$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa File: 1a632d63-6b73-39e1-a60d-629fb0d0c198.roa (raw, json) Hash identifier: S3IwdIx/RgZ6ANiZISW/MV35RJQptqK7XJy4HGVY2mQ= Subject key identifier: 94:8A:36:07:6B:29:2E:B2:79:23:A1:D5:28:2F:67:14:FE:69:01:46 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AD66B9AB2627ACD8D378E0CC0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 6195 IP address blocks: 138.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:9a:b2:62:7a:cd:8d:37:8e:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=0191940d-2b3e-4c7d-9a27-5ae00e26fb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:dd:a3:8d:25:e2:a8:e4:51:c2:14:94:8b: 13:87:0b:18:70:c0:78:50:3c:9a:3c:9b:35:bc:9f: 14:91:4c:8d:39:3c:4d:fc:79:13:f6:fe:b7:a9:f0: 44:ee:de:43:2c:b3:9c:bd:c7:cc:40:f4:89:c2:78: 14:5d:67:f2:01:e4:54:28:64:20:bb:d9:0a:a6:a9: c0:ea:07:c8:b0:eb:90:c8:ea:f4:b4:56:ba:04:6e: b9:e4:e2:d0:e8:5e:d7:fe:ec:f2:e6:a0:fc:7e:30: 3c:a3:8c:8c:81:a9:17:3c:98:da:49:44:ce:5e:58: cd:72:f4:63:bf:a6:0e:d3:cc:37:d6:5b:71:7f:3f: d9:b0:29:6a:2b:b6:a9:03:e2:a8:96:57:07:0f:c4: 78:bb:8c:70:58:98:de:81:8f:0c:0d:1a:38:2d:9d: 08:12:84:ff:4b:d1:93:5a:97:ea:70:b2:e7:c1:c4: e6:1b:76:d2:0a:bb:70:ec:e0:6c:15:3b:3a:8d:68: 84:b2:0e:21:d9:ee:5b:d4:1e:52:fc:4e:6b:03:bd: a7:f1:8d:bf:0f:4c:08:56:d2:f8:a5:32:ad:e1:cd: 79:07:a9:4c:9d:e1:a5:6f:4d:c2:07:cf:59:6a:58: 8b:d4:74:a8:44:34:0a:ec:8c:78:be:7e:f8:38:b2: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8A:36:07:6B:29:2E:B2:79:23:A1:D5:28:2F:67:14:FE:69:01:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0e:57:a1:de:48:12:10:e5:2d:98:1c:ad:80:6b:de:2e:dc: 2a:02:4e:07:dd:f6:c6:ef:26:83:30:c2:42:b3:6c:15:a7:42: bc:fc:0b:a4:ef:f1:57:a5:14:14:b1:7f:ba:6e:45:9a:73:67: bc:18:ad:e9:6d:2d:ca:bc:2f:8a:88:0a:06:70:ee:32:e8:ba: e4:e5:7c:87:66:5d:6a:ed:42:a8:dc:e9:e0:ef:a5:62:64:65: 7c:82:87:36:33:60:08:88:e6:44:82:e0:76:f5:a8:eb:6b:dc: df:8c:da:52:01:5e:67:7d:ee:95:c0:8f:60:ff:2e:19:78:23: b3:d5:d4:8b:29:b7:33:42:e1:48:52:ea:35:ba:e7:2b:6e:33: 0c:7c:17:96:ad:3d:c6:ce:23:4c:01:e4:2d:bb:1b:70:1e:0c: e2:20:58:12:41:55:d3:11:ef:94:c4:b9:d6:3a:26:c8:97:01: c6:ff:4c:65:ea:68:b2:9c:3f:6c:8a:2e:b7:db:63:48:0e:b8: 7a:7a:6d:0e:4a:d8:d1:22:29:93:23:68:7c:e9:3f:81:40:71: 6d:40:2d:49:57:99:8a:ee:04:c5:73:8e:d4:ae:a6:da:8d:1c: db:86:e9:de:83:a6:c6:df:45:9d:53:68:10:be:a9:a2:a2:12: 5e:3e:09:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErWa5qyYnrNjTeODMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk MDE5MTk0MGQtMmIzZS00YzdkLTlhMjctNWFlMDBlMjZmYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jLdo40l4qjkUcIUlIsThwsYcMB4UDyaPJs1 vJ8UkUyNOTxN/HkT9v63qfBE7t5DLLOcvcfMQPSJwngUXWfyAeRUKGQgu9kKpqnA 6gfIsOuQyOr0tFa6BG655OLQ6F7X/uzy5qD8fjA8o4yMgakXPJjaSUTOXljNcvRj v6YO08w31ltxfz/ZsClqK7apA+KollcHD8R4u4xwWJjegY8MDRo4LZ0IEoT/S9GT WpfqcLLnwcTmG3bSCrtw7OBsFTs6jWiEsg4h2e5b1B5S/E5rA72n8Y2/D0wIVtL4 pTKt4c15B6lMneGlb03CB89ZaliL1HSoRDQK7Ix4vn74OLI1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSKNgdrKS6yeSOh1SgvZxT+aQFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMWE2MzJkNjMtNmI3My0z OWUxLWE2MGQtNjI5ZmIwZDBjMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8OV6HeSBIQ5S2YHK2Aa94u3CoCTgfd9sbvJoMwwkKzbBWnQrz8C6Tv 8VelFBSxf7puRZpzZ7wYreltLcq8L4qICgZw7jLouuTlfIdmXWrtQqjc6eDvpWJk ZXyChzYzYAiI5kSC4Hb1qOtr3N+M2lIBXmd97pXAj2D/Lhl4I7PV1IsptzNC4UhS 6jW65ytuMwx8F5atPcbOI0wB5C27G3AeDOIgWBJBVdMR75TEudY6JsiXAcb/TGXq aLKcP2yKLrfbY0gOuHp6bQ5K2NEiKZMjaHzpP4FAcW1ALUlXmYruBMVzjtSuptqN HNuG6d6DpsbfRZ1TaBC+qaKiEl4+CU0= -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:25 2025 by rpki-client