$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa File: 4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json) Hash identifier: hEOxhHHDvrS4awbU3y/qJtd4WRV1vg6YLCBhR8n3owc= Subject key identifier: B9:0E:A5:78:24:D1:D6:B9:3B:0E:ED:DF:48:2D:A9:AC:6C:78:29:58 Certificate issuer: /CN=24c594b2-08c8-4864-afae-a607d79beb73 Certificate serial: 010D0C9F4328584B13D6C6A9F014D9FF53CD9A00 Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 398178 IP address blocks: 138.43.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c6:a9:f0:14:d9:ff:53:cd:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=20c88a30-f669-4756-9718-1b03a8e2c169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:06:db:e8:84:81:78:c1:72:ba:c2:10:db: 85:31:d3:dc:06:a8:ee:ed:3d:1e:85:73:e7:72:24: ff:13:07:1a:85:a8:13:92:02:9f:e5:7b:c5:59:15: 82:52:53:56:91:46:2e:2d:ed:b2:eb:f5:c0:94:a0: c5:52:4f:3c:1a:94:c7:b9:4d:bc:b6:93:1c:8d:e9: b3:7a:c6:77:24:cc:01:49:6e:34:5c:ca:d2:21:a9: aa:7e:9e:2b:41:d9:96:69:c6:9f:bf:e1:0c:9e:43: 97:df:4b:c7:aa:de:76:e7:51:7a:a5:f3:84:04:70: d2:c8:91:02:35:e1:4e:10:6e:36:d9:04:0a:07:68: a1:9c:71:fd:9b:2b:7e:23:a7:37:cb:0c:19:52:81: 36:55:22:5c:3f:53:12:64:ab:39:4e:96:e9:11:47: b7:19:29:91:64:f3:6b:f7:7f:47:76:75:fe:ae:5d: a0:b5:fb:b4:ba:00:6a:89:b8:83:a4:37:08:ce:a5: f9:ae:18:d7:4d:4c:58:3c:be:45:a7:bc:9d:3e:a0: 5e:77:f6:61:b5:fb:05:b3:6f:28:d9:c6:ac:2d:df: 2e:9d:51:f1:b1:81:c6:47:b9:2b:47:a3:26:ac:a1: bc:11:08:35:4b:62:9c:98:02:7e:4e:b1:df:a4:70: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:A5:78:24:D1:D6:B9:3B:0E:ED:DF:48:2D:A9:AC:6C:78:29:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl X509v3 Authority Key Identifier: keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer sbgp-ipAddrBlock: critical IPv4: 138.43.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1c:7e:7a:c2:18:19:a4:ec:ec:8c:f1:84:04:e6:5f:fb:aa: c7:5b:99:28:5d:b6:7d:dc:d3:d9:8c:8c:2f:56:1b:d2:d4:91: c1:fa:ff:97:fc:03:81:7f:5b:7b:be:50:35:a9:37:21:a3:c8: 91:58:1b:4d:3f:e8:e3:df:1f:34:3d:5a:9c:3a:e5:d8:d1:e6: 6c:88:0c:0c:d2:cd:91:54:9f:3f:d7:19:29:be:33:ab:df:f7: b7:77:cb:21:49:ca:01:af:29:8d:58:25:0b:d3:51:95:d7:cb: 10:46:06:a3:56:68:bd:4e:9b:ae:5e:c2:64:2e:33:af:76:a1: 65:45:2f:c2:71:ab:cc:4c:78:86:08:ca:6d:4a:80:98:82:33: b6:2e:e1:2b:96:55:27:13:a9:83:2f:62:4a:b4:86:56:87:1a: c0:90:1d:04:1c:01:26:0f:63:d6:20:a6:58:32:92:1f:d5:fa: f3:c2:48:7f:32:14:f4:70:89:f7:5e:8a:b6:97:65:0e:b4:ad: cb:70:ec:03:93:fb:f8:4c:e1:28:03:4c:fb:ad:22:bb:5d:35: 5f:0e:2f:a9:7a:df:b7:67:b2:62:0e:8a:96:20:8f:85:a4:dd: f6:03:79:87:12:40:82:a4:1c:67:15:f8:f5:52:7e:92:dd:6b: 16:6a:9d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sap8BTZ/1PNmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjNTk0YjItMDhjOC00ODY0LWFmYWUtYTYwN2Q3OWJl YjczMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MjBjODhhMzAtZjY2OS00NzU2LTk3MTgtMWIwM2E4ZTJjMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeQG2+iEgXjBcrrCENuFMdPcBqju7T0ehXPn ciT/EwcahagTkgKf5XvFWRWCUlNWkUYuLe2y6/XAlKDFUk88GpTHuU28tpMcjemz esZ3JMwBSW40XMrSIamqfp4rQdmWacafv+EMnkOX30vHqt5251F6pfOEBHDSyJEC NeFOEG422QQKB2ihnHH9myt+I6c3ywwZUoE2VSJcP1MSZKs5TpbpEUe3GSmRZPNr 939HdnX+rl2gtfu0ugBqibiDpDcIzqX5rhjXTUxYPL5Fp7ydPqBed/ZhtfsFs28o 2casLd8unVHxsYHGR7krR6MmrKG8EQg1S2KcmAJ+TrHfpHBV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOpXgk0da5Ow7t30gtqaxseClYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNGM1 OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3ZDc5YmViNzMvNDg0NzI1MmMtMGQyNC0z NTM3LWE4NGItYWQ2MmNiMjkzOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjRjNTk0YjItMDhjOC00ODY0LWFm YWUtYTYwN2Q3OWJlYjczLzI0YzU5NGIyLTA4YzgtNDg2NC1hZmFlLWE2MDdkNzli ZWI3My5jcmwwHwYDVR0jBBgwFoAUgoeFKgr4Ck4pP6waYgLkT6jsMGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNGM1OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3 ZDc5YmViNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGocfnrCGBmk7OyM8YQE5l/7qsdbmShdtn3c09mMjC9WG9LUkcH6/5f8 A4F/W3u+UDWpNyGjyJFYG00/6OPfHzQ9Wpw65djR5myIDAzSzZFUnz/XGSm+M6vf 97d3yyFJygGvKY1YJQvTUZXXyxBGBqNWaL1Om65ewmQuM692oWVFL8Jxq8xMeIYI ym1KgJiCM7Yu4SuWVScTqYMvYkq0hlaHGsCQHQQcASYPY9Ygplgykh/V+vPCSH8y FPRwifdeiraXZQ60rctw7AOT+/hM4SgDTPutIrtdNV8OL6l637dnsmIOipYgj4Wk 3fYDeYcSQIKkHGcV+PVSfpLdaxZqnWA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:05 2025 by rpki-client