$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: opP5l0hHp6vtrNYnKrP/0EWJ22FPVGPXDFV9YuiZpjE= Subject key identifier: 69:1E:C9:68:1B:0D:C0:EB:AE:0F:BD:FF:AE:DB:F9:21:E8:7C:7C:31 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BB727B918049907D8788B3A40 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b9:18:04:99:07:d8:78:8b:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=439eec1d-1cc0-4c16-88d1-42dbab9f7487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:81:0c:fa:01:48:ee:95:02:0e:15:20:6c:7a: d6:a7:99:cb:22:9a:b4:98:40:ce:5a:90:67:95:eb: 5b:9e:11:bd:0d:4a:52:8f:30:79:99:4e:01:80:21: 39:ed:b9:82:c4:d3:5a:33:70:b0:98:8d:dd:fc:ee: 99:7f:02:75:49:d2:f7:c6:03:e0:4b:02:16:9b:8a: 86:dd:2e:36:e5:91:a3:db:f1:17:db:d1:bc:1c:df: ce:b4:2e:b6:2c:dd:2a:b2:45:17:d4:24:5c:fe:2f: f5:49:6f:c6:10:6f:2b:82:54:bc:42:c1:e1:68:ab: 42:c2:94:88:bd:72:2d:83:b3:e4:41:13:d6:e7:6d: dd:48:91:24:55:f9:7d:5a:35:77:da:11:1b:fd:c8: ef:b0:a8:56:77:c5:97:8d:fa:ea:1e:be:f4:3e:38: 6b:94:4a:b8:6e:e7:e2:35:83:bc:e1:10:8e:b7:2e: c6:0b:0b:68:41:37:3e:13:a7:fb:a7:5a:f4:fb:af: d3:74:f1:da:43:7a:59:60:1e:49:4f:82:d0:05:63: 3e:a7:e8:c3:7f:51:d4:c7:07:de:4b:50:b1:97:9e: 5b:79:95:87:bd:b5:e5:59:ab:5f:b7:4a:0c:c9:93: 54:d8:b3:dd:bb:4a:53:55:cc:eb:a9:55:e4:c9:e7: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:C9:68:1B:0D:C0:EB:AE:0F:BD:FF:AE:DB:F9:21:E8:7C:7C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e8:5c:79:c4:25:5e:e6:0d:42:35:23:43:17:04:fa:fd:64: 28:14:6a:55:b2:05:c7:9b:b5:9c:62:eb:8c:c4:d3:23:c9:97: ee:9e:a6:eb:98:a0:77:f6:b2:46:47:56:65:a0:6d:44:34:41: 24:0c:ae:24:d2:07:b8:cc:eb:a1:65:d0:fa:20:ba:17:2b:55: 10:31:51:87:48:75:8a:d9:6c:6a:79:d2:a4:e2:1f:0f:9f:b0: a1:6b:35:38:84:66:85:d8:86:d7:21:96:99:3c:73:52:a7:de: af:00:16:c6:da:3f:02:39:62:7e:76:ce:c9:97:c3:3c:d0:16: d0:c7:4e:6a:75:58:4b:4e:d6:87:e4:8e:e5:62:62:92:68:ea: 4d:f7:a8:14:08:8e:86:17:5c:55:fa:e3:6c:96:91:00:4e:f3: fe:cc:92:5d:ca:43:9e:7a:f2:3f:7f:e4:12:6f:b7:63:47:09: 21:66:bb:88:52:e0:e4:2a:fe:d0:e9:8a:49:a8:11:57:2d:c8: 59:c4:ff:e4:19:48:9c:bc:26:8e:3d:49:b5:88:c4:2f:f6:45: d5:8b:4a:c6:1e:f1:eb:02:3e:2d:23:cc:81:87:ac:f3:eb:9d: b3:d9:b8:3e:7b:62:14:1b:28:c4:a9:29:5f:a6:07:d3:9b:af: 8a:6e:9e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7kYBJkH2HiLOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk NDM5ZWVjMWQtMWNjMC00YzE2LTg4ZDEtNDJkYmFiOWY3NDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoEM+gFI7pUCDhUgbHrWp5nLIpq0mEDOWpBn letbnhG9DUpSjzB5mU4BgCE57bmCxNNaM3CwmI3d/O6ZfwJ1SdL3xgPgSwIWm4qG 3S425ZGj2/EX29G8HN/OtC62LN0qskUX1CRc/i/1SW/GEG8rglS8QsHhaKtCwpSI vXItg7PkQRPW523dSJEkVfl9WjV32hEb/cjvsKhWd8WXjfrqHr70PjhrlEq4bufi NYO84RCOty7GCwtoQTc+E6f7p1r0+6/TdPHaQ3pZYB5JT4LQBWM+p+jDf1HUxwfe S1Cxl55beZWHvbXlWatft0oMyZNU2LPdu0pTVczrqVXkyech+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkeyWgbDcDrrg+9/67b+SHofHwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPoXHnEJV7mDUI1I0MXBPr9ZCgUalWyBcebtZxi64zE0yPJl+6epuuY oHf2skZHVmWgbUQ0QSQMriTSB7jM66Fl0PoguhcrVRAxUYdIdYrZbGp50qTiHw+f sKFrNTiEZoXYhtchlpk8c1Kn3q8AFsbaPwI5Yn52zsmXwzzQFtDHTmp1WEtO1ofk juViYpJo6k33qBQIjoYXXFX642yWkQBO8/7Mkl3KQ5568j9/5BJvt2NHCSFmu4hS 4OQq/tDpikmoEVctyFnE/+QZSJy8Jo49SbWIxC/2RdWLSsYe8esCPi0jzIGHrPPr nbPZuD57YhQbKMSpKV+mB9Obr4punlE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:29 2025 by rpki-client