$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa File: 9822c890-e8ba-385d-95be-f63542145365.roa (raw, json) Hash identifier: B8KmDamq0Q1FJ80e6qIra/brGHSu+aj/IlO51UWP6z8= Subject key identifier: C4:D8:30:B1:CB:7A:84:77:BD:0A:51:62:A6:02:EC:41:A7:D0:E5:32 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BA39D29D90D407CA051943380 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 6195 IP address blocks: 138.8.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:29:d9:0d:40:7c:a0:51:94:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=147ebd9c-c86e-4f35-8266-dbc0474d3fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:fc:1c:9d:be:6b:28:de:83:f4:1a:4d:5b: a5:86:c5:28:1b:31:7a:45:df:02:bc:6b:7d:e8:df: e8:fd:20:ed:3c:c4:48:2d:11:19:b8:ce:4b:72:c7: 51:0e:ba:73:4e:6b:45:96:80:38:07:6c:90:94:fe: 86:36:5f:eb:43:d7:90:5e:e1:c3:60:38:b0:cb:87: 30:40:c5:02:a0:80:b6:b0:dc:89:49:ee:9f:8b:54: d0:6e:32:37:8a:a0:6e:93:6d:d0:58:66:84:db:78: b2:0c:01:a6:e1:c6:a6:e2:9a:f0:e8:61:77:1c:47: 51:48:47:7d:04:08:cb:ba:14:b5:69:7e:0c:b2:3d: 7b:51:b9:8f:5e:b5:7e:53:3d:24:55:cc:c9:d5:bd: cd:d8:49:b7:8c:b8:de:5c:6c:49:f8:1e:07:ba:bc: 8e:79:d3:89:9a:f5:42:35:ca:26:28:21:df:32:ab: 94:32:e5:4d:d1:38:5c:53:ed:99:fe:c9:96:f7:aa: 8a:0b:54:7f:02:88:82:97:8f:b2:6f:3f:15:9f:08: 10:a9:13:59:c3:cf:71:40:31:2c:c9:e7:ea:d6:4b: 34:65:14:84:08:bb:38:9b:52:21:76:06:b1:65:5b: 70:c4:58:e4:9e:16:13:7b:29:90:da:f0:46:2d:ec: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:30:B1:CB:7A:84:77:BD:0A:51:62:A6:02:EC:41:A7:D0:E5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9822c890-e8ba-385d-95be-f63542145365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:76:10:3d:8c:cb:f9:26:79:07:58:23:be:a0:14:89:cb:ca: 11:59:c4:2b:52:26:ad:ea:29:9f:92:54:4b:f4:73:34:00:57: 37:5f:be:7a:20:46:4e:25:0a:33:90:2f:1c:d7:b4:90:f4:ad: 6a:b3:3c:30:1d:18:35:51:a8:ea:77:e6:50:8d:fd:50:d5:e0: 88:4f:9f:9e:03:3c:27:97:ae:20:15:76:12:67:05:83:7b:d4: 08:0c:bf:bf:c5:a0:16:01:11:a3:b1:99:72:4c:37:85:c1:f5: 07:61:a5:62:f8:db:3a:07:9f:22:cd:a3:6f:d7:3a:77:e4:bb: 25:19:30:19:63:56:90:f7:87:9f:d7:fa:8c:0f:a3:2b:bf:84: 59:a7:de:70:ea:fd:69:9b:57:38:ff:41:fb:4e:bc:e4:f4:b0: 10:11:06:dc:ea:84:d1:82:4d:01:00:ae:de:16:58:2c:b2:63: 0c:68:f8:cb:28:4c:eb:8f:0d:c8:90:91:33:5d:e4:45:46:7f: ff:5c:eb:ea:4d:7e:24:3f:8e:13:a2:49:c4:6d:be:89:52:3f: d2:f8:e4:5d:be:41:36:e4:2b:3a:c7:83:bd:db:31:56:fb:56: 72:62:59:2a:36:11:b7:16:f9:72:99:d2:60:22:fc:29:c1:66: f4:bd:03:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSnZDUB8oFGUM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTQ3ZWJkOWMtYzg2ZS00ZjM1LTgyNjYtZGJjMDQ3NGQzZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPP8HJ2+ayjeg/QaTVulhsUoGzF6Rd8CvGt9 6N/o/SDtPMRILREZuM5LcsdRDrpzTmtFloA4B2yQlP6GNl/rQ9eQXuHDYDiwy4cw QMUCoIC2sNyJSe6fi1TQbjI3iqBuk23QWGaE23iyDAGm4cam4prw6GF3HEdRSEd9 BAjLuhS1aX4Msj17UbmPXrV+Uz0kVczJ1b3N2Em3jLjeXGxJ+B4HuryOedOJmvVC NcomKCHfMquUMuVN0ThcU+2Z/smW96qKC1R/AoiCl4+ybz8VnwgQqRNZw89xQDEs yefq1ks0ZRSECLs4m1IhdgaxZVtwxFjknhYTeymQ2vBGLezC4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTYMLHLeoR3vQpRYqYC7EGn0OUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTgyMmM4OTAtZThiYS0z ODVkLTk1YmUtZjYzNTQyMTQ1MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh2ED2My/kmeQdYI76gFInLyhFZxCtSJq3qKZ+SVEv0czQAVzdfvnog Rk4lCjOQLxzXtJD0rWqzPDAdGDVRqOp35lCN/VDV4IhPn54DPCeXriAVdhJnBYN7 1AgMv7/FoBYBEaOxmXJMN4XB9QdhpWL42zoHnyLNo2/XOnfkuyUZMBljVpD3h5/X +owPoyu/hFmn3nDq/WmbVzj/QftOvOT0sBARBtzqhNGCTQEArt4WWCyyYwxo+Mso TOuPDciQkTNd5EVGf/9c6+pNfiQ/jhOiScRtvolSP9L45F2+QTbkKzrHg73bMVb7 VnJiWSo2EbcW+XKZ0mAi/CnBZvS9A8U= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:04 2025 by rpki-client