$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa File: 8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa (raw, json) Hash identifier: kEOpOhgk0s9og8DvAUgWmwwW0MieVxgB2Lvt34hn9B0= Subject key identifier: C3:DA:83:E8:AD:A6:39:62:EE:C7:E1:96:60:46:AB:6D:A5:9F:D4:18 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BA39D29F5C89F2E898742B900 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 6195 IP address blocks: 138.8.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:29:f5:c8:9f:2e:89:87:42:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8f3ba1f8-6338-44cf-b679-3d68a6f94d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:3b:59:87:29:78:7f:74:88:04:97:78:f3: ec:6c:1c:c1:e4:12:27:ce:f9:82:d8:11:d6:84:11: 7f:e9:20:8a:83:48:8c:8f:c3:a8:51:8a:79:65:2b: 20:ed:7e:83:01:78:3d:21:ee:a5:44:07:4f:56:0a: c3:3f:45:bd:2d:60:ba:ba:e6:8f:b0:88:d5:53:ac: 82:30:9f:9f:37:50:0c:b6:2c:24:4e:e0:11:56:7c: 1c:df:b7:85:84:54:48:79:aa:64:84:2e:b7:f1:57: 91:71:95:3e:d9:e1:54:cd:5a:f0:1e:dd:59:8e:d9: 5b:ac:25:6d:27:5a:7a:c9:ea:f7:3d:d2:a2:f5:c0: 6a:e9:54:46:18:14:20:cd:f1:df:37:a3:50:13:c1: e9:21:19:1e:26:37:d3:33:21:1f:2c:c6:7d:e3:e5: 0f:9f:b1:5e:a5:37:28:0a:4c:9d:a1:67:c9:2a:2a: 4a:78:1b:5a:a8:39:36:d7:23:84:a6:c4:1d:5c:34: 43:95:e5:3d:20:ec:fd:68:0a:00:6a:ff:d4:50:8e: 1b:1a:3d:08:d2:26:15:25:d7:c4:11:5b:0f:5d:fb: 2a:8b:36:df:4f:41:64:e0:de:90:ce:11:06:f6:fc: fc:63:98:ef:c2:ab:46:78:a9:f2:79:1a:68:22:85: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DA:83:E8:AD:A6:39:62:EE:C7:E1:96:60:46:AB:6D:A5:9F:D4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:79:a6:08:22:be:69:44:0a:d2:84:83:4a:e2:e9:c8:91:36: 3c:2b:1e:d3:4c:5d:61:71:d5:41:00:95:bb:3e:12:86:64:cc: a3:47:bd:50:23:c9:8a:1a:5a:1c:15:10:a4:b1:90:bc:ec:fa: 87:cc:d7:65:aa:51:40:49:14:a5:97:b9:65:97:5f:d8:fb:92: d2:aa:dc:b7:dd:20:e7:a2:67:f4:ff:4b:bb:03:c2:4c:ac:3e: a1:cb:28:75:0d:ad:7e:33:e4:58:99:fb:02:ea:22:58:52:d0: b1:1b:a8:4b:7d:bf:e5:dc:27:59:dd:00:e0:b4:d3:f1:23:51: e8:88:16:ea:3c:f4:91:e0:84:9b:d5:3f:ee:05:55:ab:eb:2f: 5b:8d:8a:9e:db:d0:e8:a0:98:d4:f5:f7:41:e3:b5:71:e9:66: 9c:9d:f9:18:54:82:c4:58:65:3d:6b:80:57:42:ff:f3:c4:cc: 5d:3a:f3:66:07:3c:23:b9:2b:e2:57:52:ce:23:6e:42:d6:85: b3:9a:20:3d:d4:10:88:ea:83:80:ed:28:63:0f:34:4d:46:90: bd:07:9a:bc:ed:8b:18:64:2e:97:7a:35:31:ab:da:87:71:85: 94:8e:ef:ee:83:30:5f:b6:27:e7:e8:20:6a:64:82:3f:b4:f8: 99:02:37:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSn1yJ8uiYdCuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGYzYmExZjgtNjMzOC00NGNmLWI2NzktM2Q2OGE2Zjk0ZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigU7WYcpeH90iASXePPsbBzB5BInzvmC2BHW hBF/6SCKg0iMj8OoUYp5ZSsg7X6DAXg9Ie6lRAdPVgrDP0W9LWC6uuaPsIjVU6yC MJ+fN1AMtiwkTuARVnwc37eFhFRIeapkhC638VeRcZU+2eFUzVrwHt1ZjtlbrCVt J1p6yer3PdKi9cBq6VRGGBQgzfHfN6NQE8HpIRkeJjfTMyEfLMZ94+UPn7FepTco CkydoWfJKipKeBtaqDk21yOEpsQdXDRDleU9IOz9aAoAav/UUI4bGj0I0iYVJdfE EVsPXfsqizbfT0Fk4N6QzhEG9vz8Y5jvwqtGeKnyeRpoIoX3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPag+itpjli7sfhlmBGq22ln9QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOGU3YTcwN2YtYjFlZC0z MzMwLWIyMmUtYTU4MWRjZjEzYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN5pggivmlECtKEg0ri6ciRNjwrHtNMXWFx1UEAlbs+EoZkzKNHvVAj yYoaWhwVEKSxkLzs+ofM12WqUUBJFKWXuWWXX9j7ktKq3LfdIOeiZ/T/S7sDwkys PqHLKHUNrX4z5FiZ+wLqIlhS0LEbqEt9v+XcJ1ndAOC00/EjUeiIFuo89JHghJvV P+4FVavrL1uNip7b0OigmNT190HjtXHpZpyd+RhUgsRYZT1rgFdC//PEzF0682YH PCO5K+JXUs4jbkLWhbOaID3UEIjqg4DtKGMPNE1GkL0HmrztixhkLpd6NTGr2odx hZSO7+6DMF+2J+foIGpkgj+0+JkCN9k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:03 2025 by rpki-client