$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa File: 3df8bceb-a2e2-3194-b950-40db68d2b35f.roa (raw, json) Hash identifier: hggFuM8YDcWVzgdYP9AVdv3hJlkZEwrhlubdewAd3hU= Subject key identifier: 32:2C:07:5C:11:70:A4:49:A1:47:C8:0D:8A:16:4B:B1:E8:F8:CB:6C Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B328C456EE79EBA2A76A98E60 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 33598 IP address blocks: 138.8.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:45:6e:e7:9e:ba:2a:76:a9:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=a1130d3d-74a1-404f-92fb-b6dbdaa587d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:7a:01:fc:b4:cc:68:30:48:1a:df:9c:54: 8e:2d:e8:1c:73:9d:d5:4d:74:c1:f8:71:63:01:e2: c8:0f:74:97:2f:19:42:d3:cd:c9:73:1d:35:a8:b4: 56:ac:73:e3:9e:3b:22:11:80:c7:9a:58:38:93:ca: 9d:e3:b8:44:8d:e6:02:79:ad:31:87:8f:3c:df:25: e1:ce:d4:5d:43:0d:65:63:20:dd:18:f8:de:cd:39: 48:c6:4c:8e:25:ad:42:9c:cc:f1:f2:ae:83:92:81: c9:8f:71:b1:6b:9a:76:91:1d:bb:7c:01:cf:cc:6c: 56:9e:d5:10:e4:68:21:12:82:2f:08:21:e6:56:3d: f0:f0:39:b4:0a:04:3a:ed:3b:bd:d3:dc:f4:63:1f: a1:5c:ef:16:dd:4b:1a:a1:4d:59:19:6a:5e:a1:6d: d2:94:14:24:80:b0:ec:e4:9d:1c:39:de:31:bd:8c: bb:b0:34:ff:f3:eb:89:c5:d6:02:63:d7:d4:e7:b8: 74:40:ca:d8:36:20:9a:1f:d3:9f:e0:c1:8a:42:21: 2c:af:44:bc:3c:76:86:fa:76:ac:34:d2:cb:6b:18: ff:35:d2:f8:51:38:ab:a7:c2:e1:f9:7b:b5:75:c8: 16:89:fe:ec:82:1d:5d:3e:4b:0f:b2:df:33:20:d2: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2C:07:5C:11:70:A4:49:A1:47:C8:0D:8A:16:4B:B1:E8:F8:CB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b1:f5:94:6b:b5:48:2a:b9:b9:77:d1:46:ba:ba:4d:f1:38: fb:73:4d:db:66:9a:02:79:15:68:a1:ce:8a:d9:ab:e8:cf:8a: fd:e8:17:08:5a:9b:89:fd:1d:d5:fd:dc:7c:a2:c9:e8:a1:53: fe:bc:4c:41:c2:90:f8:c7:07:e1:62:ee:81:f5:7c:bc:5b:11: 15:7e:da:0e:50:8d:f4:10:f1:f7:6f:de:df:52:bb:0c:6c:7d: 96:57:b6:48:66:7e:15:ac:f6:38:bf:44:b7:cb:69:1e:76:f9: aa:05:34:f5:6b:5a:17:85:63:75:a9:36:04:3d:dc:86:33:31: c8:fd:4a:45:90:64:a1:e8:7f:57:f9:3d:28:ff:c4:10:d7:8e: 90:1f:65:6a:2d:7a:b5:65:8e:15:05:cc:a4:a2:72:b9:27:e7: ad:9f:32:44:58:4c:17:1b:9f:61:f6:ad:52:1c:e7:96:ba:ed: 14:f3:07:a0:4a:02:fb:06:60:b5:06:15:25:2b:5b:3c:06:ca: c0:0e:45:74:01:cf:e9:33:99:13:5c:e3:1a:73:0d:00:81:26: 04:15:a2:00:11:4e:ef:9a:25:cb:30:53:64:11:1b:f7:b2:3e: 6a:57:18:ea:f9:5e:cf:cd:02:a4:b3:3f:90:1b:26:d8:29:4b: 51:5e:af:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEVu5566KnapjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YTExMzBkM2QtNzRhMS00MDRmLTkyZmItYjZkYmRhYTU4N2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLZ6Afy0zGgwSBrfnFSOLegcc53VTXTB+HFj AeLID3SXLxlC083Jcx01qLRWrHPjnjsiEYDHmlg4k8qd47hEjeYCea0xh4883yXh ztRdQw1lYyDdGPjezTlIxkyOJa1CnMzx8q6DkoHJj3Gxa5p2kR27fAHPzGxWntUQ 5GghEoIvCCHmVj3w8Dm0CgQ67Tu909z0Yx+hXO8W3UsaoU1ZGWpeoW3SlBQkgLDs 5J0cOd4xvYy7sDT/8+uJxdYCY9fU57h0QMrYNiCaH9Of4MGKQiEsr0S8PHaG+nas NNLLaxj/NdL4UTirp8Lh+Xu1dcgWif7sgh1dPksPst8zINKwTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIsB1wRcKRJoUfIDYoWS7Ho+MtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvM2RmOGJjZWItYTJlMi0z MTk0LWI5NTAtNDBkYjY4ZDJiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyx9ZRrtUgqubl30Ua6uk3xOPtzTdtmmgJ5FWihzorZq+jPiv3oFwha m4n9HdX93HyiyeihU/68TEHCkPjHB+Fi7oH1fLxbERV+2g5QjfQQ8fdv3t9Suwxs fZZXtkhmfhWs9ji/RLfLaR52+aoFNPVrWheFY3WpNgQ93IYzMcj9SkWQZKHof1f5 PSj/xBDXjpAfZWoterVljhUFzKSicrkn562fMkRYTBcbn2H2rVIc55a67RTzB6BK AvsGYLUGFSUrWzwGysAORXQBz+kzmRNc4xpzDQCBJgQVogARTu+aJcswU2QRG/ey PmpXGOr5Xs/NAqSzP5AbJtgpS1Fer6w= -----END CERTIFICATE-----Generated at Fri Oct 10 22:30:36 2025 by rpki-client