$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa File: d0a1f707-a3b6-3064-b955-8dfcaf321300.roa (raw, json) Hash identifier: 9BV6INg4JI4RpAWsvxDIvi2+QNEW4ftYIeoNCae6aEM= Subject key identifier: 43:23:6A:A0:CA:5E:95:F1:51:09:10:BB:DE:C6:77:0A:D5:00:88:A0 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584C8476C20D7D05BEB675457440 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 14297 IP address blocks: 138.229.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:c2:0d:7d:05:be:b6:75:45:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=3fe199c8-8fcb-45af-8328-62b22f1a12b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:8f:18:a1:6e:48:4b:45:56:85:7a:78:76: 10:3a:69:b8:93:cc:cf:ab:b3:0d:53:0f:bd:0d:b0: ee:bb:c6:0e:00:83:ae:07:36:f0:98:31:45:57:a9: c5:98:14:28:b6:60:a5:82:a9:36:e4:f9:95:1b:a5: e1:6e:e6:a0:f6:c9:1d:79:e4:42:21:82:f6:c9:e7: 1e:f7:76:2e:aa:8d:d7:bb:28:34:da:24:ae:de:16: c3:c7:b1:d1:41:c2:ff:ea:88:91:55:d6:92:8e:d0: 92:2c:97:86:16:ff:d0:32:a1:c4:ea:e1:b2:12:2b: fe:01:ba:9b:51:fe:c7:bb:39:59:b4:31:3e:1b:d8: e2:b9:c4:c2:ab:39:e3:2c:9c:a4:8e:ba:fb:33:0e: 40:46:91:c1:06:af:81:c3:ca:2c:7d:bd:9a:65:bb: b2:94:ea:d1:72:fe:f6:4e:7c:aa:49:e6:29:e1:eb: 32:8f:66:be:ac:e8:23:d0:ee:76:de:69:6b:12:46: db:8e:a2:a3:de:fb:df:52:7f:de:f3:5b:c4:dd:c3: 3b:ba:2c:c2:5f:6f:00:ec:29:f2:70:7c:63:2f:5d: 77:57:83:a4:c4:01:02:15:73:31:dd:8e:6c:84:9d: 74:ba:0e:26:64:02:95:14:54:6c:32:d0:64:8b:53: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:6A:A0:CA:5E:95:F1:51:09:10:BB:DE:C6:77:0A:D5:00:88:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 138.229.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3f:7d:ac:6f:a3:e6:97:7e:8a:ef:76:80:ee:19:0f:40:d9: 60:9f:1e:ee:13:fc:7a:c4:02:b4:84:24:41:ad:73:48:56:a6: 53:79:7a:8d:0b:a5:c4:02:ce:74:94:fe:44:2a:6f:9b:30:c7: 5d:cd:34:ba:1c:9a:76:32:7b:59:00:3a:c7:98:09:47:f8:12: 15:03:5f:69:3f:b5:50:0e:29:a7:c0:42:cc:2c:97:f2:85:8e: 15:d8:4e:aa:86:27:be:d5:8c:28:23:d6:8f:10:e9:7c:46:c5: 6f:2d:19:bd:0f:77:d5:45:cc:92:6d:f0:6d:24:48:c4:a1:35: 57:f4:77:51:44:29:16:b9:a5:d2:6f:25:9e:19:7e:83:4b:5f: 81:92:61:41:00:28:a7:16:fa:7f:7f:67:5b:ac:bd:c1:25:42: da:d5:ed:cc:b8:e5:ed:2b:56:b7:1e:82:3b:26:f8:f3:f4:b8: 4b:9a:5d:39:27:86:c5:a4:76:66:31:55:d6:04:dc:9b:95:14: 52:ae:68:b7:2a:f4:f7:d2:71:27:90:3f:a1:ba:c6:8a:11:cb: ac:75:0e:f2:3c:bb:59:6a:8a:c5:84:72:6d:23:07:f1:c4:c4: e2:da:18:64:b4:b8:02:75:7c:f5:8b:ed:ea:39:73:20:34:59: 2a:dc:09:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdsINfQW+tnVFdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk M2ZlMTk5YzgtOGZjYi00NWFmLTgzMjgtNjJiMjJmMWExMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm+PGKFuSEtFVoV6eHYQOmm4k8zPq7MNUw+9 DbDuu8YOAIOuBzbwmDFFV6nFmBQotmClgqk25PmVG6Xhbuag9skdeeRCIYL2yece 93Yuqo3Xuyg02iSu3hbDx7HRQcL/6oiRVdaSjtCSLJeGFv/QMqHE6uGyEiv+Abqb Uf7HuzlZtDE+G9jiucTCqznjLJykjrr7Mw5ARpHBBq+Bw8osfb2aZbuylOrRcv72 TnyqSeYp4esyj2a+rOgj0O523mlrEkbbjqKj3vvfUn/e81vE3cM7uizCX28A7Cny cHxjL113V4OkxAECFXMx3Y5shJ10ug4mZAKVFFRsMtBki1O2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMjaqDKXpXxUQkQu97GdwrVAIigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZDBhMWY3MDctYTNiNi0z MDY0LWI5NTUtOGRmY2FmMzIxMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA/faxvo+aXforvdoDuGQ9A2WCfHu4T/HrEArSEJEGtc0hWplN5eo0L pcQCznSU/kQqb5swx13NNLocmnYye1kAOseYCUf4EhUDX2k/tVAOKafAQswsl/KF jhXYTqqGJ77VjCgj1o8Q6XxGxW8tGb0Pd9VFzJJt8G0kSMShNVf0d1FEKRa5pdJv JZ4ZfoNLX4GSYUEAKKcW+n9/Z1usvcElQtrV7cy45e0rVrcegjsm+PP0uEuaXTkn hsWkdmYxVdYE3JuVFFKuaLcq9PfScSeQP6G6xooRy6x1DvI8u1lqisWEcm0jB/HE xOLaGGS0uAJ1fPWL7eo5cyA0WSrcCXs= -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:23 2026 by rpki-client