$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json) Hash identifier: 6hosQC8d0+mj3LrDC0UU/f6i690N1qS7LnPRPSA6LjA= Subject key identifier: C3:D5:94:4F:2E:D0:09:35:71:75:5D:8D:46:23:00:1D:19:9C:5F:B0 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AADF11DA6F086C9AA3F108500 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 18593 IP address blocks: 138.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1d:a6:f0:86:c9:aa:3f:10:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=60c24791-af08-487e-ac76-bebeab4e8bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:13:b1:86:08:ec:8d:4f:00:c8:55:a9:05:cd: 65:d2:a2:91:66:e0:4e:90:70:21:8f:b7:9d:e1:ca: ad:96:51:fb:d2:69:19:f2:47:b0:37:6a:5b:f9:a4: 43:52:b8:04:39:cd:9f:26:1d:fe:92:aa:06:fe:ae: 4a:d8:a7:92:9b:67:47:ff:bc:93:8c:41:a0:4a:88: 5a:1b:db:3c:5f:a9:98:e7:fa:35:69:10:96:6c:05: c5:74:8b:88:bb:76:82:a5:c0:d0:83:30:a9:ac:d3: f8:43:82:de:9b:cf:7e:b9:b9:d0:c6:28:a6:1d:71: c0:2b:49:ae:d4:0f:ff:a8:79:71:3d:a2:63:54:2c: d6:75:0e:96:5c:fd:49:04:fe:91:53:7d:b4:03:b0: 6c:52:76:be:eb:ed:43:13:f2:7c:60:8d:78:67:eb: 06:18:33:25:60:77:39:e6:89:87:e5:97:0b:a3:3f: 8e:23:b2:97:79:c5:05:1e:f2:05:1a:8b:b9:12:77: a5:3a:10:c0:19:40:7f:e2:2f:57:d6:43:09:22:01: a9:4c:9f:4a:8b:68:24:49:f5:73:5a:7d:30:f9:88: 9d:63:22:13:c9:1c:f9:20:b4:47:f3:d9:7d:d0:67: 5e:e9:f4:1f:43:6c:45:aa:1c:0d:2e:a2:ad:9d:39: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:94:4F:2E:D0:09:35:71:75:5D:8D:46:23:00:1D:19:9C:5F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:24:2d:17:45:1b:a7:ea:28:5c:d8:a3:a7:58:bf:ed:a1:49: 79:83:a7:6c:6d:73:1a:de:4b:51:79:4b:93:b5:0a:1e:d4:40: ab:07:09:d2:9e:73:b4:c6:9e:5e:9b:a7:37:85:c6:02:8b:06: a4:05:63:f4:8d:f3:2e:2a:cb:8a:bd:f6:61:c6:df:15:ae:5a: 3a:b8:0f:41:a7:5d:33:b4:14:95:21:ae:06:e4:37:0f:a4:c0: 3c:c4:c9:fe:1c:60:1d:d4:ba:b5:6f:8f:16:1a:9c:a5:c0:78: d9:a4:c3:58:68:19:6b:c6:27:f7:99:c9:1b:5c:20:1d:56:3b: b9:2b:15:66:21:09:e0:2e:b7:3a:72:7e:e1:2f:74:c7:1e:e2: eb:b1:0f:b7:a3:34:b5:97:74:a6:71:b3:d8:9f:5c:3a:fd:14: 95:d8:ba:cf:55:32:f8:e2:88:fb:8d:5e:04:96:74:62:93:fb: be:0f:0b:fa:e0:40:48:70:f7:3a:14:96:dc:6e:25:c3:df:ff: a8:d4:b9:35:c0:e9:7e:c2:61:5d:73:86:21:bc:94:48:67:06: c9:23:73:b8:9a:7a:ea:e1:ab:98:b8:4a:63:ad:20:bc:fc:54: a0:7f:80:6b:06:78:11:45:a8:23:8e:37:75:dd:95:a9:12:39: c5:21:03:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R2m8IbJqj8QhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NjBjMjQ3OTEtYWYwOC00ODdlLWFjNzYtYmViZWFiNGU4YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgROxhgjsjU8AyFWpBc1l0qKRZuBOkHAhj7ed 4cqtllH70mkZ8kewN2pb+aRDUrgEOc2fJh3+kqoG/q5K2KeSm2dH/7yTjEGgSoha G9s8X6mY5/o1aRCWbAXFdIuIu3aCpcDQgzCprNP4Q4Lem89+ubnQxiimHXHAK0mu 1A//qHlxPaJjVCzWdQ6WXP1JBP6RU320A7BsUna+6+1DE/J8YI14Z+sGGDMlYHc5 5omH5ZcLoz+OI7KXecUFHvIFGou5EnelOhDAGUB/4i9X1kMJIgGpTJ9Ki2gkSfVz Wn0w+YidYyITyRz5ILRH89l90Gde6fQfQ2xFqhwNLqKtnTmM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPVlE8u0Ak1cXVdjUYjAB0ZnF+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDE0Nzc4N2EtODBjMi0z YjhhLTljYTUtNDk5ODRjOTY3MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEskLRdFG6fqKFzYo6dYv+2hSXmDp2xtcxreS1F5S5O1Ch7UQKsHCdKe c7TGnl6bpzeFxgKLBqQFY/SN8y4qy4q99mHG3xWuWjq4D0GnXTO0FJUhrgbkNw+k wDzEyf4cYB3UurVvjxYanKXAeNmkw1hoGWvGJ/eZyRtcIB1WO7krFWYhCeAutzpy fuEvdMce4uuxD7ejNLWXdKZxs9ifXDr9FJXYus9VMvjiiPuNXgSWdGKT+74PC/rg QEhw9zoUltxuJcPf/6jUuTXA6X7CYV1zhiG8lEhnBskjc7iaeurhq5i4SmOtILz8 VKB/gGsGeBFFqCOON3XdlakSOcUhA+g= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:52 2025 by rpki-client