$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json) Hash identifier: 8KTPy0gMgC7ukbvxx/93D8cAHOm68znjFKI5gToaOcU= Subject key identifier: 0D:EB:F8:A5:C9:DD:9F:04:34:88:BD:18:42:3E:7B:74:39:B6:93:24 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B8EACE874049B2A11A4383657 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 18593 IP address blocks: 138.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e8:74:04:9b:2a:11:a4:38:36:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=809ba15d-5d76-476c-933e-7a721308e687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:07:10:fa:52:f3:7a:12:ed:74:c9:5e:e8: 34:13:f5:c7:8c:f8:1f:ee:92:cf:60:e3:b0:f4:ca: 77:42:4d:5e:d6:cd:d7:ca:b4:f2:f3:97:f0:2c:7b: 56:d9:e3:f1:24:8e:46:2b:c9:3b:ed:21:67:62:d4: 51:9f:b6:e7:38:51:7e:35:c8:6d:bc:15:f4:2a:1e: 62:00:3c:80:b8:c1:09:96:ce:8c:89:e5:e8:68:18: ff:b4:88:b8:b8:7b:15:66:40:5c:22:93:a4:0a:4a: b1:c5:09:1a:f2:b4:b2:59:d8:10:a9:2c:db:27:8e: 1d:17:c2:f7:07:04:1c:2f:91:23:68:e0:41:f8:ca: 04:2b:e3:3d:f4:f6:b6:43:b7:50:e1:a8:8a:a4:64: b6:4a:24:87:d1:8d:ab:f1:de:41:e7:89:23:2b:09: aa:88:bb:65:3c:03:63:c0:88:02:74:43:89:36:81: 72:61:77:a0:9d:83:85:b7:f2:5d:ac:48:d5:22:54: 89:3c:c8:38:0c:72:79:83:b2:86:6c:70:31:de:6f: aa:af:ab:65:55:20:b8:51:85:e8:10:f1:ae:0b:10: cb:96:f7:08:45:03:f2:09:2f:36:c0:21:7d:10:b1: 02:18:47:22:a8:2a:e5:cb:2c:22:f1:3f:1b:1c:8e: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EB:F8:A5:C9:DD:9F:04:34:88:BD:18:42:3E:7B:74:39:B6:93:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:93:0f:95:7c:45:82:6b:ef:9f:68:4c:35:bd:be:86:45:b7: f9:3b:f8:50:b2:6c:71:0a:74:26:18:b0:a7:f3:d1:ef:c7:46: 3b:48:db:b3:94:c5:7a:0f:6f:ee:81:61:30:97:78:6f:16:34: bc:0c:7e:20:a2:ff:fb:cd:14:aa:0b:95:71:1a:b2:93:d6:f8: 46:29:7c:f1:f0:11:65:ea:6d:3d:da:c5:f5:1c:9b:ed:95:2d: 17:bd:18:8a:b1:4e:ff:5f:77:67:c9:cd:b4:35:23:fe:da:c3: 4b:1d:7c:b9:11:4d:d1:3e:11:f3:c5:44:d6:6e:ea:b4:99:e2: 52:61:dd:bb:85:64:0d:f1:a8:8e:b7:26:62:fb:42:7a:1f:e0: bc:25:cf:5a:69:32:d2:cc:46:ec:bd:1f:e8:9a:c8:e2:94:df: d3:a2:15:03:16:7b:4b:b1:cb:9e:8c:52:c8:2e:7d:bb:62:41: f1:ea:21:3e:61:4f:cc:1d:56:15:ed:3b:cb:85:e1:08:c4:6c: d0:82:fb:12:8a:5d:fc:82:40:f2:29:71:f6:b2:82:30:f9:5d: de:71:01:96:61:d1:93:b3:4e:8c:17:3c:07:28:83:2f:62:71: 8b:86:b0:57:04:a5:f0:23:80:39:35:01:88:1a:57:2b:ff:78: 98:69:24:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOh0BJsqEaQ4NlcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODA5YmExNWQtNWQ3Ni00NzZjLTkzM2UtN2E3MjEzMDhlNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjoHEPpS83oS7XTJXug0E/XHjPgf7pLPYOOw 9Mp3Qk1e1s3XyrTy85fwLHtW2ePxJI5GK8k77SFnYtRRn7bnOFF+NchtvBX0Kh5i ADyAuMEJls6MieXoaBj/tIi4uHsVZkBcIpOkCkqxxQka8rSyWdgQqSzbJ44dF8L3 BwQcL5EjaOBB+MoEK+M99Pa2Q7dQ4aiKpGS2SiSH0Y2r8d5B54kjKwmqiLtlPANj wIgCdEOJNoFyYXegnYOFt/JdrEjVIlSJPMg4DHJ5g7KGbHAx3m+qr6tlVSC4UYXo EPGuCxDLlvcIRQPyCS82wCF9ELECGEciqCrlyywi8T8bHI4AeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3r+KXJ3Z8ENIi9GEI+e3Q5tpMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDE0Nzc4N2EtODBjMi0z YjhhLTljYTUtNDk5ODRjOTY3MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqTD5V8RYJr759oTDW9voZFt/k7+FCybHEKdCYYsKfz0e/HRjtI27OU xXoPb+6BYTCXeG8WNLwMfiCi//vNFKoLlXEaspPW+EYpfPHwEWXqbT3axfUcm+2V LRe9GIqxTv9fd2fJzbQ1I/7aw0sdfLkRTdE+EfPFRNZu6rSZ4lJh3buFZA3xqI63 JmL7Qnof4Lwlz1ppMtLMRuy9H+iayOKU39OiFQMWe0uxy56MUsgufbtiQfHqIT5h T8wdVhXtO8uF4QjEbNCC+xKKXfyCQPIpcfaygjD5Xd5xAZZh0ZOzTowXPAcogy9i cYuGsFcEpfAjgDk1AYgaVyv/eJhpJJc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:12 2025 by rpki-client