$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa File: 30b3dfbf-986d-3282-be34-b6747cec19c5.roa (raw, json) Hash identifier: thne6KmjOcbSazngtL6Cb2IJr92IspgF0gmhm9oZ8N0= Subject key identifier: 76:DC:65:BB:18:41:18:68:9D:78:89:22:A3:4A:5D:E3:65:C2:C3:1D Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B8EACE82BF6C171AA4E774680 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 18593 IP address blocks: 138.8.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e8:2b:f6:c1:71:aa:4e:77:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=85d40cba-acdd-408d-8ef6-c94e3e7f6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:d3:dc:8b:a8:2d:21:21:d7:96:26:00:bb: c5:a2:6c:5c:d2:7d:78:6d:fa:de:bb:6c:cb:35:17: 9f:34:3f:af:bd:32:91:cf:17:a3:f9:e1:45:9c:b1: d4:b8:b9:c9:fe:3f:79:59:a4:62:98:1b:fd:c4:af: 77:f0:72:9f:9b:65:28:1d:78:3b:c5:4f:5d:a8:08: c5:d6:f6:3a:a1:e1:9e:23:97:11:f9:10:89:03:e5: 3d:dd:6c:85:0c:50:31:37:bb:1b:14:65:84:8c:e5: 5a:79:f3:24:05:ab:3f:76:af:aa:5e:aa:45:71:1b: e3:ca:11:4b:23:ac:4a:0e:8d:57:fe:81:6a:77:01: a9:b5:96:e5:de:6e:41:11:f9:be:40:e3:5e:27:3f: 41:62:21:0f:d5:9f:b6:d0:6f:7b:c4:61:9d:0e:98: e3:13:ef:7f:ec:64:0c:fd:48:e5:c1:65:e5:7a:7f: 72:56:6b:f6:fd:be:53:e6:b6:89:ef:75:85:eb:aa: 71:51:98:dd:5f:1a:3d:02:56:f0:07:78:e9:05:32: 53:8a:c2:e2:80:41:55:bb:8a:b1:bf:20:03:fd:75: d1:af:f7:ac:94:5d:02:22:a5:26:7c:af:8d:97:95: 9b:ef:ef:ed:1b:21:5f:92:53:2b:84:49:9d:bd:5c: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DC:65:BB:18:41:18:68:9D:78:89:22:A3:4A:5D:E3:65:C2:C3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2e:a6:15:e0:31:14:08:3e:b1:47:32:8a:7b:db:11:c3:6c: 98:54:18:82:a5:36:c4:cd:79:99:95:2c:28:6f:f0:27:04:62: 75:52:4e:f5:4f:1d:82:83:d3:cb:ab:d1:0c:30:da:e8:ef:51: f1:5b:35:1b:59:34:4e:48:40:60:e6:b4:8c:03:0b:40:bf:69: 46:ef:0d:dc:63:5b:2a:c3:44:86:77:ad:89:9c:15:e1:70:ea: 0e:75:06:9b:8d:70:43:50:26:94:e2:44:d9:ae:cc:29:64:a0: b8:92:f4:4c:ee:02:b6:ed:fa:06:9c:d1:54:92:18:07:5b:dc: 13:69:c7:1a:1f:05:86:91:55:cd:7a:c6:3a:e0:e4:47:42:22: c9:a4:f7:0d:e6:3f:d6:65:c6:26:28:b6:a9:cd:cd:f5:78:99: 11:21:3a:7e:8e:1b:c9:12:4b:6b:13:a0:f3:ca:35:63:3e:5c: 46:3b:1d:5b:0a:86:88:bc:f4:b0:36:b2:d8:55:2f:de:71:05: b0:c7:c5:9e:bc:a1:ea:bc:f2:e0:6e:f5:45:d7:35:da:bd:d9: 8d:de:78:50:cb:42:60:56:86:aa:bb:15:71:cc:2f:1f:25:95: 61:62:dc:19:e4:d4:69:8c:92:0c:23:91:3d:4a:ef:27:03:7b: cb:2a:bd:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOgr9sFxqk53RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODVkNDBjYmEtYWNkZC00MDhkLThlZjYtYzk0ZTNlN2Y2ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWzT3IuoLSEh15YmALvFomxc0n14bfreu2zL NRefND+vvTKRzxej+eFFnLHUuLnJ/j95WaRimBv9xK938HKfm2UoHXg7xU9dqAjF 1vY6oeGeI5cR+RCJA+U93WyFDFAxN7sbFGWEjOVaefMkBas/dq+qXqpFcRvjyhFL I6xKDo1X/oFqdwGptZbl3m5BEfm+QONeJz9BYiEP1Z+20G97xGGdDpjjE+9/7GQM /UjlwWXlen9yVmv2/b5T5raJ73WF66pxUZjdXxo9AlbwB3jpBTJTisLigEFVu4qx vyAD/XXRr/eslF0CIqUmfK+Nl5Wb7+/tGyFfklMrhEmdvVz0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbcZbsYQRhonXiJIqNKXeNlwsMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzBiM2RmYmYtOTg2ZC0z MjgyLWJlMzQtYjY3NDdjZWMxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8uphXgMRQIPrFHMop72xHDbJhUGIKlNsTNeZmVLChv8CcEYnVSTvVP HYKD08ur0Qww2ujvUfFbNRtZNE5IQGDmtIwDC0C/aUbvDdxjWyrDRIZ3rYmcFeFw 6g51BpuNcENQJpTiRNmuzClkoLiS9EzuArbt+gac0VSSGAdb3BNpxxofBYaRVc16 xjrg5EdCIsmk9w3mP9ZlxiYotqnNzfV4mREhOn6OG8kSS2sToPPKNWM+XEY7HVsK hoi89LA2sthVL95xBbDHxZ68oeq88uBu9UXXNdq92Y3eeFDLQmBWhqq7FXHMLx8l lWFi3Bnk1GmMkgwjkT1K7ycDe8sqvVo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:27:40 2025 by rpki-client