$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa File: 8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa (raw, json) Hash identifier: AyWS7UlALedodm9oNmH6hqcvlOZspbDcHo8aUBPc6hc= Subject key identifier: A9:F3:B0:5C:CA:8F:82:70:46:8B:30:5D:83:48:B2:ED:FA:2D:5D:7B Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849E2253FEDFA7BD18EEA286380 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 6195 IP address blocks: 138.8.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:3f:ed:fa:7b:d1:8e:ea:28:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=1b1742ee-4583-4ef3-8ceb-25b5fedbc552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f1:75:21:83:ea:d9:97:ce:4e:f9:79:2b:54: 27:cf:c6:57:71:cc:40:dd:f6:ea:28:98:73:a6:d2: 33:a5:db:85:bc:05:18:e4:d6:b9:03:3d:bf:5c:87: 21:be:94:93:6f:e4:59:61:ba:06:f8:8b:4a:03:6e: 26:df:7c:4b:d9:6d:5a:d1:60:8d:41:69:62:cd:db: 53:02:ce:73:72:87:28:fd:50:d6:48:f3:03:a1:aa: 7e:84:6c:16:cb:a1:64:f4:5b:f7:a0:55:8b:90:81: 3d:e8:8c:15:98:b6:8d:93:f7:ac:62:9c:95:a5:3d: b7:b3:05:04:a3:88:22:43:e4:f0:ec:fc:bd:06:cb: ed:2a:21:7b:45:64:77:c2:e3:ef:16:13:ad:73:cc: 2b:5e:c9:0f:28:73:0a:7f:e2:13:b4:65:2a:e1:f0: 1f:19:8f:52:a3:b7:a4:72:76:e4:93:c3:8d:d0:71: 99:44:ad:a8:25:15:54:e0:f5:71:88:28:70:93:21: 1b:b3:5e:37:10:69:fb:dc:e8:f6:dd:db:c3:fa:36: 87:63:56:86:18:7d:1f:f2:6b:96:06:6a:c1:61:fd: 84:e1:e5:53:e1:40:70:74:19:5b:d7:40:7d:15:9a: 2e:5d:39:71:62:53:64:32:6e:81:f9:2e:3d:52:17: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F3:B0:5C:CA:8F:82:70:46:8B:30:5D:83:48:B2:ED:FA:2D:5D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e0:fd:85:5a:39:44:ad:84:cc:23:9e:f0:fe:d4:92:4d:79: 6e:91:c6:fe:e5:99:93:28:92:e6:08:6b:93:73:34:72:26:29: a3:7d:c3:d7:27:a1:66:3a:dd:b2:b1:5c:41:d9:1b:d8:c3:80: 58:e3:12:b7:7b:35:02:44:fe:f8:5d:07:fd:cb:08:80:3b:f0: d0:33:10:3f:67:82:10:0c:95:8c:6c:d0:20:83:d4:6d:bd:57: 00:40:87:44:cf:09:f8:1b:01:88:74:69:40:7e:c6:18:49:2c: ba:3e:f6:41:c7:44:5f:a9:37:ff:26:14:e7:04:08:c2:f7:6e: 14:2f:c4:b7:29:fe:cc:d2:38:89:f7:43:66:a3:eb:98:ae:ac: a8:b2:d4:b9:f6:90:d0:b5:46:77:32:63:66:d1:3f:2b:90:2e: a9:0d:69:c5:9c:97:0d:fe:5d:44:51:e3:d6:af:6f:8d:9b:73: 62:e4:47:43:ce:0e:cc:af:61:2e:82:73:19:42:d6:eb:00:c0: be:6b:ad:dc:f0:d5:37:a6:2a:ac:d9:99:c3:8c:99:f3:ee:65: 79:a4:06:29:46:fe:a7:7a:7b:79:b2:c6:96:e0:46:93:95:4e: a6:52:6c:09:f8:2c:4d:53:03:fd:44:be:eb:31:96:cd:2f:0c: a2:aa:e8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJT/t+nvRjuooY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MWIxNzQyZWUtNDU4My00ZWYzLThjZWItMjViNWZlZGJjNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPF1IYPq2ZfOTvl5K1Qnz8ZXccxA3fbqKJhz ptIzpduFvAUY5Na5Az2/XIchvpSTb+RZYboG+ItKA24m33xL2W1a0WCNQWlizdtT As5zcoco/VDWSPMDoap+hGwWy6Fk9Fv3oFWLkIE96IwVmLaNk/esYpyVpT23swUE o4giQ+Tw7Py9BsvtKiF7RWR3wuPvFhOtc8wrXskPKHMKf+ITtGUq4fAfGY9So7ek cnbkk8ON0HGZRK2oJRVU4PVxiChwkyEbs143EGn73Oj23dvD+jaHY1aGGH0f8muW BmrBYf2E4eVT4UBwdBlb10B9FZouXTlxYlNkMm6B+S49UheuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnzsFzKj4JwRoswXYNIsu36LV17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOGU3YTcwN2YtYjFlZC0z MzMwLWIyMmUtYTU4MWRjZjEzYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzg/YVaOUSthMwjnvD+1JJNeW6Rxv7lmZMokuYIa5NzNHImKaN9w9cn oWY63bKxXEHZG9jDgFjjErd7NQJE/vhdB/3LCIA78NAzED9nghAMlYxs0CCD1G29 VwBAh0TPCfgbAYh0aUB+xhhJLLo+9kHHRF+pN/8mFOcECML3bhQvxLcp/szSOIn3 Q2aj65iurKiy1Ln2kNC1RncyY2bRPyuQLqkNacWclw3+XURR49avb42bc2LkR0PO DsyvYS6CcxlC1usAwL5rrdzw1TemKqzZmcOMmfPuZXmkBilG/qd6e3myxpbgRpOV TqZSbAn4LE1TA/1Evusxls0vDKKq6CU= -----END CERTIFICATE-----Generated at Mon Jun 30 01:04:38 2025 by rpki-client