$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa File: 02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa (raw, json) Hash identifier: ODsjfzls9Fq9JveRg5JeG3KMOG+Ki79R+54t1m+fQUU= Subject key identifier: 0F:2C:5D:DC:F8:93:56:5D:83:73:79:3B:D5:9F:7E:9C:F2:54:D1:9A Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B8EACE81A0D6F0B896EDB0B00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 18593 IP address blocks: 138.8.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e8:1a:0d:6f:0b:89:6e:db:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9c1e975b-270a-42d2-bd45-3832b5c505cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:bf:2c:de:ee:6a:fa:e9:2a:b7:fb:2e:29: fa:85:08:7e:9c:ef:1f:4d:79:22:ed:88:5e:d2:eb: 2c:a1:f5:81:e7:b3:27:15:26:7d:ea:02:35:2f:bb: ce:12:0f:ea:50:da:80:43:7b:fe:ed:11:1a:2f:57: 38:59:51:7b:fb:ea:4b:a5:ae:33:a8:8b:a8:45:53: 69:33:cc:25:34:f4:84:c9:ed:5c:a0:61:f3:79:ad: b4:3e:24:89:c4:a6:eb:c3:a6:d0:82:4c:31:71:ac: b9:0b:0a:b4:8f:59:4e:4d:c0:91:5a:28:fd:bf:b9: 5f:98:2d:ca:b1:b4:cc:aa:b2:07:dc:7c:ba:76:f3: 0b:8a:f9:96:e3:74:35:5f:1c:6f:e2:d9:24:f0:bf: 73:db:94:6a:84:69:0d:0e:13:ee:51:22:f5:2b:50: 2c:88:b0:3e:44:99:34:ba:5f:aa:00:2a:fa:02:91: bd:b7:51:8e:07:9c:1b:8a:8c:71:e1:82:a1:be:6d: 5b:21:f3:53:d4:c5:94:1e:92:62:9b:f8:41:c2:95: 2e:5d:33:fb:bd:17:40:67:d6:6b:d9:44:07:b4:b2: db:29:4f:01:60:c1:1f:81:b4:02:a2:1d:3a:1f:1e: d8:4e:d7:ea:48:a6:50:14:04:be:cb:5a:91:bd:bb: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2C:5D:DC:F8:93:56:5D:83:73:79:3B:D5:9F:7E:9C:F2:54:D1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2c:64:29:fd:b7:54:56:27:88:05:1d:96:27:ba:9c:9a:16: 10:1f:fe:75:33:2e:af:5a:b9:e4:8a:9c:fd:e4:81:24:10:69: b5:6a:be:31:20:63:1b:97:0a:e4:11:5a:a9:7a:e5:06:70:8d: 59:28:d3:4f:b8:74:88:b6:6a:b4:d8:2b:38:1d:cc:d2:ea:8a: 31:aa:f0:f7:e0:23:01:3a:c6:f2:3b:52:6a:d9:2b:58:72:3d: 6d:52:be:dd:b6:aa:c3:01:82:1d:40:f7:b6:08:25:f5:86:46: 14:c7:08:3f:e7:34:2c:19:6b:7e:1b:1a:15:89:5c:df:3b:5e: 97:2f:b2:ed:59:fc:03:d2:f9:94:7f:27:be:10:55:ab:2a:07: 32:e3:05:0b:25:23:6b:a9:90:91:9d:eb:57:5d:6c:e6:13:9e: 4c:c5:3a:0b:ae:b8:50:81:d8:a8:b9:d3:b1:4a:c4:32:5f:db: 18:98:e9:7d:c2:54:7f:16:42:8c:18:f1:87:fb:a8:96:f1:90: 85:4f:1e:5e:1a:da:70:12:2c:b3:fd:d1:d5:a9:20:c4:69:0f: b2:8c:25:37:14:93:2e:2c:3a:c8:a8:8a:28:8e:65:2c:b5:96: 14:ab:24:27:44:2c:a2:d1:30:e3:97:68:22:94:29:85:07:9c: 69:a2:6c:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOgaDW8LiW7bCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OWMxZTk3NWItMjcwYS00MmQyLWJkNDUtMzgzMmI1YzUwNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfu/LN7uavrpKrf7Lin6hQh+nO8fTXki7Yhe 0ussofWB57MnFSZ96gI1L7vOEg/qUNqAQ3v+7REaL1c4WVF7++pLpa4zqIuoRVNp M8wlNPSEye1coGHzea20PiSJxKbrw6bQgkwxcay5Cwq0j1lOTcCRWij9v7lfmC3K sbTMqrIH3Hy6dvMLivmW43Q1Xxxv4tkk8L9z25RqhGkNDhPuUSL1K1AsiLA+RJk0 ul+qACr6ApG9t1GOB5wbioxx4YKhvm1bIfNT1MWUHpJim/hBwpUuXTP7vRdAZ9Zr 2UQHtLLbKU8BYMEfgbQCoh06Hx7YTtfqSKZQFAS+y1qRvbuIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8sXdz4k1Zdg3N5O9WffpzyVNGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDJmOTBmZDgtN2UyMy0z ZmNjLWJiMGYtMmZmODIwNmFlMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAsZCn9t1RWJ4gFHZYnupyaFhAf/nUzLq9aueSKnP3kgSQQabVqvjEg YxuXCuQRWql65QZwjVko00+4dIi2arTYKzgdzNLqijGq8PfgIwE6xvI7UmrZK1hy PW1Svt22qsMBgh1A97YIJfWGRhTHCD/nNCwZa34bGhWJXN87Xpcvsu1Z/APS+ZR/ J74QVasqBzLjBQslI2upkJGd61ddbOYTnkzFOguuuFCB2Ki507FKxDJf2xiY6X3C VH8WQowY8Yf7qJbxkIVPHl4a2nASLLP90dWpIMRpD7KMJTcUky4sOsioiiiOZSy1 lhSrJCdELKLRMOOXaCKUKYUHnGmibPA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:34:28 2025 by rpki-client