$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa File: 311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json) Hash identifier: GJy651VTDWyVhdXPrRFVhD7yf3XT6u07AfWJFmYnR9E= Subject key identifier: DA:F8:1A:BE:FE:48:90:9A:3A:4F:AA:33:39:76:8A:CE:03:BF:6E:82 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BB727B902548AFDF4E9124160 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 33598 IP address blocks: 138.8.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b9:02:54:8a:fd:f4:e9:12:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=463cb619-6d08-4b4f-951a-c6f850f8b5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f4:6e:55:41:b8:c7:d0:2f:1b:bf:22:6e:26: 37:1d:bc:2b:89:2a:83:ee:75:91:9d:ce:88:24:03: a7:c7:d1:44:22:58:e3:90:4a:f1:e5:e6:3e:1f:c5: 68:56:aa:93:87:0e:4c:38:4d:38:14:17:a5:cc:c5: 80:a0:ee:78:89:53:14:ba:b2:28:5f:63:f0:89:02: 44:78:6f:45:58:6c:b3:f0:42:fb:08:fd:f1:23:ff: 63:51:da:fb:bd:c5:ea:ad:da:3a:5b:86:4a:08:48: fc:1a:0b:8d:2c:c3:14:24:cf:63:d0:a1:57:b8:07: b8:38:6c:27:50:9b:84:e3:4e:32:69:f0:05:6a:a6: 7a:b3:36:17:64:21:7e:c8:5d:fe:e3:28:f2:71:92: f0:c5:9c:f5:54:8a:d5:ed:cb:09:be:2a:bf:37:7c: 4e:6a:aa:af:5b:d1:dc:89:c9:51:bd:5a:fa:82:c0: 81:97:98:04:b1:35:db:0e:50:b1:0c:0d:d2:fa:d7: af:93:af:0f:3f:60:4d:c9:90:55:72:25:bf:21:ae: ca:db:2d:a4:64:af:9f:a3:3a:97:f3:db:c1:64:75: a4:6a:9e:7f:b7:d9:4c:6a:c1:40:74:5d:1c:0c:a2: 8d:f4:91:33:72:88:04:fb:25:ca:d5:e8:cb:e6:ce: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:1A:BE:FE:48:90:9A:3A:4F:AA:33:39:76:8A:CE:03:BF:6E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1f:48:b9:2e:13:53:c6:c5:d4:7c:bf:4b:78:26:ad:32:20: cb:2e:bd:06:fe:9c:f0:a0:dd:c0:51:88:69:06:69:1e:3d:38: a4:09:dd:48:58:4e:78:fa:5c:ad:6e:c0:94:88:9a:7a:06:ad: de:8f:c2:72:2d:4e:11:7b:7d:11:a2:01:39:30:a8:9e:10:47: 2f:b2:54:7d:c0:e9:c9:bd:b8:cf:e1:62:73:a0:58:89:45:67: b1:f0:ec:05:f9:3d:38:66:89:86:ca:bb:c5:f6:aa:8e:f8:b7: 16:81:4c:dc:c2:68:17:07:2b:94:f9:38:ea:62:0d:bd:85:ce: 6b:a7:33:84:30:f7:7a:a3:ea:23:16:a7:61:be:71:e0:34:70: 71:b2:11:b3:d6:71:f3:a5:5a:93:8c:6a:82:3e:b8:4a:37:34: 04:11:41:ba:6a:d4:56:9e:1a:a1:cd:ca:31:dd:22:e7:1b:aa: f0:05:6f:30:5b:7f:ca:0f:30:e3:32:2f:f2:d9:92:77:ff:5c: 65:93:4a:79:ca:b1:70:74:74:6d:40:53:38:55:34:64:c3:a7: 23:20:20:98:81:3f:69:57:a1:72:5b:03:10:15:8a:41:ed:e8: b5:d1:87:19:e6:c3:39:84:6b:c0:09:31:90:ea:bb:a6:20:76: f2:16:38:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7kCVIr99OkSQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk NDYzY2I2MTktNmQwOC00YjRmLTk1MWEtYzZmODUwZjhiNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfRuVUG4x9AvG78ibiY3HbwriSqD7nWRnc6I JAOnx9FEIljjkErx5eY+H8VoVqqThw5MOE04FBelzMWAoO54iVMUurIoX2PwiQJE eG9FWGyz8EL7CP3xI/9jUdr7vcXqrdo6W4ZKCEj8GguNLMMUJM9j0KFXuAe4OGwn UJuE404yafAFaqZ6szYXZCF+yF3+4yjycZLwxZz1VIrV7csJviq/N3xOaqqvW9Hc iclRvVr6gsCBl5gEsTXbDlCxDA3S+tevk68PP2BNyZBVciW/Ia7K2y2kZK+fozqX 89vBZHWkap5/t9lMasFAdF0cDKKN9JEzcogE+yXK1ejL5s7SlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr4Gr7+SJCaOk+qMzl2is4Dv26CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzExYTg4ZGUtMmNkZC0z NjRiLTg2ZGUtOTkxYTgxYTk1NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwfSLkuE1PGxdR8v0t4Jq0yIMsuvQb+nPCg3cBRiGkGaR49OKQJ3UhY Tnj6XK1uwJSImnoGrd6PwnItThF7fRGiATkwqJ4QRy+yVH3A6cm9uM/hYnOgWIlF Z7Hw7AX5PThmiYbKu8X2qo74txaBTNzCaBcHK5T5OOpiDb2FzmunM4Qw93qj6iMW p2G+ceA0cHGyEbPWcfOlWpOMaoI+uEo3NAQRQbpq1FaeGqHNyjHdIucbqvAFbzBb f8oPMOMyL/LZknf/XGWTSnnKsXB0dG1AUzhVNGTDpyMgIJiBP2lXoXJbAxAVikHt 6LXRhxnmwzmEa8AJMZDqu6YgdvIWOH4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:26 2025 by rpki-client