$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa File: 9822c890-e8ba-385d-95be-f63542145365.roa (raw, json) Hash identifier: MZ08DSGTJ65tIiBn02bnU1QZN3r4Sh9g2LprHBqkSCE= Subject key identifier: D1:31:1A:28:8E:2D:53:C4:02:06:CD:F1:B3:46:2B:05:5A:19:4F:88 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AC2E10E6466211D908A080780 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 6195 IP address blocks: 138.8.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0e:64:66:21:1d:90:8a:08:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=566f667f-cacb-4302-9791-4455120a6054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:2a:58:ae:83:5f:e7:aa:e9:69:64:c3:ed: 99:e9:80:24:7a:b1:75:b0:06:b6:cb:a0:a3:91:ac: 7d:76:be:7e:68:54:09:29:1b:a1:e6:3e:8f:23:9b: 1d:3b:6a:40:70:86:3b:8f:f6:f7:94:89:28:b0:bc: 86:e6:92:ba:4d:10:cf:ec:77:d6:f2:73:03:65:8b: 6d:a2:76:2f:87:ff:50:3c:78:77:b5:52:9e:6e:75: fd:1d:5a:8f:f2:e7:d4:b5:71:11:3a:9a:c6:57:72: 20:3f:ff:a7:c7:0a:86:62:62:48:e5:b2:f7:ba:93: bf:8b:3c:c1:27:1e:bc:60:8c:f6:c5:31:77:fc:ff: f7:4b:4e:23:f1:cc:3a:e8:fc:1d:d1:85:0d:29:08: 1a:38:c6:9d:33:5c:f9:60:95:5a:a3:e3:37:87:32: 83:f2:ca:41:1a:6e:3e:01:16:09:77:72:20:fc:32: 9a:af:85:ba:4d:6f:89:b7:05:c8:39:69:15:be:65: 1b:c0:b3:da:09:76:8f:cc:c8:75:22:f6:b6:89:4f: b8:94:3d:1f:2e:b4:43:87:86:6b:67:55:a4:20:54: 12:00:9f:f3:8c:27:95:4e:7b:d4:4e:46:28:cf:cf: 23:0b:dc:f9:87:5c:35:c0:f2:35:d6:a1:28:c1:7f: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:1A:28:8E:2D:53:C4:02:06:CD:F1:B3:46:2B:05:5A:19:4F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6d:ad:1b:27:fd:78:5b:5a:97:2c:62:1b:96:1a:0d:8e:77: 5c:93:11:a2:3e:d8:74:62:88:bb:1b:9f:49:96:e8:cd:10:d8: 0f:ac:d3:5c:5a:31:e0:cf:1d:91:83:ec:fb:89:71:41:56:17: bf:0e:8b:8f:a3:ae:80:c6:8a:16:66:57:8b:c6:f5:83:71:b0: ff:c9:88:e4:61:84:3f:a2:11:71:40:0f:eb:d8:f8:83:2c:c3: dc:04:eb:61:d4:3a:7e:dc:98:11:d9:38:89:32:a3:2e:59:5d: e6:28:80:cb:53:d5:0e:4d:c2:ca:92:96:7f:6a:09:eb:e5:f0: b9:b7:c1:dd:02:16:e6:d0:8f:35:9b:cf:47:37:bb:87:e4:d5: 28:b5:95:41:6d:6a:d1:be:69:c5:3c:b5:2f:77:12:ed:ef:b1: d8:73:1a:05:91:f0:c3:91:c9:72:67:74:77:02:1e:97:90:2b: 3d:fc:13:5e:4f:ee:4b:55:61:30:fb:e5:6d:1a:37:c4:3c:cf: 25:29:bd:ca:1b:30:81:d9:10:59:9b:0f:ab:73:a0:a1:88:d5: 61:b4:9e:08:ad:96:be:ff:95:df:f3:4c:6d:e7:c2:d2:1e:02: 14:87:37:03:1f:3a:bf:29:43:58:9a:17:56:98:02:1e:52:28: 55:ea:3d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q5kZiEdkIoIB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTY2ZjY2N2YtY2FjYi00MzAyLTk3OTEtNDQ1NTEyMGE2MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDIqWK6DX+eq6Wlkw+2Z6YAkerF1sAa2y6Cj kax9dr5+aFQJKRuh5j6PI5sdO2pAcIY7j/b3lIkosLyG5pK6TRDP7HfW8nMDZYtt onYvh/9QPHh3tVKebnX9HVqP8ufUtXEROprGV3IgP/+nxwqGYmJI5bL3upO/izzB Jx68YIz2xTF3/P/3S04j8cw66Pwd0YUNKQgaOMadM1z5YJVao+M3hzKD8spBGm4+ ARYJd3Ig/DKar4W6TW+JtwXIOWkVvmUbwLPaCXaPzMh1Iva2iU+4lD0fLrRDh4Zr Z1WkIFQSAJ/zjCeVTnvUTkYoz88jC9z5h1w1wPI11qEowX83zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNExGiiOLVPEAgbN8bNGKwVaGU+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTgyMmM4OTAtZThiYS0z ODVkLTk1YmUtZjYzNTQyMTQ1MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhtrRsn/XhbWpcsYhuWGg2Od1yTEaI+2HRiiLsbn0mW6M0Q2A+s01xa MeDPHZGD7PuJcUFWF78Oi4+jroDGihZmV4vG9YNxsP/JiORhhD+iEXFAD+vY+IMs w9wE62HUOn7cmBHZOIkyoy5ZXeYogMtT1Q5NwsqSln9qCevl8Lm3wd0CFubQjzWb z0c3u4fk1Si1lUFtatG+acU8tS93Eu3vsdhzGgWR8MORyXJndHcCHpeQKz38E15P 7ktVYTD75W0aN8Q8zyUpvcobMIHZEFmbD6tzoKGI1WG0ngitlr7/ld/zTG3nwtIe AhSHNwMfOr8pQ1iaF1aYAh5SKFXqPRs= -----END CERTIFICATE-----Generated at Sat Aug 23 23:00:35 2025 by rpki-client