fb:e8:cc:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=c85b369d-669e-4bf1-94d1-30a8a8e942ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:07:d8:f1:88:6d:e2:ad:17:26:a3:07:df:21: a7:03:d3:5e:3d:a9:25:c5:f9:cb:7f:f7:e0:3c:2f: ab:c7:a9:18:27:12:58:1a:a5:90:29:51:ec:8f:b9: 5f:f1:a8:06:3d:d5:ba:58:03:7e:23:91:c0:d8:c4: 3b:51:32:23:40:72:3b:1b:62:83:04:6e:9c:70:15: d3:99:f6:4e:43:aa:90:42:b8:6f:6f:66:3d:bc:c6: 08:4c:88:29:a0:86:fe:1f:5d:b0:2d:78:09:6b:02: 8e:66:c8:9f:0c:15:fb:55:93:7d:a1:6b:1a:bd:b3: d2:7b:44:f8:f1:f8:0d:65:40:21:2f:41:ca:7d:65: f3:40:48:9a:fb:d9:6d:d7:d0:b6:c3:16:ce:84:af: 0e:ea:f1:21:a3:b6:c1:42:88:a4:46:a8:c8:4c:a4: 03:3f:33:4c:8d:6f:08:32:99:44:36:73:55:19:33: 95:bf:4f:b9:c8:9f:64:c5:43:10:92:83:46:8b:53: c1:c6:f5:b8:0c:81:cd:01:fe:46:58:1a:19:cf:9a: da:f9:3f:a8:48:d7:5c:7b:bc:f8:fc:fe:1a:54:fa: 04:34:68:7d:24:2b:a5:c3:e0:34:9e:00:9a:8f:33: 39:0a:c6:f3:b2:6e:b0:89:a3:28:0a:03:10:42:48: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:FA:2D:91:77:32:56:4E:1E:3B:BA:05:B2:08:B3:EF:28:6A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:06:0b:66:90:34:71:17:09:ff:aa:af:02:2a:fb:f7:2c:f0: 0c:80:89:29:0b:fb:41:40:48:2a:ef:db:e5:32:d2:f8:88:1c: b6:89:45:27:ab:f7:96:02:61:76:6d:af:c7:75:61:48:3c:f1: 57:04:37:ac:da:05:ec:27:b4:ad:60:a8:dc:b7:ff:a6:13:97: f8:c9:1d:fd:70:db:99:23:63:63:9b:54:40:62:96:59:b1:dc: 69:df:b0:f8:67:6a:71:a1:b0:e3:42:e7:4b:6c:b1:62:2d:b9: ff:be:4d:6b:d0:f3:f5:73:7b:af:30:ee:39:a3:97:c0:30:c4: 6a:d9:4f:e5:59:c8:30:65:c1:52:28:8c:55:c8:2b:e8:d2:25: db:8a:96:ae:b8:95:42:06:9c:2f:6b:88:bb:e5:f8:20:d2:b0: 1d:bb:e5:9a:ad:54:a6:8e:9c:c8:c4:b4:26:0d:ca:6e:23:72: ac:62:17:a3:4c:1c:6f:7b:7d:cd:d0:ea:90:8d:03:06:6e:67: 39:36:5e:a7:61:40:63:91:f8:4a:bd:a6:71:c7:3c:ae:53:c4: ca:fd:a9:19:62:87:62:1f:11:7c:84:0c:62:3d:95:11:e0:27: 4f:70:c2:9e:9c:7d:04:9a:a4:6f:b0:bc:d7:64:a6:e4:fd:42: ca:e7:eb:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8th714iBOu++jMhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg1YjM2OWQtNjY5ZS00YmYxLTk0ZDEtMzBhOGE4ZTk0MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wfY8Yht4q0XJqMH3yGnA9NePaklxfnLf/fg PC+rx6kYJxJYGqWQKVHsj7lf8agGPdW6WAN+I5HA2MQ7UTIjQHI7G2KDBG6ccBXT mfZOQ6qQQrhvb2Y9vMYITIgpoIb+H12wLXgJawKOZsifDBX7VZN9oWsavbPSe0T4 8fgNZUAhL0HKfWXzQEia+9lt19C2wxbOhK8O6vEho7bBQoikRqjITKQDPzNMjW8I MplENnNVGTOVv0+5yJ9kxUMQkoNGi1PBxvW4DIHNAf5GWBoZz5ra+T+oSNdce7z4 /P4aVPoENGh9JCulw+A0ngCajzM5Csbzsm6wiaMoCgMQQki8vwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH7W+i2RdzJWTh47ugWyCLPvKGoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvNDU4YTMwOTktYzFlMi0z ZmRmLWI0MjAtODBjOGZkNWM1MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASgYLZpA0cRcJ/6qvAir79yzwDICJKQv7QUBIKu/b5TLS+IgctolFJ6v3 lgJhdm2vx3VhSDzxVwQ3rNoF7Ce0rWCo3Lf/phOX+Mkd/XDbmSNjY5tUQGKWWbHc ad+w+GdqcaGw40LnS2yxYi25/75Na9Dz9XN7rzDuOaOXwDDEatlP5VnIMGXBUiiM Vcgr6NIl24qWrriVQgacL2uIu+X4INKwHbvlmq1Upo6cyMS0Jg3KbiNyrGIXo0wc b3t9zdDqkI0DBm5nOTZep2FAY5H4Sr2mccc8rlPEyv2pGWKHYh8RfIQMYj2VEeAn T3DCnpx9BJqkb7C812Sm5P1CyufrJg== -----END CERTIFICATE-----Generated at Wed Sep 23 08:06:18 2026 by rpki-client