$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: oZ24c8mKs1JOk2PToUaiQWlOBcdwpbQTGoFho5b8DHI= Subject key identifier: C3:8D:C5:4F:74:BF:B7:F0:B8:89:D4:08:A5:C9:1B:37:70:BF:C6:58 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AD66B9B50ABAA7B33827ABBC0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:9b:50:ab:aa:7b:33:82:7a:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=02903bd7-f0a3-4890-b08c-7844126a89c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:63:55:40:42:37:75:18:81:cb:12:ec:79: 3a:2e:dd:91:a0:64:b8:d6:8c:3d:76:1f:92:d2:96: 78:82:7d:3f:88:57:9b:6e:ba:04:e4:0e:bf:97:3d: 37:e8:46:14:cf:f7:c3:f6:83:7c:88:19:9c:ea:00: 3e:fc:9a:9f:82:f4:25:a6:03:7d:b6:5a:4c:f7:92: c2:42:70:ad:58:f2:54:d2:09:78:d2:7f:46:b7:f7: 8a:0f:f0:48:a6:22:40:43:31:ec:b6:ad:6e:db:83: 51:4a:6f:f8:52:95:85:79:35:a6:42:bb:30:7f:dd: 43:55:c5:5d:f1:49:4b:9a:72:62:36:ff:92:be:1a: eb:1e:b4:e9:55:c3:7c:56:67:f8:ee:e3:74:a6:98: 25:e4:10:ee:b6:ef:ab:dc:08:25:6e:54:90:8f:60: 81:95:44:87:24:b3:5a:3b:51:68:09:1e:1e:b4:bf: bf:40:89:a6:1c:44:be:90:98:2b:10:5a:86:8c:16: 4d:e1:1e:83:88:2a:26:3f:49:64:e6:98:44:53:97: 96:24:9b:aa:1c:b7:72:d3:b1:8f:3c:6e:e2:f3:bd: 35:13:5f:46:fc:e1:48:5f:a2:0b:a4:54:a3:14:db: a5:c1:c3:9c:6e:af:f1:0c:b2:ad:2f:14:f2:11:5d: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:C5:4F:74:BF:B7:F0:B8:89:D4:08:A5:C9:1B:37:70:BF:C6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:57:5d:52:cd:34:23:41:b5:23:d4:a5:1f:1b:18:ea:a8:db: c2:12:3b:ba:12:2f:d1:89:ee:4c:41:13:b2:97:b6:0f:39:f7: 1f:d0:21:90:ec:a6:70:a6:83:1a:6f:f2:15:5e:be:23:38:9d: d4:14:1f:5a:43:37:7e:06:bf:a3:db:19:c8:37:f7:c9:55:68: ce:5c:a7:85:60:41:57:a9:3e:2a:38:92:fb:e5:9d:eb:ed:08: 1b:78:a8:3e:2d:d3:9d:29:9b:01:75:10:d1:32:c3:f4:b8:1d: 38:9b:ac:dd:f6:54:a0:ff:d5:79:09:04:1e:21:d4:b2:b5:72: 30:31:1c:69:e6:f3:61:14:80:c8:6c:2b:8a:c7:86:7f:c9:52: 1d:d2:ef:52:80:30:6d:f5:d5:79:b4:09:0e:0f:4d:7f:42:03: 72:5f:13:ad:de:4a:4a:65:9d:a3:0e:c0:49:bd:f2:65:9a:52: 83:89:9d:38:d4:5d:0e:f7:bf:cd:a7:27:14:57:d3:6c:e1:20: 88:41:9a:ac:27:9c:62:e1:67:d0:f2:c6:2b:6b:ea:96:07:d5: a1:b4:0b:af:00:e9:e0:b2:01:74:ee:aa:14:04:02:19:60:a3: c6:ff:6c:29:9c:0f:3c:a0:d4:59:c7:ec:c1:f1:ec:d3:00:e3: 2b:47:12:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErWa5tQq6p7M4J6u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk MDI5MDNiZDctZjBhMy00ODkwLWIwOGMtNzg0NDEyNmE4OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwxjVUBCN3UYgcsS7Hk6Lt2RoGS41ow9dh+S 0pZ4gn0/iFebbroE5A6/lz036EYUz/fD9oN8iBmc6gA+/JqfgvQlpgN9tlpM95LC QnCtWPJU0gl40n9Gt/eKD/BIpiJAQzHstq1u24NRSm/4UpWFeTWmQrswf91DVcVd 8UlLmnJiNv+SvhrrHrTpVcN8Vmf47uN0ppgl5BDutu+r3AglblSQj2CBlUSHJLNa O1FoCR4etL+/QImmHES+kJgrEFqGjBZN4R6DiComP0lk5phEU5eWJJuqHLdy07GP PG7i8701E19G/OFIX6ILpFSjFNulwcOcbq/xDLKtLxTyEV2TNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMONxU90v7fwuInUCKXJGzdwv8ZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZXXVLNNCNBtSPUpR8bGOqo28ISO7oSL9GJ7kxBE7KXtg859x/QIZDs pnCmgxpv8hVeviM4ndQUH1pDN34Gv6PbGcg398lVaM5cp4VgQVepPio4kvvlnevt CBt4qD4t050pmwF1ENEyw/S4HTibrN32VKD/1XkJBB4h1LK1cjAxHGnm82EUgMhs K4rHhn/JUh3S71KAMG311Xm0CQ4PTX9CA3JfE63eSkplnaMOwEm98mWaUoOJnTjU XQ73v82nJxRX02zhIIhBmqwnnGLhZ9Dyxitr6pYH1aG0C68A6eCyAXTuqhQEAhlg o8b/bCmcDzyg1FnH7MHx7NMA4ytHEpY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:31:54 2025 by rpki-client