$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa File: 4ecac424-bd8e-38fa-87c3-648aadedc605.roa (raw, json) Hash identifier: MCEmsdOTYpGgdQHQPwRjrYemdW9lMbQK6cc5P5nJYa8= Subject key identifier: 50:62:D1:AB:9E:4D:FB:B0:EC:9B:84:D7:91:B5:17:A7:F4:D5:50:7C Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BA39D29E57EB8B072E7FEF4A0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 6195 IP address blocks: 138.8.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:29:e5:7e:b8:b0:72:e7:fe:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=be1c6689-c011-4d60-a491-ae37c228af69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:a7:31:96:11:04:14:79:da:78:24:b4:fc: 54:8e:1f:76:1f:da:b6:18:f5:42:f3:04:6a:92:70: 61:17:85:91:4e:66:d2:f9:69:5e:c1:66:3a:e4:ea: af:c9:94:a2:22:e9:34:25:8e:78:dd:88:5f:fe:2a: 90:fb:2e:8c:42:de:66:28:e5:7e:81:2b:a8:b2:df: a6:cc:41:29:da:92:a8:c0:80:02:cd:18:ce:20:a0: 69:ed:af:45:1d:99:5f:1a:7a:11:6c:4e:77:42:62: 2a:cc:6a:2d:88:97:d9:6d:fa:8f:33:a2:34:e3:ad: c5:2e:47:a7:43:18:3b:25:c6:ea:00:92:52:d5:0f: 37:70:a8:26:75:ee:2e:2d:88:12:04:5c:28:3c:a4: 97:b8:2f:63:9b:d0:b1:3a:1c:6b:af:1a:ba:0f:54: ad:ad:65:f9:74:24:c3:97:13:d5:d7:a3:53:3d:8d: 0a:49:e2:d4:b5:cb:14:87:c8:92:9f:dc:c8:78:c6: 13:92:c8:ec:ae:f6:e7:5a:ea:9f:fd:6a:1e:1c:d7: 6b:dc:33:47:ce:a7:7d:ed:28:bb:47:30:dd:8b:9f: 54:fe:01:e3:2e:38:1d:83:44:93:1a:ca:91:55:af: 45:5f:eb:6a:e0:26:99:e2:36:81:5e:f5:ca:2b:11: ba:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:62:D1:AB:9E:4D:FB:B0:EC:9B:84:D7:91:B5:17:A7:F4:D5:50:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ca:e2:e3:3b:d6:1b:68:38:0a:36:ab:a4:26:c0:74:27:f8: a3:de:e4:69:5f:c0:87:3c:82:0e:60:80:77:30:cc:02:40:c1: 00:e6:ed:ad:64:dc:67:bb:dd:1d:b7:ac:2d:71:cf:9a:22:25: 64:78:a1:20:8a:dc:67:aa:1b:dd:c3:ba:db:4b:f9:db:c4:76: 7d:4d:fe:6f:49:3b:c9:8b:41:e5:db:d2:14:37:63:80:16:ab: d8:08:05:03:1c:8f:93:16:d7:ac:6a:84:f7:9c:31:fa:2e:53: 92:1f:6c:39:76:1d:6a:67:8a:d4:90:b3:38:a6:eb:a0:eb:bc: c0:79:12:09:8a:87:2c:92:ae:b3:48:8a:85:86:36:cd:de:0b: f7:09:bf:3b:e1:a2:8b:56:8b:95:73:f9:37:65:c6:db:08:5c: c7:b5:0d:e0:0e:07:77:0d:c6:72:f7:d7:fa:26:a4:83:04:c5: 3e:75:a7:2f:e0:db:e2:df:25:7f:15:f8:fe:fe:bc:61:be:58: 93:dc:d5:f7:1f:22:9e:6e:cc:94:ee:8b:a1:3f:d6:31:97:62: 21:fb:01:46:1e:08:c1:f6:86:dd:9c:69:e3:dc:13:55:86:2b: f7:3c:a8:8d:17:1f:73:73:f0:55:cf:d8:ad:54:be:27:9f:d2: 3e:f0:b3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSnlfriwcuf+9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmUxYzY2ODktYzAxMS00ZDYwLWE0OTEtYWUzN2MyMjhhZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn+nMZYRBBR52ngktPxUjh92H9q2GPVC8wRq knBhF4WRTmbS+WlewWY65OqvyZSiIuk0JY543Yhf/iqQ+y6MQt5mKOV+gSuost+m zEEp2pKowIACzRjOIKBp7a9FHZlfGnoRbE53QmIqzGotiJfZbfqPM6I0463FLken Qxg7JcbqAJJS1Q83cKgmde4uLYgSBFwoPKSXuC9jm9CxOhxrrxq6D1StrWX5dCTD lxPV16NTPY0KSeLUtcsUh8iSn9zIeMYTksjsrvbnWuqf/WoeHNdr3DNHzqd97Si7 RzDdi59U/gHjLjgdg0STGsqRVa9FX+tq4CaZ4jaBXvXKKxG6RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBi0aueTfuw7JuE15G1F6f01VB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNGVjYWM0MjQtYmQ4ZS0z OGZhLTg3YzMtNjQ4YWFkZWRjNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXK4uM71htoOAo2q6QmwHQn+KPe5GlfwIc8gg5ggHcwzAJAwQDm7a1k 3Ge73R23rC1xz5oiJWR4oSCK3GeqG93DuttL+dvEdn1N/m9JO8mLQeXb0hQ3Y4AW q9gIBQMcj5MW16xqhPecMfouU5IfbDl2HWpnitSQszim66DrvMB5EgmKhyySrrNI ioWGNs3eC/cJvzvhootWi5Vz+TdlxtsIXMe1DeAOB3cNxnL31/ompIMExT51py/g 2+LfJX8V+P7+vGG+WJPc1fcfIp5uzJTui6E/1jGXYiH7AUYeCMH2ht2caePcE1WG K/c8qI0XH3Nz8FXP2K1Uvief0j7ws/0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:57 2025 by rpki-client