$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa File: 458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json) Hash identifier: 7xgEZ+8Tpwou45UnPDTyRtmvsXFDUOgAD/AonFk0ARA= Subject key identifier: 73:DD:72:73:87:55:9A:58:0A:D2:EF:C6:7A:77:58:87:DD:65:9B:BB Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584B0A1163D42BE88734962CD180 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 23122 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:63:d4:2b:e8:87:34:96:2c:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=b8b41ffb-7d34-478b-856f-479e2e963556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:74:45:d2:57:4f:53:08:c6:e0:aa:ae:4f: a1:41:2f:6b:e2:2a:61:a4:fc:6f:8b:70:38:10:59: a4:ff:8d:0d:c2:b4:e5:e4:64:34:81:40:92:4d:ad: 94:e2:c6:df:d1:74:b6:dd:c9:8c:d9:d8:4b:74:b6: 35:45:ef:d5:26:3e:2c:27:73:46:43:d6:6e:f6:46: a0:85:35:3f:7a:7d:6a:3b:5b:9a:58:19:9e:57:f4: 63:5d:81:53:87:68:28:4e:31:dc:fd:51:ac:34:52: fa:a0:43:fd:de:46:1c:ea:c7:92:e7:61:9b:2e:73: 89:2f:83:ac:99:46:3e:33:98:b8:46:25:a2:4a:86: 51:e4:c3:e6:7e:e7:de:6a:76:f6:3b:2d:29:1f:e4: 08:38:9c:3b:8e:e1:26:ef:68:27:25:c6:bf:ce:97: c9:0e:61:ca:44:ff:f2:e5:47:e7:da:7e:55:d4:cb: 73:72:8a:f5:e9:75:91:4f:f6:65:06:27:d4:bd:3c: 5f:1d:8f:71:21:9d:e1:79:9d:bf:de:fc:99:5f:c4: 90:b2:1a:ae:24:05:24:08:51:e9:fd:08:0c:98:97: a9:70:1d:b4:b1:4c:1e:c6:0f:59:2a:e0:c2:e9:ee: ec:98:6c:4e:4d:7f:f1:e8:f8:a7:77:10:df:45:fc: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DD:72:73:87:55:9A:58:0A:D2:EF:C6:7A:77:58:87:DD:65:9B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c3:90:d5:54:b3:d5:b9:12:b0:26:e9:21:d9:0a:d7:7f:3b: 4c:3c:6c:55:c8:79:65:40:86:76:db:ac:c0:16:a0:63:57:72: ee:af:55:ea:b9:ce:8c:29:8f:1f:6b:70:2d:f5:72:6b:35:3f: 48:14:cf:b0:ae:a9:69:07:57:a6:f0:88:1a:02:26:57:de:83: 18:cd:69:c7:3f:68:9f:da:5b:a6:b5:9a:e7:3b:9d:e0:30:5a: 49:72:ec:e2:5e:a9:10:d2:79:8c:2a:bc:8e:e8:35:fa:c1:64: e8:7d:84:be:90:59:26:3c:2b:77:92:da:26:58:ca:76:74:ef: c7:9b:97:11:47:d9:e6:f3:5b:3b:0a:1d:df:60:97:17:71:4b: 15:ac:38:5c:f8:a3:e1:c6:4b:7a:e9:9f:53:94:55:a4:80:89: 09:15:4c:50:79:fa:e3:5c:6a:98:d1:e7:e1:77:05:fa:7b:7a: 2a:b6:56:6b:d3:07:86:f1:57:a0:0f:4e:a3:2a:c4:60:7b:af: 7b:3a:0a:a5:ec:d9:38:f2:a2:da:26:a8:06:e8:df:48:d9:cc: 4a:bd:37:ca:e1:bd:b9:b6:6b:27:5c:c6:f7:03:dc:94:59:df: da:90:94:40:3a:c0:b1:b8:8d:3a:fc:cd:ee:af:67:60:00:4a: ba:10:c2:ac -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsKEWPUK+iHNJYs0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YjhiNDFmZmItN2QzNC00NzhiLTg1NmYtNDc5ZTJlOTYzNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5R0RdJXT1MIxuCqrk+hQS9r4iphpPxvi3A4 EFmk/40NwrTl5GQ0gUCSTa2U4sbf0XS23cmM2dhLdLY1Re/VJj4sJ3NGQ9Zu9kag hTU/en1qO1uaWBmeV/RjXYFTh2goTjHc/VGsNFL6oEP93kYc6seS52GbLnOJL4Os mUY+M5i4RiWiSoZR5MPmfufeanb2Oy0pH+QIOJw7juEm72gnJca/zpfJDmHKRP/y 5Ufn2n5V1Mtzcor16XWRT/ZlBifUvTxfHY9xIZ3heZ2/3vyZX8SQshquJAUkCFHp /QgMmJepcB20sUwexg9ZKuDC6e7smGxOTX/x6PindxDfRfyzBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHPdcnOHVZpYCtLvxnp3WIfdZZu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvNDU4YTMwOTktYzFlMi0z ZmRmLWI0MjAtODBjOGZkNWM1MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANMOQ1VSz1bkSsCbpIdkK1387TDxsVch5ZUCGdtuswBagY1dy7q9V6rnO jCmPH2twLfVyazU/SBTPsK6paQdXpvCIGgImV96DGM1pxz9on9pbprWa5zud4DBa SXLs4l6pENJ5jCq8jug1+sFk6H2EvpBZJjwrd5LaJljKdnTvx5uXEUfZ5vNbOwod 32CXF3FLFaw4XPij4cZLeumfU5RVpICJCRVMUHn641xqmNHn4XcF+nt6KrZWa9MH hvFXoA9OoyrEYHuvezoKpezZOPKi2iaoBujfSNnMSr03yuG9ubZrJ1zG9wPclFnf 2pCUQDrAsbiNOvzN7q9nYABKuhDCrA== -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:36 2025 by rpki-client