$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa File: 674b559a-b866-3bcd-84f6-457b70f279d7.roa (raw, json) Hash identifier: HDrvcbUdtdoPxwA2qGdj2xU4O8MTWhD4LU34UpPd5RM= Subject key identifier: 8B:AD:76:5B:23:7D:FB:A2:FE:EA:2E:D6:90:11:D4:75:D2:18:CE:1C Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BA39D2A17EAA47B92CE4A9440 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 33598 IP address blocks: 138.8.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2a:17:ea:a4:7b:92:ce:4a:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a3307c56-84eb-4764-8536-b3ee7df0e8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:b8:71:77:ac:4d:54:fb:45:6d:2d:86:1b: 6a:d1:65:25:4f:6d:f5:a7:55:20:c8:8c:62:c9:a8: d1:92:df:ab:f0:c9:b2:8a:27:75:67:32:7a:33:41: 11:84:2d:26:59:12:34:34:21:a9:e3:9c:4f:22:bf: 65:26:1b:06:db:62:c6:1a:e6:95:b6:71:e3:89:a3: ef:59:bb:2e:af:23:d8:32:cd:f2:4e:57:1d:15:12: 21:86:34:5d:ce:15:e0:35:70:cd:07:ef:a5:e5:c5: 1c:c4:8c:bd:3d:83:d7:66:ae:9b:b7:45:9f:ba:17: fb:d9:ba:33:ec:39:37:8c:a0:c8:ed:fa:7d:a8:2c: 7c:c2:4f:96:27:70:78:fb:70:e7:87:cd:e5:c4:22: 97:df:78:5f:8e:d3:75:03:8e:fc:28:4b:2a:af:22: f1:8e:bd:9d:9b:00:b2:6b:d8:90:7d:06:ea:5a:2a: b5:d2:c8:fd:ca:86:83:4c:a4:d0:2a:19:6f:95:4d: 90:43:48:7a:8c:40:7a:f4:6c:57:91:5d:7d:f1:98: 9a:e0:06:b1:03:5c:8b:4a:2e:db:f4:e9:6f:e3:f8: b1:c0:db:e7:c4:4e:12:d1:fb:51:49:ed:22:1d:91: 0c:b4:e5:04:64:34:1c:ac:35:66:df:6b:31:a7:6d: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AD:76:5B:23:7D:FB:A2:FE:EA:2E:D6:90:11:D4:75:D2:18:CE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:27:10:ee:11:0b:8f:01:d6:45:fd:59:5e:3c:b7:28:75:16: 03:32:f6:94:25:d9:e2:23:b6:71:91:6a:68:9c:65:60:94:36: 44:03:55:26:e0:e6:eb:e0:3f:1e:42:38:a5:c7:8e:02:59:70: 47:4b:bb:e2:5d:54:fa:cf:c8:0c:52:19:7c:58:80:8f:b4:d6: 08:50:28:21:56:cc:90:1f:fd:19:d1:c0:35:5d:d5:40:eb:af: 36:40:a9:7e:b6:cf:cd:ae:b5:c9:71:f3:2c:db:79:8c:37:58: 7a:ec:f8:73:11:45:05:3a:05:e3:1d:47:28:fe:74:d9:b8:1a: 49:d0:37:02:c2:fb:fa:5a:a6:b9:4d:2b:cc:8e:b3:2a:4a:f7: b9:2a:c3:2f:ec:b5:28:be:12:b7:7f:47:36:95:ce:83:21:c5: 51:6d:32:5f:53:74:32:ba:a7:c9:cf:6b:e9:5d:59:21:ab:c9: e6:07:97:11:10:05:87:93:5a:e7:87:73:64:bb:8d:ae:68:ae: 38:b1:1b:ea:63:82:7d:f8:0b:33:78:c7:92:79:da:2b:ea:eb: 8d:80:4f:3e:bd:ba:94:ad:8e:0d:04:74:05:f3:4e:bd:8b:2c: 82:96:30:37:bf:a1:81:5c:df:73:a8:55:ee:52:53:ba:48:89: 32:b5:fd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSoX6qR7ks5KlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTMzMDdjNTYtODRlYi00NzY0LTg1MzYtYjNlZTdkZjBlOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4+4cXesTVT7RW0thhtq0WUlT231p1UgyIxi yajRkt+r8Mmyiid1ZzJ6M0ERhC0mWRI0NCGp45xPIr9lJhsG22LGGuaVtnHjiaPv WbsuryPYMs3yTlcdFRIhhjRdzhXgNXDNB++l5cUcxIy9PYPXZq6bt0Wfuhf72boz 7Dk3jKDI7fp9qCx8wk+WJ3B4+3Dnh83lxCKX33hfjtN1A478KEsqryLxjr2dmwCy a9iQfQbqWiq10sj9yoaDTKTQKhlvlU2QQ0h6jEB69GxXkV198Zia4AaxA1yLSi7b 9Olv4/ixwNvnxE4S0ftRSe0iHZEMtOUEZDQcrDVm32sxp21gXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIutdlsjffui/uou1pAR1HXSGM4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNjc0YjU1OWEtYjg2Ni0z YmNkLTg0ZjYtNDU3YjcwZjI3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYnEO4RC48B1kX9WV48tyh1FgMy9pQl2eIjtnGRamicZWCUNkQDVSbg 5uvgPx5COKXHjgJZcEdLu+JdVPrPyAxSGXxYgI+01ghQKCFWzJAf/RnRwDVd1UDr rzZAqX62z82utclx8yzbeYw3WHrs+HMRRQU6BeMdRyj+dNm4GknQNwLC+/paprlN K8yOsypK97kqwy/stSi+Erd/RzaVzoMhxVFtMl9TdDK6p8nPa+ldWSGryeYHlxEQ BYeTWueHc2S7ja5orjixG+pjgn34CzN4x5J52ivq642ATz69upStjg0EdAXzTr2L LIKWMDe/oYFc33OoVe5SU7pIiTK1/SQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:31:38 2025 by rpki-client