$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa File: 0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa (raw, json) Hash identifier: yKFAUe2mhMb3GWlcURHnI5YgPHK0tWiviOsZYzeacgM= Subject key identifier: 15:2D:E9:CB:0C:77:2F:17:F8:D7:75:F8:70:30:8E:64:7D:CC:57:3E Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B8EACE83E673A448E8BF18580 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 18593 IP address blocks: 138.8.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e8:3e:67:3a:44:8e:8b:f1:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c6ccced7-9770-4e12-990f-916d43fe9090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e7:d3:be:bd:3a:d4:82:3c:4b:b5:59:22:b2: dc:c5:60:54:a6:73:ad:2f:87:0f:6e:cd:55:8a:c6: 81:26:2f:64:27:45:79:54:9c:80:b3:70:35:89:3a: a4:ef:86:3b:c7:76:7e:99:6c:1f:64:65:7d:e9:bc: 7e:02:b1:dd:e4:d2:53:12:64:cb:f1:26:f9:ec:22: ec:44:03:97:16:a9:b3:17:48:fc:ee:e8:c6:52:84: 37:0e:6c:30:0a:16:f9:08:58:04:4e:6b:56:e8:8f: d7:fb:e3:0d:6f:b0:cf:ae:df:bd:11:7d:46:14:06: 94:46:12:e8:4e:a3:d5:b7:5c:a3:42:17:a6:d7:82: 44:80:06:99:75:e3:0f:81:56:a1:95:91:78:6b:1e: 58:c4:fa:07:0b:9f:6e:f6:c9:23:33:69:21:b9:b0: c3:87:36:26:bd:c8:c1:91:9e:ef:01:7a:ff:84:24: c7:aa:f8:50:34:97:e9:4c:f0:69:7c:26:0b:f4:de: 71:76:cb:a7:53:ec:f3:30:e7:d7:1d:25:ac:59:9b: ab:42:8d:ac:7b:95:09:83:54:7b:34:6d:bb:13:1e: 7a:01:c2:db:29:60:13:a1:39:1a:c8:f0:bb:21:d8: 45:1f:24:f9:ce:81:73:9d:29:89:78:93:a7:13:de: ac:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:E9:CB:0C:77:2F:17:F8:D7:75:F8:70:30:8E:64:7D:CC:57:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cb:4b:5a:31:c8:61:c7:55:3b:29:4b:4e:a3:e5:e8:09:74: 48:13:3d:5e:c7:d8:0f:53:94:b8:ab:22:67:ea:f5:e7:79:b8: 9d:af:e9:66:fa:b7:66:38:06:17:d3:a6:2f:92:01:62:55:7b: e4:4a:34:9d:a8:7d:21:74:c5:af:32:c9:ac:ae:2a:1d:a0:92: 93:f0:9d:cc:86:cc:e6:1e:4b:d8:da:7c:ca:d4:63:a3:0a:2c: d4:ea:24:be:0c:27:77:1e:28:7f:f7:d6:91:9d:30:29:78:c7: de:8d:ba:1b:89:55:8b:f2:5b:fa:03:e2:d2:6e:27:b6:05:9b: 96:35:f8:65:88:01:e0:c1:51:37:02:06:59:41:dd:b3:f9:4f: 3f:78:be:49:13:45:7e:0d:79:5a:b0:3e:f1:5b:cd:e3:b0:80: e7:b6:b8:60:19:ae:59:92:c1:04:44:06:92:8b:1a:a9:d3:a3: 68:1a:d1:28:cb:63:bf:9c:6f:11:3d:4b:5b:b1:31:f3:35:2e: c0:be:35:7f:f0:65:cc:e6:de:a2:0b:3d:af:ee:0b:ec:93:3b: 8a:6a:29:87:c0:35:53:56:c1:18:ea:97:55:3b:f3:36:e7:de: 7f:37:bc:c5:b6:b5:d3:19:b1:e2:0d:f8:31:59:52:98:c2:4c: 90:1d:b8:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOg+ZzpEjovxhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzZjY2NlZDctOTc3MC00ZTEyLTk5MGYtOTE2ZDQzZmU5MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOfTvr061II8S7VZIrLcxWBUpnOtL4cPbs1V isaBJi9kJ0V5VJyAs3A1iTqk74Y7x3Z+mWwfZGV96bx+ArHd5NJTEmTL8Sb57CLs RAOXFqmzF0j87ujGUoQ3DmwwChb5CFgETmtW6I/X++MNb7DPrt+9EX1GFAaURhLo TqPVt1yjQhem14JEgAaZdeMPgVahlZF4ax5YxPoHC59u9skjM2khubDDhzYmvcjB kZ7vAXr/hCTHqvhQNJfpTPBpfCYL9N5xdsunU+zzMOfXHSWsWZurQo2se5UJg1R7 NG27Ex56AcLbKWAToTkayPC7IdhFHyT5zoFznSmJeJOnE96s4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUt6csMdy8X+Nd1+HAwjmR9zFc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDE1NWU0ZjEtN2NkNC0z ZGI3LWFhNDktNWRkMjc2YWM4YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAightMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrLS1oxyGHHVTspS06j5egJdEgTPV7H2A9TlLirImfq9ed5uJ2v6Wb6 t2Y4BhfTpi+SAWJVe+RKNJ2ofSF0xa8yyayuKh2gkpPwncyGzOYeS9jafMrUY6MK LNTqJL4MJ3ceKH/31pGdMCl4x96NuhuJVYvyW/oD4tJuJ7YFm5Y1+GWIAeDBUTcC BllB3bP5Tz94vkkTRX4NeVqwPvFbzeOwgOe2uGAZrlmSwQREBpKLGqnTo2ga0SjL Y7+cbxE9S1uxMfM1LsC+NX/wZczm3qILPa/uC+yTO4pqKYfANVNWwRjql1U78zbn 3n83vMW2tdMZseIN+DFZUpjCTJAduBY= -----END CERTIFICATE-----Generated at Tue Oct 21 04:23:33 2025 by rpki-client