$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa File: 9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa (raw, json) Hash identifier: A+JErnH+dFbC3Y15FbCfMh4ZtAgoXy7p2rmbkzOf38c= Subject key identifier: 27:76:25:3F:BA:91:0D:57:41:19:8A:77:49:0B:13:16:45:6D:C2:68 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AC2E10EB52D0DAA2AA4915980 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 33598 IP address blocks: 138.8.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0e:b5:2d:0d:aa:2a:a4:91:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=c9829392-d3df-4bef-8133-301ba19aa0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:2d:42:e8:d7:1b:b0:2f:0a:71:18:39:7b: be:a2:0f:e9:a5:ae:2a:0d:6e:b8:1a:54:33:d3:e5: ae:49:e7:75:ab:ce:7f:11:37:2d:ce:91:c5:60:4e: 9c:8b:a3:41:ef:8a:ea:06:5c:19:03:92:39:d3:f3: 26:e2:b1:cb:52:c4:07:e2:21:ad:7b:12:6c:5c:7b: ed:6b:bc:5c:cc:aa:b7:e0:a4:13:69:7a:2d:f9:1b: 89:f6:58:a6:d8:6b:20:a0:5d:05:6d:a5:66:ea:ce: 19:e0:c4:fd:50:62:72:36:d4:f4:ec:b1:34:aa:6d: 35:52:ea:7e:cd:19:53:7e:71:ef:27:d1:91:bc:3d: 09:63:55:eb:2d:30:a4:b5:2b:ff:0d:c7:17:44:f1: ad:34:d4:e3:4e:d7:44:2d:2e:1e:51:81:a2:9a:e9: 02:15:d8:c0:bf:80:38:83:fb:6c:74:42:dc:ab:8e: 9e:84:ab:a5:fb:0f:23:dd:d6:7f:5d:90:df:3b:54: 93:ed:06:e8:51:ec:cc:3f:07:c7:8d:7e:6a:d8:38: 50:8d:bd:1b:9f:11:2a:4d:21:84:8d:c3:0e:ef:8a: c4:7f:bc:c9:30:13:07:d0:ed:0d:6f:7c:11:c8:25: a1:45:5b:ac:c9:f5:2f:e9:59:5c:47:e0:a1:88:fd: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:76:25:3F:BA:91:0D:57:41:19:8A:77:49:0B:13:16:45:6D:C2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ff:22:7e:d3:2a:08:7e:61:9d:57:1a:21:c8:75:7f:b5:70: 0e:db:c6:7c:ee:23:4c:5f:4e:13:c9:01:7d:01:b7:6a:5c:30: 6f:3a:09:2c:ff:7a:ed:ff:ca:f6:f8:87:df:9f:e9:91:b2:17: 38:41:85:73:3a:cc:ad:04:d5:40:64:4c:42:cc:5b:e8:b1:ee: c5:a7:ba:33:9d:15:83:29:1c:dc:1f:b8:e6:80:57:1d:36:17: 98:0f:17:40:e8:87:79:12:a5:f2:86:ff:5f:c4:3d:c8:99:53: c4:33:a1:4a:58:76:b7:68:4b:7c:5a:2f:3e:fb:fd:7d:1d:7b: ee:90:3b:70:80:1c:57:3c:d6:96:ca:4f:39:6b:24:bf:8e:cd: 04:a4:af:04:53:5b:a7:bb:e0:51:6d:68:7b:0d:5d:8a:e6:44: 0d:d3:af:2f:ee:33:29:88:04:0f:ce:4e:de:19:4c:6b:36:49: 54:53:07:74:be:9f:3f:a3:21:1c:51:99:5e:19:3f:95:04:63: 59:a2:47:ee:49:90:46:87:af:82:36:68:80:71:9a:db:b5:aa: 88:c5:eb:c7:85:be:d7:c0:da:36:4d:98:25:11:e7:bd:a7:cd: 16:e5:d8:00:9a:10:97:4a:37:1a:39:c3:50:d1:fb:17:93:ba: c2:ec:78:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q61LQ2qKqSRWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Yzk4MjkzOTItZDNkZi00YmVmLTgxMzMtMzAxYmExOWFhMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSUtQujXG7AvCnEYOXu+og/ppa4qDW64GlQz 0+WuSed1q85/ETctzpHFYE6ci6NB74rqBlwZA5I50/Mm4rHLUsQH4iGtexJsXHvt a7xczKq34KQTaXot+RuJ9lim2GsgoF0FbaVm6s4Z4MT9UGJyNtT07LE0qm01Uup+ zRlTfnHvJ9GRvD0JY1XrLTCktSv/DccXRPGtNNTjTtdELS4eUYGimukCFdjAv4A4 g/tsdELcq46ehKul+w8j3dZ/XZDfO1ST7QboUezMPwfHjX5q2DhQjb0bnxEqTSGE jcMO74rEf7zJMBMH0O0Nb3wRyCWhRVusyfUv6VlcR+ChiP1x8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd2JT+6kQ1XQRmKd0kLExZFbcJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY0M2JlYzMtYmY0Yi0z ZWJlLWI5NmQtMDE0OGJjZmNlMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT/In7TKgh+YZ1XGiHIdX+1cA7bxnzuI0xfThPJAX0Bt2pcMG86CSz/ eu3/yvb4h9+f6ZGyFzhBhXM6zK0E1UBkTELMW+ix7sWnujOdFYMpHNwfuOaAVx02 F5gPF0Doh3kSpfKG/1/EPciZU8QzoUpYdrdoS3xaLz77/X0de+6QO3CAHFc81pbK TzlrJL+OzQSkrwRTW6e74FFtaHsNXYrmRA3Try/uMymIBA/OTt4ZTGs2SVRTB3S+ nz+jIRxRmV4ZP5UEY1miR+5JkEaHr4I2aIBxmtu1qojF68eFvtfA2jZNmCUR572n zRbl2ACaEJdKNxo5w1DR+xeTusLseMw= -----END CERTIFICATE-----Generated at Sun Aug 24 00:28:07 2025 by rpki-client