$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: gqg664pBDD9r2MOolQUMjGyrK6hezPM8HKzh32HYsv8= Subject key identifier: 9C:06:96:46:48:37:4A:BD:D5:34:2E:64:44:3D:4B:6E:9A:6F:4C:33 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849F5AFCEF0C3F1394FB58D96E0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Sat 24 May 2025 13:01:04 +0000 ROA not before: Sat 24 May 2025 13:01:04 +0000 ROA not after: Fri 22 Aug 2025 13:01:04 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:af:ce:f0:c3:f1:39:4f:b5:8d:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 24 13:01:04 2025 GMT Not After : Aug 22 13:01:04 2025 GMT Subject: CN=9bd5bef3-84f4-4ff5-8ed5-bc2010dd6b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:03:ed:cf:ad:ec:63:ec:81:1b:4f:59:ef: 34:84:10:00:9e:bb:d3:4d:fb:08:f3:54:80:a1:e3: e8:a4:0a:22:b3:7c:13:0b:86:aa:7f:e4:e3:b1:3c: 75:3e:01:27:61:be:12:fb:26:d0:11:92:6e:e0:29: f3:61:53:5d:f2:d4:c8:74:20:77:6f:9e:94:d0:0c: fb:0a:3a:11:22:cf:ca:86:96:cb:f0:2f:11:8b:5e: 24:f6:aa:a5:fe:38:8e:e6:de:70:cb:fd:06:f9:b2: 03:bd:fe:0b:0b:a0:6d:57:b6:f5:ae:fb:a4:36:d8: 3d:7b:9c:97:9e:c0:27:a7:6e:f0:5f:72:32:80:42: 6e:43:47:d3:9f:90:f2:f9:3c:77:0d:05:ce:31:7c: 9a:7f:07:f8:a4:d6:04:f2:91:6a:10:99:e5:ff:a3: 48:af:f3:7c:95:37:17:68:f3:13:46:8f:05:cc:df: f1:4d:01:4d:a9:30:69:84:70:a1:db:19:19:8c:7d: 2c:ec:84:36:9c:be:0d:fa:d5:5a:31:ec:e6:8e:99: 58:c4:62:b2:16:f2:2f:82:3e:a1:81:12:8b:f2:15: c9:4c:88:68:44:df:2f:8b:e7:71:2a:2c:92:52:6f: 45:8f:64:30:e7:ec:bd:88:1f:fc:82:00:57:7a:0b: 24:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:96:46:48:37:4A:BD:D5:34:2E:64:44:3D:4B:6E:9A:6F:4C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6e:4c:5e:cc:7b:93:ec:37:ed:88:e1:5e:e7:35:8c:c5:19: 91:3e:c3:9f:ab:c9:79:b3:17:2a:4f:f8:01:2a:07:d3:58:c7: 77:92:7e:17:58:61:d3:6a:6a:7f:74:8c:5d:90:b1:1b:c9:21: 4f:ea:68:8d:72:e7:a4:a6:4a:6b:14:2e:1c:39:91:09:99:e3: 31:3a:7f:3f:09:87:24:10:ac:1e:78:18:28:8e:35:52:c8:f2: 5b:02:39:26:73:d6:0a:b2:c5:af:6f:b6:82:bc:19:d4:4c:35: 11:20:2e:10:ab:34:0a:2e:b1:68:26:96:6c:67:c3:4e:ef:75: 8a:2e:4a:35:d0:35:61:2e:bf:d9:d1:cc:76:fc:10:9b:f9:76: 1d:a5:6a:b2:6c:37:30:3c:43:b6:37:d3:e1:16:33:a5:c9:a0: 5f:4c:13:77:00:26:dc:8b:a8:9b:4d:ac:57:53:59:46:63:65: 26:24:2b:1f:67:0d:fa:04:7d:66:cd:30:dd:85:10:11:5f:cf: 86:17:49:84:1d:35:2d:fa:fb:aa:c3:29:1f:50:fb:93:68:e8: 6a:9f:20:e8:32:e8:1d:4a:1d:45:2e:2b:6b:5f:05:5f:83:72: e6:b6:be:06:0d:68:c6:3d:16:0e:dd:16:63:74:d8:4a:ee:a8: 3c:a4:ef:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn1r87ww/E5T7WNluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUyNDEzMDEwNFoXDTI1MDgyMjEzMDEwNFowLzEtMCsGA1UEAxMk OWJkNWJlZjMtODRmNC00ZmY1LThlZDUtYmMyMDEwZGQ2YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOED7c+t7GPsgRtPWe80hBAAnrvTTfsI81SA oePopAois3wTC4aqf+TjsTx1PgEnYb4S+ybQEZJu4CnzYVNd8tTIdCB3b56U0Az7 CjoRIs/KhpbL8C8Ri14k9qql/jiO5t5wy/0G+bIDvf4LC6BtV7b1rvukNtg9e5yX nsAnp27wX3IygEJuQ0fTn5Dy+Tx3DQXOMXyafwf4pNYE8pFqEJnl/6NIr/N8lTcX aPMTRo8FzN/xTQFNqTBphHCh2xkZjH0s7IQ2nL4N+tVaMezmjplYxGKyFvIvgj6h gRKL8hXJTIhoRN8vi+dxKiySUm9Fj2Qw5+y9iB/8ggBXegskMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwGlkZIN0q91TQuZEQ9S26ab0wzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJuTF7Me5PsN+2I4V7nNYzFGZE+w5+ryXmzFypP+AEqB9NYx3eSfhdY YdNqan90jF2QsRvJIU/qaI1y56SmSmsULhw5kQmZ4zE6fz8JhyQQrB54GCiONVLI 8lsCOSZz1gqyxa9vtoK8GdRMNREgLhCrNAousWgmlmxnw07vdYouSjXQNWEuv9nR zHb8EJv5dh2larJsNzA8Q7Y30+EWM6XJoF9ME3cAJtyLqJtNrFdTWUZjZSYkKx9n DfoEfWbNMN2FEBFfz4YXSYQdNS36+6rDKR9Q+5No6GqfIOgy6B1KHUUuK2tfBV+D cua2vgYNaMY9Fg7dFmN02EruqDyk77I= -----END CERTIFICATE-----Generated at Mon Jun 30 01:13:00 2025 by rpki-client