$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa File: 81157f40-1330-3f4f-8709-0472d5c62aa1.roa (raw, json) Hash identifier: BR1wZYgz7+Am2ckV9B8lV3jId6Xqh0js8K6/6GjTv6w= Subject key identifier: 13:4C:53:A5:43:43:FF:E2:24:68:95:66:5C:1D:EB:19:02:32:A1:88 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849CE9A627DE160EFD9FA04B330 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 18593 IP address blocks: 138.8.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:62:7d:e1:60:ef:d9:fa:04:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=7ce5aaba-9a3c-4c23-857c-578eb237e587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:e7:a1:bd:6c:d9:5d:53:1b:7a:09:51:32: 5a:97:0c:94:7f:51:c1:b6:d6:e7:16:b6:16:cf:10: bc:ff:81:30:5a:1e:aa:59:47:e9:da:13:48:c1:37: 9c:5d:aa:e3:0c:e3:07:f0:82:52:45:aa:9a:32:b0: dc:2a:a6:f8:f2:59:53:32:69:69:98:6b:3e:b3:f7: 95:f1:44:f5:a6:56:92:2d:32:d7:63:e4:51:ad:67: 7c:1b:bd:85:cd:95:cc:41:fa:48:23:9d:3a:92:9b: 6f:3d:c9:41:b4:aa:70:45:58:2b:20:6e:5e:2d:5a: 6f:70:cd:08:74:0d:cf:4e:49:dc:67:3c:27:86:75: ce:29:35:d6:eb:9f:44:58:60:ea:3f:15:34:94:ab: b2:f1:23:e9:1c:4a:c6:32:7f:17:7c:b2:13:7f:0a: 66:54:ee:22:4d:7b:9e:33:1f:b7:5c:7b:8b:62:26: 94:a6:ed:3e:45:08:f3:b4:c5:d7:49:97:10:93:22: d3:dc:b0:13:a8:e8:29:e5:03:64:f2:f9:79:3d:18: 9d:78:1e:e6:aa:07:b6:2d:c1:56:4d:4c:3d:82:68: 6b:a0:70:38:b6:fa:4c:c7:d0:ec:f2:9b:a6:8e:28: 4f:27:54:08:b5:e6:92:58:c0:7b:e4:3e:56:18:3e: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4C:53:A5:43:43:FF:E2:24:68:95:66:5C:1D:EB:19:02:32:A1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8b:df:02:e5:bb:c9:47:df:a2:48:2c:ac:a4:93:27:93:e3: 80:32:d1:74:be:52:77:71:ba:ba:9d:0a:66:90:33:2f:71:5c: e0:c5:5b:8b:2c:7b:9d:76:3b:30:4e:9b:4c:a3:85:94:00:47: 85:10:a3:c3:11:33:e0:47:b1:84:24:76:ed:ef:97:85:ac:77: 90:93:99:40:0e:96:d8:e4:88:1d:c1:14:4c:04:87:3f:73:70: d0:04:be:5a:4b:0f:25:0e:92:59:c8:77:ba:0b:6f:b4:3d:5f: 2a:10:e5:51:00:52:22:9d:a5:bc:74:23:5d:a7:3d:aa:9c:4d: 1b:4b:94:fd:61:71:5a:a9:82:b5:bb:15:aa:14:55:c8:c1:d5: a6:69:ea:8b:08:41:72:86:98:ad:23:c2:a1:62:60:4d:cf:3c: 0a:97:12:57:86:13:84:90:18:17:82:52:c4:21:a4:89:d1:1f: 81:13:5b:92:27:60:f3:14:34:4f:1c:a3:68:17:cc:29:78:21: 3d:94:89:94:82:49:85:13:ce:e4:aa:da:06:a4:61:af:d7:fc: af:ad:1f:d9:79:f6:1a:a6:f6:7b:83:cc:03:ae:ce:9a:2c:d8: ac:32:bb:30:df:9b:bb:0b:f0:f3:c4:6d:79:c2:92:f8:a5:ae: 66:a1:ec:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmJ94WDv2foEszAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk N2NlNWFhYmEtOWEzYy00YzIzLTg1N2MtNTc4ZWIyMzdlNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsXnob1s2V1TG3oJUTJalwyUf1HBttbnFrYW zxC8/4EwWh6qWUfp2hNIwTecXarjDOMH8IJSRaqaMrDcKqb48llTMmlpmGs+s/eV 8UT1plaSLTLXY+RRrWd8G72FzZXMQfpII506kptvPclBtKpwRVgrIG5eLVpvcM0I dA3PTkncZzwnhnXOKTXW659EWGDqPxU0lKuy8SPpHErGMn8XfLITfwpmVO4iTXue Mx+3XHuLYiaUpu0+RQjztMXXSZcQkyLT3LATqOgp5QNk8vl5PRideB7mqge2LcFW TUw9gmhroHA4tvpMx9Ds8pumjihPJ1QIteaSWMB75D5WGD4ENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNMU6VDQ//iJGiVZlwd6xkCMqGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvODExNTdmNDAtMTMzMC0z ZjRmLTg3MDktMDQ3MmQ1YzYyYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+L3wLlu8lH36JILKykkyeT44Ay0XS+UndxurqdCmaQMy9xXODFW4ss e512OzBOm0yjhZQAR4UQo8MRM+BHsYQkdu3vl4Wsd5CTmUAOltjkiB3BFEwEhz9z cNAEvlpLDyUOklnId7oLb7Q9XyoQ5VEAUiKdpbx0I12nPaqcTRtLlP1hcVqpgrW7 FaoUVcjB1aZp6osIQXKGmK0jwqFiYE3PPAqXEleGE4SQGBeCUsQhpInRH4ETW5In YPMUNE8co2gXzCl4IT2UiZSCSYUTzuSq2gakYa/X/K+tH9l59hqm9nuDzAOuzpos 2KwyuzDfm7sL8PPEbXnCkvilrmah7JQ= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:33 2025 by rpki-client