$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa File: b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json) Hash identifier: LRqCVripZlMKOLWW7CNaKh24U2G9KezqKwtCpM+8pTk= Subject key identifier: C0:38:4A:CE:47:6B:65:4A:D8:ED:16:06:21:95:13:9F:06:A5:E8:03 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BB727B8EB8C3E016703557576 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 33598 IP address blocks: 138.8.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b8:eb:8c:3e:01:67:03:55:75:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=10ed4ef3-6e78-4fa7-8c15-93e9b2f7161f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:c1:ab:eb:96:05:40:61:97:fb:17:c5:a1: f6:73:67:62:04:c9:58:ba:ab:f9:d5:97:09:ae:2d: 03:7f:46:6f:25:fa:2a:e9:cc:07:8a:b2:44:6c:19: 6f:94:b9:c3:ec:83:33:cc:44:2b:8b:b1:40:0f:50: a1:11:09:b1:9e:2c:28:60:07:f8:1f:59:b6:2e:21: 73:29:12:dc:c5:92:fd:6f:90:a2:6a:98:f6:8a:96: 48:4e:da:02:91:55:c5:04:e7:eb:bd:b0:d4:75:5b: f1:8d:dd:5f:21:f7:cc:c6:00:84:8f:cf:53:d8:58: 85:2a:51:e6:a8:fa:6d:86:6e:43:3b:e9:67:15:45: c8:ec:cf:27:c6:54:11:c1:22:7e:75:0a:88:27:ed: 68:8b:3a:e9:bd:97:75:65:08:78:45:2f:eb:c3:16: 14:3b:09:a0:3b:7c:a2:b1:0d:65:b1:17:c7:8d:58: f4:72:f3:5a:54:f3:76:71:f7:48:9d:fb:85:22:f8: 61:b1:d8:ed:9b:b0:2c:2e:b5:a6:a6:0e:d5:db:e5: aa:d9:f6:54:17:44:d2:c5:f6:b6:15:00:be:6a:6a: 13:cc:c9:7c:49:81:06:8c:32:f6:d4:07:db:d6:e6: 25:47:6b:f5:ae:cb:83:2d:eb:ef:b4:be:6b:bb:8f: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:4A:CE:47:6B:65:4A:D8:ED:16:06:21:95:13:9F:06:A5:E8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:97:b1:8d:eb:db:0c:86:d4:a5:c7:30:79:be:87:80:79:bc: b6:f5:4f:48:04:f3:11:1a:5b:d6:66:d0:9d:91:23:51:a3:bc: f7:14:8a:09:24:6c:b6:89:eb:6b:6d:76:76:66:9e:c1:46:61: aa:23:9f:24:74:e6:e1:ef:49:5d:22:7b:61:4c:e8:55:a9:6e: 5d:6a:13:60:c6:e7:42:bd:a9:48:9d:a5:c7:4b:4e:26:9a:02: b4:55:aa:19:b3:d1:8d:90:f1:16:46:a0:8f:4f:9f:b1:c7:c7: c3:5c:c6:ec:56:c5:ba:54:46:b6:62:55:69:bd:84:3f:02:6b: 95:8f:77:db:7e:18:0a:af:c0:74:11:eb:0f:ac:41:80:52:30: 3b:62:21:83:10:e3:ea:55:a0:2f:fd:f2:91:54:32:81:5b:fa: 08:dc:6a:ce:d7:f5:35:fe:4d:ac:b6:37:f1:20:c5:d2:76:8e: 8f:57:99:c0:93:c5:54:c0:ed:a3:48:d0:3d:40:1c:da:d8:ea: 3d:07:b5:4d:8c:e7:05:62:c4:f6:d5:7e:9b:04:49:4c:dd:c7: 1c:63:26:b1:7f:c3:37:74:4f:a2:93:fc:6d:2c:25:f4:4a:29: 0f:44:b5:f4:8b:6b:82:d3:1e:bb:ae:5d:3a:27:c3:9e:9f:29: 67:77:00:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7jrjD4BZwNVdXYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk MTBlZDRlZjMtNmU3OC00ZmE3LThjMTUtOTNlOWIyZjcxNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArofBq+uWBUBhl/sXxaH2c2diBMlYuqv51ZcJ ri0Df0ZvJfoq6cwHirJEbBlvlLnD7IMzzEQri7FAD1ChEQmxniwoYAf4H1m2LiFz KRLcxZL9b5Ciapj2ipZITtoCkVXFBOfrvbDUdVvxjd1fIffMxgCEj89T2FiFKlHm qPpthm5DO+lnFUXI7M8nxlQRwSJ+dQqIJ+1oizrpvZd1ZQh4RS/rwxYUOwmgO3yi sQ1lsRfHjVj0cvNaVPN2cfdInfuFIvhhsdjtm7AsLrWmpg7V2+Wq2fZUF0TSxfa2 FQC+amoTzMl8SYEGjDL21Afb1uYlR2v1rsuDLevvtL5ru49jHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA4Ss5Ha2VK2O0WBiGVE58GpegDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvYjA3YjkwNmUtMTYwMy0z OWU3LWE0NjgtNjc0Nzc2NjI1YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKXsY3r2wyG1KXHMHm+h4B5vLb1T0gE8xEaW9Zm0J2RI1GjvPcUigkk bLaJ62ttdnZmnsFGYaojnyR05uHvSV0ie2FM6FWpbl1qE2DG50K9qUidpcdLTiaa ArRVqhmz0Y2Q8RZGoI9Pn7HHx8NcxuxWxbpURrZiVWm9hD8Ca5WPd9t+GAqvwHQR 6w+sQYBSMDtiIYMQ4+pVoC/98pFUMoFb+gjcas7X9TX+Tay2N/EgxdJ2jo9XmcCT xVTA7aNI0D1AHNrY6j0HtU2M5wVixPbVfpsESUzdxxxjJrF/wzd0T6KT/G0sJfRK KQ9EtfSLa4LTHruuXTonw56fKWd3AEo= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:53 2025 by rpki-client