$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa File: 674b559a-b866-3bcd-84f6-457b70f279d7.roa (raw, json) Hash identifier: 6nb0MCy9AGr9HJ0+hs4In3AVHwFnouvM469yu5VjrA0= Subject key identifier: E3:20:D2:68:65:88:80:BE:5B:11:90:E9:7F:96:A8:F8:72:AD:2C:BF Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AC2E10EA70C0F911CB2CD5100 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 33598 IP address blocks: 138.8.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0e:a7:0c:0f:91:1c:b2:cd:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=9d053b5d-1135-4203-bf56-7e7324c13227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:da:1d:98:d1:41:d5:00:80:8e:39:bb:54: 4e:f8:9b:76:84:22:c7:98:f1:7c:c2:ec:da:32:ea: c6:9d:11:0a:01:dc:50:ac:80:a3:8c:80:1f:7b:81: a0:fa:fb:04:b9:60:26:73:c6:2f:66:a1:50:d3:65: 06:34:25:ba:c5:19:00:b4:85:db:71:ca:ba:fb:08: 09:d8:a8:8c:82:3d:9f:51:f7:38:64:85:43:53:57: 98:46:9a:83:d9:dc:7d:64:1b:4b:15:41:4e:29:91: 62:43:7f:f3:83:fb:dc:bd:53:b9:88:e7:74:80:38: d3:e6:9f:62:73:38:be:b9:ec:99:ad:07:e9:bc:46: 1a:3e:09:48:ae:f0:49:92:bf:37:f9:ee:77:a7:47: c2:b0:2a:c8:8f:70:7a:08:e5:16:63:de:e1:b3:0a: e2:52:b6:a0:7e:34:81:fa:98:2f:24:67:0e:ae:13: 16:b4:d3:ef:d6:63:99:80:54:3b:f9:ea:b0:40:f7: 9a:8c:ff:6e:0b:38:68:5c:8a:9d:bf:23:36:20:79: b6:b4:e5:86:e5:b8:ea:fe:9b:55:e2:c6:74:30:6d: c8:f3:74:a5:98:ef:1e:e0:23:8b:b1:42:10:91:43: e6:8e:ef:83:a7:2c:a2:f7:81:6c:2e:8a:3f:6c:a7: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:D2:68:65:88:80:BE:5B:11:90:E9:7F:96:A8:F8:72:AD:2C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:39:aa:07:cd:de:66:cb:b7:88:fd:85:ee:b0:b5:96:d2:74: 1d:a9:9a:f4:f1:3a:e5:c7:52:29:e5:42:e4:87:9b:ee:d1:cd: 15:12:f4:32:33:71:f5:f4:bf:1d:d0:65:e2:93:c6:5a:a4:14: 8b:ce:be:99:b1:20:c6:37:d1:0d:31:07:b1:4d:86:18:4c:89: 51:52:f1:88:ee:7e:cd:56:ba:a1:21:88:8f:71:e9:d7:cc:f8: 64:48:68:a3:2c:30:43:d8:59:bc:c9:bc:3b:dd:54:46:3a:72: 67:0e:fb:8b:ba:7c:f8:3f:0b:e5:ee:4c:df:c1:c0:15:0c:b9: 1e:3f:37:44:4d:40:bf:6c:4d:87:f4:95:eb:b6:2f:01:e7:28: ee:9c:d9:ab:12:84:b4:f6:84:01:7a:6a:d4:60:55:f3:e5:c6: df:bf:60:18:22:b3:61:41:be:0c:65:6e:14:42:0a:c9:a5:de: 7d:af:94:54:a6:34:42:8f:e2:a9:8e:f9:7b:60:96:95:08:e4: 81:ea:60:3d:0b:01:9b:61:bf:a3:bd:f7:9f:b1:ce:ab:74:70: 2b:bd:c9:12:af:a2:7b:3d:4e:c4:1f:76:1c:41:72:50:05:dc: 9b:7d:66:e4:fa:50:2d:99:e1:10:e4:1c:1a:80:11:e2:dc:a2: 12:23:bf:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q6nDA+RHLLNUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OWQwNTNiNWQtMTEzNS00MjAzLWJmNTYtN2U3MzI0YzEzMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLPaHZjRQdUAgI45u1RO+Jt2hCLHmPF8wuza MurGnREKAdxQrICjjIAfe4Gg+vsEuWAmc8YvZqFQ02UGNCW6xRkAtIXbccq6+wgJ 2KiMgj2fUfc4ZIVDU1eYRpqD2dx9ZBtLFUFOKZFiQ3/zg/vcvVO5iOd0gDjT5p9i czi+ueyZrQfpvEYaPglIrvBJkr83+e53p0fCsCrIj3B6COUWY97hswriUragfjSB +pgvJGcOrhMWtNPv1mOZgFQ7+eqwQPeajP9uCzhoXIqdvyM2IHm2tOWG5bjq/ptV 4sZ0MG3I83SlmO8e4COLsUIQkUPmju+Dpyyi94FsLoo/bKfYHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMg0mhliIC+WxGQ6X+WqPhyrSy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNjc0YjU1OWEtYjg2Ni0z YmNkLTg0ZjYtNDU3YjcwZjI3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE45qgfN3mbLt4j9he6wtZbSdB2pmvTxOuXHUinlQuSHm+7RzRUS9DIz cfX0vx3QZeKTxlqkFIvOvpmxIMY30Q0xB7FNhhhMiVFS8Yjufs1WuqEhiI9x6dfM +GRIaKMsMEPYWbzJvDvdVEY6cmcO+4u6fPg/C+XuTN/BwBUMuR4/N0RNQL9sTYf0 leu2LwHnKO6c2asShLT2hAF6atRgVfPlxt+/YBgis2FBvgxlbhRCCsml3n2vlFSm NEKP4qmO+XtglpUI5IHqYD0LAZthv6O995+xzqt0cCu9yRKvons9TsQfdhxBclAF 3Jt9ZuT6UC2Z4RDkHBqAEeLcohIjvx8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:32:01 2025 by rpki-client