$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa File: 1a632d63-6b73-39e1-a60d-629fb0d0c198.roa (raw, json) Hash identifier: 4vBbXY1K/lLmEPsXwIDzQwvjfrBD/l18CUAITg+AFkM= Subject key identifier: E3:D6:A0:1D:EE:3A:FF:96:5B:90:59:79:81:1D:79:5A:19:4E:86:02 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849F5AFCF13FEE568FAF7CC01B8 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa Signing time: Sat 24 May 2025 13:01:04 +0000 ROA not before: Sat 24 May 2025 13:01:04 +0000 ROA not after: Fri 22 Aug 2025 13:01:04 +0000 asID: 6195 IP address blocks: 138.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:af:cf:13:fe:e5:68:fa:f7:cc:01:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 24 13:01:04 2025 GMT Not After : Aug 22 13:01:04 2025 GMT Subject: CN=47840dea-c4ca-4d37-9bf8-c40c3a99e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:bf:01:b6:8a:f2:a3:dc:c7:9d:9c:eb:9e: 3d:fe:06:af:f1:c1:2e:82:b2:50:87:1e:b9:63:60: b4:30:af:7e:ec:ad:f4:9a:8a:a6:9f:ce:1e:ce:67: b6:13:76:70:48:71:a5:91:ae:1a:61:9d:b3:80:d5: 1b:29:2f:0a:ce:fb:70:55:f5:34:5f:28:47:37:ca: bc:c5:33:66:78:7b:db:2f:8e:be:ba:3a:41:bf:35: 68:cc:e5:9b:30:55:6b:db:23:df:37:77:a8:b6:dc: 00:d2:75:e7:37:1f:34:ee:c9:0a:8a:7f:30:01:7a: 26:b0:51:45:b7:89:a6:c3:5f:e3:c4:96:0d:5a:c7: 6a:89:04:9a:00:d8:34:a3:3d:1e:9d:ef:ad:89:11: d2:15:08:76:97:72:cc:0b:eb:62:e0:31:c7:10:df: 82:ae:4b:88:2b:48:99:c3:9c:39:f9:df:cc:25:a4: e8:c3:76:e6:48:33:ac:69:6a:d9:16:c5:6f:ef:67: 72:7c:d7:48:fa:52:6e:41:40:db:60:93:f1:29:5c: 08:5a:ee:21:60:24:9b:66:38:3a:c9:29:13:69:ca: 18:63:a7:09:0f:7f:5d:99:41:c0:9d:ce:12:3a:6f: 7c:6d:62:82:49:0d:52:30:0f:6c:9a:3d:e8:8a:fd: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:A0:1D:EE:3A:FF:96:5B:90:59:79:81:1D:79:5A:19:4E:86:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b4:a7:b7:4c:1f:d9:d2:b7:9c:50:09:15:8b:d3:4a:46:62: 99:c2:24:d4:54:7a:ff:ca:1d:50:b2:ce:2a:c8:89:65:29:39: 52:4e:a7:41:fa:de:4f:1d:26:1d:67:3e:98:95:6a:47:e3:5f: de:9e:dc:20:af:d4:a1:d1:da:01:99:5c:0b:b3:5b:19:a7:d1: d3:db:af:8d:89:ba:3e:76:e8:38:54:f9:7e:28:d2:40:48:57: cb:4b:61:65:ab:db:4f:1c:c8:c5:e1:1f:45:be:47:82:6c:f1: c0:df:2b:83:1d:4a:b9:c2:04:ea:e6:35:38:ca:41:0e:68:83: ed:dd:94:17:11:ea:ae:9b:1c:2d:24:e1:47:14:d5:bd:fa:55: 1e:17:42:51:8f:f5:4f:4a:84:14:51:da:1d:ef:56:ed:6e:cc: a9:ed:07:c3:51:d1:77:67:36:c2:9b:3c:a1:02:60:87:e3:36: 74:26:b9:45:da:a0:98:ef:3b:82:1e:75:69:5c:23:87:81:c9: 06:e9:79:1d:fb:5e:63:51:e2:70:91:ba:33:ed:5e:11:4d:8f: 58:44:f4:1d:d9:fa:1c:1a:f4:33:1f:ce:30:ac:2b:fe:81:4b: 04:28:a7:44:64:32:5d:8a:a0:47:ee:8d:8b:5f:65:cf:a5:ed: 53:b9:bd:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn1r88T/uVo+vfMAbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUyNDEzMDEwNFoXDTI1MDgyMjEzMDEwNFowLzEtMCsGA1UEAxMk NDc4NDBkZWEtYzRjYS00ZDM3LTliZjgtYzQwYzNhOTllMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDC/AbaK8qPcx52c6549/gav8cEugrJQhx65 Y2C0MK9+7K30moqmn84ezme2E3ZwSHGlka4aYZ2zgNUbKS8KzvtwVfU0XyhHN8q8 xTNmeHvbL46+ujpBvzVozOWbMFVr2yPfN3eottwA0nXnNx807skKin8wAXomsFFF t4mmw1/jxJYNWsdqiQSaANg0oz0ene+tiRHSFQh2l3LMC+ti4DHHEN+CrkuIK0iZ w5w5+d/MJaTow3bmSDOsaWrZFsVv72dyfNdI+lJuQUDbYJPxKVwIWu4hYCSbZjg6 ySkTacoYY6cJD39dmUHAnc4SOm98bWKCSQ1SMA9smj3oiv3lPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPWoB3uOv+WW5BZeYEdeVoZToYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMWE2MzJkNjMtNmI3My0z OWUxLWE2MGQtNjI5ZmIwZDBjMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC0p7dMH9nSt5xQCRWL00pGYpnCJNRUev/KHVCyzirIiWUpOVJOp0H6 3k8dJh1nPpiVakfjX96e3CCv1KHR2gGZXAuzWxmn0dPbr42Juj526DhU+X4o0kBI V8tLYWWr208cyMXhH0W+R4Js8cDfK4MdSrnCBOrmNTjKQQ5og+3dlBcR6q6bHC0k 4UcU1b36VR4XQlGP9U9KhBRR2h3vVu1uzKntB8NR0XdnNsKbPKECYIfjNnQmuUXa oJjvO4IedWlcI4eByQbpeR37XmNR4nCRujPtXhFNj1hE9B3Z+hwa9DMfzjCsK/6B SwQop0RkMl2KoEfujYtfZc+l7VO5vS4= -----END CERTIFICATE-----Generated at Mon Jun 30 00:58:43 2025 by rpki-client