$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa File: 3df8bceb-a2e2-3194-b950-40db68d2b35f.roa (raw, json) Hash identifier: KPkzQYxMw1Fpuum0vyW7o0YEGlosubnD1dTv+mwPUkM= Subject key identifier: DF:C9:9E:70:27:76:2D:36:85:F1:0F:45:C9:B3:7C:EC:D1:5C:BC:C4 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584A51D076C5955132D0D27D7600 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 33598 IP address blocks: 138.8.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:76:c5:95:51:32:d0:d2:7d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=59972603-a87b-47c1-b32c-1411e6e76df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:ee:ac:99:c7:37:dc:69:b8:5c:d6:09:c6: 64:c1:3f:87:e9:28:98:57:c7:c6:dd:85:03:cb:82: da:51:1a:62:ce:88:19:2a:94:28:40:97:95:6b:e9: 44:2c:62:a0:33:3e:b2:bb:5e:0b:86:dd:08:2b:da: 8a:35:25:d7:84:7f:c7:f1:9c:c4:1c:e1:3c:08:64: 39:5d:0b:2c:fb:33:24:91:e6:33:ec:7c:b0:87:dd: 83:e2:a1:fc:17:3c:e2:c8:ab:64:c3:57:fc:04:d9: 8c:b5:f8:55:3d:00:86:25:c5:84:45:ea:8b:03:85: 2f:21:13:f3:9f:2f:4a:81:bb:e8:bb:ba:24:95:3b: f8:d2:b5:96:4c:ee:de:72:3f:e0:6a:6e:42:68:b0: 39:00:a3:a9:8f:38:46:16:43:44:38:65:d6:7e:63: 01:64:58:4e:c1:94:d2:e9:a3:4f:08:85:a0:4a:4e: 14:88:ae:d1:f8:3a:45:de:6d:a2:d0:06:d2:1a:a2: 5a:90:40:ca:57:78:a1:80:44:81:dd:93:fd:eb:e7: 0e:79:bc:9e:54:47:ac:ca:35:27:79:92:dc:e1:53: c2:bf:5b:8e:25:35:4f:75:ae:b1:d8:fe:1a:0d:7c: 2c:cc:95:38:73:1a:23:26:79:50:8e:a9:37:11:b9: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C9:9E:70:27:76:2D:36:85:F1:0F:45:C9:B3:7C:EC:D1:5C:BC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fb:39:f5:68:db:c9:91:23:5d:ec:3e:99:c8:0a:b0:5e:86: 08:cc:15:b5:26:db:45:a2:00:f4:95:c7:d9:7a:18:f7:38:87: ff:95:bb:3b:7e:88:d8:6e:85:a7:c9:74:5e:9d:38:a0:8e:90: 0f:66:6d:f1:9e:c5:d4:42:93:22:80:85:1a:85:96:b4:c8:13: d9:3a:0c:97:a5:a6:c2:a7:7c:77:3a:e5:3a:c4:2a:e2:d0:b4: a9:45:f3:0d:67:e0:6b:b0:e4:b2:89:77:16:cb:db:bc:ef:be: a3:64:47:9d:2f:60:64:7d:8a:48:a1:5b:b1:ae:d9:e3:00:71: 28:38:d7:24:6b:71:16:84:dc:9d:7f:8d:d0:d6:82:b4:ee:fc: 88:6e:44:73:38:e7:36:29:c8:d7:0e:54:f5:32:67:f4:75:4b: a2:d5:91:55:c7:91:07:38:3c:0e:81:44:9c:9d:27:4d:e9:5c: 48:0b:18:2d:56:36:f6:93:ba:f9:2a:27:78:61:35:12:7b:15: e2:08:8f:02:72:1d:81:21:f5:31:e7:00:e3:0e:ba:fb:a1:93: 61:84:18:2c:60:e6:70:b2:9c:73:7b:5c:3d:df:18:ff:fa:1b: e0:0e:7f:c5:89:30:cb:51:08:1d:48:48:32:0d:41:d7:12:3a: ef:c7:90:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HbFlVEy0NJ9dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTk5NzI2MDMtYTg3Yi00N2MxLWIzMmMtMTQxMWU2ZTc2ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk77urJnHN9xpuFzWCcZkwT+H6SiYV8fG3YUD y4LaURpizogZKpQoQJeVa+lELGKgMz6yu14Lht0IK9qKNSXXhH/H8ZzEHOE8CGQ5 XQss+zMkkeYz7Hywh92D4qH8FzziyKtkw1f8BNmMtfhVPQCGJcWEReqLA4UvIRPz ny9Kgbvou7oklTv40rWWTO7ecj/gam5CaLA5AKOpjzhGFkNEOGXWfmMBZFhOwZTS 6aNPCIWgSk4UiK7R+DpF3m2i0AbSGqJakEDKV3ihgESB3ZP96+cOebyeVEesyjUn eZLc4VPCv1uOJTVPda6x2P4aDXwszJU4cxojJnlQjqk3EbkyZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/JnnAndi02hfEPRcmzfOzRXLzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvM2RmOGJjZWItYTJlMi0z MTk0LWI5NTAtNDBkYjY4ZDJiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr7OfVo28mRI13sPpnICrBehgjMFbUm20WiAPSVx9l6GPc4h/+Vuzt+ iNhuhafJdF6dOKCOkA9mbfGexdRCkyKAhRqFlrTIE9k6DJelpsKnfHc65TrEKuLQ tKlF8w1n4Guw5LKJdxbL27zvvqNkR50vYGR9ikihW7Gu2eMAcSg41yRrcRaE3J1/ jdDWgrTu/IhuRHM45zYpyNcOVPUyZ/R1S6LVkVXHkQc4PA6BRJydJ03pXEgLGC1W NvaTuvkqJ3hhNRJ7FeIIjwJyHYEh9THnAOMOuvuhk2GEGCxg5nCynHN7XD3fGP/6 G+AOf8WJMMtRCB1ISDINQdcSOu/HkFU= -----END CERTIFICATE-----Generated at Mon Jun 30 00:50:54 2025 by rpki-client