$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa File: 311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json) Hash identifier: gmXmf3v/wqCHLJ+yK3IRI8/NYCkKIYQpWp2taS+mC5w= Subject key identifier: A0:CC:76:D3:65:46:88:16:51:F8:A0:A6:28:08:F3:1D:65:0E:FE:66 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849F5AFCFF9DB84FE06E165A000 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa Signing time: Sat 24 May 2025 13:01:04 +0000 ROA not before: Sat 24 May 2025 13:01:04 +0000 ROA not after: Fri 22 Aug 2025 13:01:04 +0000 asID: 33598 IP address blocks: 138.8.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:af:cf:f9:db:84:fe:06:e1:65:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 24 13:01:04 2025 GMT Not After : Aug 22 13:01:04 2025 GMT Subject: CN=d0e675df-024a-4426-a513-09144a01f7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:46:1a:bb:11:cb:15:67:b6:d6:f5:f1:72: 74:26:f7:8e:60:59:e9:cd:51:24:37:f9:99:ac:18: 44:09:37:ee:38:30:4d:ec:96:29:b3:87:42:f7:1b: 28:09:4e:1c:e0:45:58:e6:4e:7e:ce:6f:b4:83:7a: cf:19:87:57:4c:4d:e8:cc:9e:74:41:a0:cf:05:d4: 94:74:10:f3:44:9b:da:97:8a:c0:ce:4f:27:64:10: e9:ca:6c:ab:5c:7c:84:cb:3f:03:58:a8:9f:3f:cd: 00:a5:70:ce:c3:7e:8c:9e:24:e0:d5:d8:3f:0e:a1: f3:72:7c:0b:ac:85:56:4a:f0:cb:c3:68:0c:e1:67: 2a:b6:37:e9:a1:6c:b2:8e:46:32:2b:0c:bc:aa:a1: 98:4c:52:a7:45:3a:6e:4a:53:0c:e1:e0:bf:ac:9f: 4f:db:07:e7:e5:bd:3c:37:04:e3:97:13:a9:9f:5a: 2a:dd:70:d1:0f:2d:94:a0:cd:dd:44:29:c7:3f:88: bf:f0:83:36:1b:f9:1e:ac:3e:5a:2b:1e:dd:12:b2: b7:7e:c8:40:e5:07:55:27:ab:b0:6e:8b:63:e9:59: ce:1f:22:34:b3:b0:f4:e8:ce:59:4b:e1:c6:a6:f5: f8:15:fc:01:3c:c3:0d:40:07:c6:3b:fb:12:04:13: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:76:D3:65:46:88:16:51:F8:A0:A6:28:08:F3:1D:65:0E:FE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:33:3f:2b:23:2d:a1:55:77:20:de:bb:d2:99:55:12:36:c2: 60:51:ba:2b:f6:9d:b3:34:09:ad:4b:4f:76:dc:29:a8:59:d7: ee:e1:65:7c:36:a2:79:bc:ae:61:7e:48:81:9a:34:fc:cd:ad: fb:7e:3a:9e:d6:3a:88:a1:f0:d5:99:01:2b:1f:ac:0e:28:25: 64:34:25:f2:20:7c:61:e2:1b:30:53:97:cf:7e:eb:75:d1:07: 8e:08:59:96:3b:50:54:56:1f:70:be:49:47:eb:3d:ae:56:37: c8:2a:e6:02:48:fa:bc:28:21:af:a9:58:7d:1a:71:64:0c:30: 87:2f:02:57:80:d0:50:2f:c7:d6:ad:2b:90:28:1d:56:f3:e8: f3:50:66:f9:05:9d:ae:3c:27:ab:a8:56:dd:45:59:98:3c:32: 1e:cc:ac:62:6a:92:4a:0a:5c:3d:ad:9d:b3:c6:b8:76:f1:0b: 55:6d:3b:5a:09:c2:c8:57:1d:03:ac:ad:2e:f5:6b:90:6f:26: 6d:0f:99:fe:21:3b:a1:06:d2:0c:cd:ff:5e:8e:82:b5:e4:26: 8c:ae:b0:73:32:89:b1:5f:d6:15:7d:19:62:93:d2:78:2a:2b: e1:a5:35:49:01:c8:c2:aa:72:55:89:d7:ee:a1:ca:60:a7:52: be:39:9d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn1r8/524T+BuFloAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUyNDEzMDEwNFoXDTI1MDgyMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDBlNjc1ZGYtMDI0YS00NDI2LWE1MTMtMDkxNDRhMDFmN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUFGGrsRyxVnttb18XJ0JveOYFnpzVEkN/mZ rBhECTfuODBN7JYps4dC9xsoCU4c4EVY5k5+zm+0g3rPGYdXTE3ozJ50QaDPBdSU dBDzRJval4rAzk8nZBDpymyrXHyEyz8DWKifP80ApXDOw36MniTg1dg/DqHzcnwL rIVWSvDLw2gM4WcqtjfpoWyyjkYyKwy8qqGYTFKnRTpuSlMM4eC/rJ9P2wfn5b08 NwTjlxOpn1oq3XDRDy2UoM3dRCnHP4i/8IM2G/kerD5aKx7dErK3fshA5QdVJ6uw botj6VnOHyI0s7D06M5ZS+HGpvX4FfwBPMMNQAfGO/sSBBNdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDMdtNlRogWUfigpigI8x1lDv5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzExYTg4ZGUtMmNkZC0z NjRiLTg2ZGUtOTkxYTgxYTk1NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4zPysjLaFVdyDeu9KZVRI2wmBRuiv2nbM0Ca1LT3bcKahZ1+7hZXw2 onm8rmF+SIGaNPzNrft+Op7WOoih8NWZASsfrA4oJWQ0JfIgfGHiGzBTl89+63XR B44IWZY7UFRWH3C+SUfrPa5WN8gq5gJI+rwoIa+pWH0acWQMMIcvAleA0FAvx9at K5AoHVbz6PNQZvkFna48J6uoVt1FWZg8Mh7MrGJqkkoKXD2tnbPGuHbxC1VtO1oJ wshXHQOsrS71a5BvJm0Pmf4hO6EG0gzN/16OgrXkJoyusHMyibFf1hV9GWKT0ngq K+GlNUkByMKqclWJ1+6hymCnUr45nVg= -----END CERTIFICATE-----Generated at Mon Jun 30 01:32:19 2025 by rpki-client