$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa File: 674b559a-b866-3bcd-84f6-457b70f279d7.roa (raw, json) Hash identifier: hYKeOa2eciLkF0a7CIBbndQDv4UBVCVOrCZlZpS9k8E= Subject key identifier: 07:6A:45:C7:30:5D:91:64:D6:3A:48:E2:B1:3B:E8:85:ED:F0:73:FE Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849E225400DEF5CFA6D599AD6A0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 33598 IP address blocks: 138.8.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:40:0d:ef:5c:fa:6d:59:9a:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=6abcec7c-c498-408a-9774-b8cd545d9c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:f0:35:b0:8a:3d:6f:71:9a:5c:e5:92:4d: 21:e3:b8:31:b5:8e:14:e2:36:fb:0a:eb:0c:be:c9: ca:b6:1b:9e:32:8c:bd:1b:d7:81:34:8d:81:e6:9a: 46:0a:30:de:04:fb:3a:ca:a0:53:43:be:8c:1e:ab: 9f:4b:9b:54:ff:e9:32:0f:d6:a7:d2:4d:4b:a4:10: ea:75:88:ba:54:41:17:e6:df:80:37:04:a5:21:ee: 9b:a9:bd:54:06:6c:43:f7:c7:18:6d:f0:81:92:d6: 69:7b:95:71:d5:8a:42:39:eb:28:e0:25:5b:bf:55: 53:8b:70:fe:12:9b:fd:05:4b:a1:69:9b:33:7b:6f: f2:9e:75:8f:27:01:4c:44:e4:7b:96:4e:e4:9c:97: 07:95:26:3c:43:86:a3:ee:f4:dc:74:3b:a7:8a:08: 0d:ef:82:5b:df:91:d5:f4:b1:61:13:18:64:79:79: e1:4c:b3:a9:04:d9:65:e4:2f:ab:f0:54:f4:44:f9: 93:6d:d5:82:47:50:c9:09:28:b6:b2:21:51:01:35: e2:ba:02:16:a5:d7:33:46:4f:0d:2f:8b:6b:7a:67: 01:13:9b:ac:d0:f1:9b:00:af:d1:f7:2f:ec:6f:e6: cb:a9:e0:22:7b:64:a2:0d:9c:75:4b:8c:08:36:63: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6A:45:C7:30:5D:91:64:D6:3A:48:E2:B1:3B:E8:85:ED:F0:73:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:18:a2:78:be:83:39:96:a5:c4:ed:5d:b6:53:e7:d1:1f:c2: 8d:10:b8:69:78:a3:b7:25:6a:19:35:4b:41:7f:c6:50:2d:fd: da:1c:4f:d2:94:23:24:62:d3:d2:0b:7a:28:d2:be:eb:20:30: e9:2a:61:c9:bb:cb:3e:e1:bb:6f:d9:27:ab:76:c1:8e:f5:f1: d7:4f:a2:b3:6d:bf:6b:ba:1d:fe:8a:d0:fa:2d:ce:12:dc:26: 5f:5e:38:16:1b:7b:f9:32:8d:ea:55:ea:5d:b0:f8:2c:b9:be: 68:1a:6b:40:57:c5:85:a3:5f:7c:20:01:45:b5:2a:a1:88:6f: 3a:28:c5:30:0f:09:e6:f8:69:33:19:e3:9c:37:03:d7:22:b1: 99:f8:4e:bb:33:a3:4a:f2:21:30:e3:f9:45:20:7d:a0:b4:95: a9:f0:12:90:af:55:fb:a0:fb:05:7d:bd:bb:c1:97:8d:8a:93: 91:9c:34:19:e2:77:f0:2c:8f:88:aa:6a:6d:e7:71:7a:e9:64: 06:3c:9f:ed:df:85:c6:40:ff:09:20:07:b5:d8:09:47:c4:d8: c7:17:3d:39:3b:a8:bf:86:ff:62:b2:b5:51:08:5f:74:41:05: 80:65:25:a5:e2:83:ef:78:a9:07:a2:76:f7:d8:1a:99:8a:a4: 0e:e7:f0:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUAN71z6bVma1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NmFiY2VjN2MtYzQ5OC00MDhhLTk3NzQtYjhjZDU0NWQ5YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzfwNbCKPW9xmlzlkk0h47gxtY4U4jb7CusM vsnKthueMoy9G9eBNI2B5ppGCjDeBPs6yqBTQ76MHqufS5tU/+kyD9an0k1LpBDq dYi6VEEX5t+ANwSlIe6bqb1UBmxD98cYbfCBktZpe5Vx1YpCOeso4CVbv1VTi3D+ Epv9BUuhaZsze2/ynnWPJwFMROR7lk7knJcHlSY8Q4aj7vTcdDuniggN74Jb35HV 9LFhExhkeXnhTLOpBNll5C+r8FT0RPmTbdWCR1DJCSi2siFRATXiugIWpdczRk8N L4tremcBE5us0PGbAK/R9y/sb+bLqeAie2SiDZx1S4wINmMwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdqRccwXZFk1jpI4rE76IXt8HP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNjc0YjU1OWEtYjg2Ni0z YmNkLTg0ZjYtNDU3YjcwZjI3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoYoni+gzmWpcTtXbZT59Efwo0QuGl4o7clahk1S0F/xlAt/docT9KU IyRi09ILeijSvusgMOkqYcm7yz7hu2/ZJ6t2wY718ddPorNtv2u6Hf6K0PotzhLc Jl9eOBYbe/kyjepV6l2w+Cy5vmgaa0BXxYWjX3wgAUW1KqGIbzooxTAPCeb4aTMZ 45w3A9cisZn4Trszo0ryITDj+UUgfaC0lanwEpCvVfug+wV9vbvBl42Kk5GcNBni d/Asj4iqam3ncXrpZAY8n+3fhcZA/wkgB7XYCUfE2McXPTk7qL+G/2KytVEIX3RB BYBlJaXig+94qQeidvfYGpmKpA7n8N0= -----END CERTIFICATE-----Generated at Mon Jun 30 01:16:48 2025 by rpki-client