$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa File: cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa (raw, json) Hash identifier: bQFgx2wq+utWBbJ1DT0WiPch1IU8EpsCJlwDdV4MK6w= Subject key identifier: 05:5B:34:14:CD:C3:76:E3:CD:8F:7C:6B:70:E6:92:9C:12:D6:78:36 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BA39D29CC069ABF419CD58500 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 6195 IP address blocks: 138.8.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:29:cc:06:9a:bf:41:9c:d5:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=fc586c4f-52db-4c09-bbc5-79652d1fa49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:2a:b0:1c:7e:08:71:be:a7:e4:c4:a7:a1: 7d:f9:fa:9c:f4:68:e6:ad:d7:a5:1c:33:c0:f3:a6: d1:52:fe:91:27:00:ad:f8:8e:c9:15:99:a0:b6:47: 29:84:21:d9:76:7e:b2:99:a5:3d:d8:dc:cf:a1:a5: 79:d3:16:71:08:c1:4c:f2:bc:23:f8:01:3e:e2:82: 90:b6:60:e7:43:8a:3b:96:a3:d8:2a:a9:95:8b:db: 36:1c:6c:d4:a0:56:b6:0a:4c:8a:94:d3:45:44:bf: 64:e8:77:2c:e8:ae:71:1a:eb:e2:a2:0b:a0:20:a1: e5:85:d6:ad:f5:df:1c:b8:51:38:3f:3e:3c:71:8e: 7f:a9:08:63:52:60:f4:4b:ff:95:70:7e:eb:06:a1: 47:65:9c:34:8f:3b:84:80:63:9a:4b:47:3a:d6:16: 69:33:00:0f:96:a7:94:b4:16:a6:d0:29:58:66:2b: ba:c4:01:d2:8f:d6:c1:ed:59:4e:a5:a6:a4:f7:87: 71:94:7d:f3:40:d4:b6:bc:c8:c6:a5:e0:df:06:dd: 30:7d:ad:ca:ea:54:2d:38:94:46:63:88:1d:77:a9: 9f:1c:a7:20:87:07:ae:95:e1:93:cb:d3:61:6f:0c: 30:ea:7d:97:d6:58:91:06:09:7f:4c:d1:bc:0a:6b: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5B:34:14:CD:C3:76:E3:CD:8F:7C:6B:70:E6:92:9C:12:D6:78:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4a:b7:5a:dc:6f:5f:63:05:9a:e3:96:30:67:ba:c4:8f:ad: 7c:0e:38:bf:53:f3:1c:0c:00:ae:25:bd:61:0d:8c:87:f9:25: 39:86:1a:b6:54:f8:2a:ef:79:93:85:40:f4:c5:ca:07:87:b9: 35:d8:56:85:9a:0a:b0:53:58:af:3a:32:17:4e:7d:38:8a:9b: 4e:a7:1a:fa:3f:d2:6f:67:3f:bf:d9:44:7c:60:3e:d7:5c:07: d4:9a:88:83:27:ce:2e:a9:c6:79:df:81:ff:8b:71:3e:4d:22: 3f:65:d0:ac:64:b3:8e:e5:84:2d:99:38:69:20:09:29:59:62: 01:68:7f:e2:b4:24:63:cf:dd:61:c3:85:7e:30:fe:23:5d:f3: ec:7d:0c:06:06:7d:87:35:15:20:73:ce:35:9d:b4:0b:4b:9b: 0a:4d:88:8d:96:e0:87:4e:8c:b6:ea:9e:ff:ab:91:1b:75:40: 6b:c8:45:87:fe:70:71:90:18:68:c9:7b:20:ce:05:d3:06:8e: 63:f0:0d:b5:f3:45:ca:e7:6a:40:bb:46:41:a3:5d:fa:93:37: 59:69:ea:00:e9:fd:6d:61:03:83:c8:d6:b0:90:75:92:c8:2c: 72:5f:5d:67:20:01:74:af:55:9f:db:f1:3f:a1:05:8d:3e:a6: e6:2f:96:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSnMBpq/QZzVhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZmM1ODZjNGYtNTJkYi00YzA5LWJiYzUtNzk2NTJkMWZhNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFkqsBx+CHG+p+TEp6F9+fqc9GjmrdelHDPA 86bRUv6RJwCt+I7JFZmgtkcphCHZdn6ymaU92NzPoaV50xZxCMFM8rwj+AE+4oKQ tmDnQ4o7lqPYKqmVi9s2HGzUoFa2CkyKlNNFRL9k6Hcs6K5xGuviogugIKHlhdat 9d8cuFE4Pz48cY5/qQhjUmD0S/+VcH7rBqFHZZw0jzuEgGOaS0c61hZpMwAPlqeU tBam0ClYZiu6xAHSj9bB7VlOpaak94dxlH3zQNS2vMjGpeDfBt0wfa3K6lQtOJRG Y4gdd6mfHKcghweuleGTy9Nhbwww6n2X1liRBgl/TNG8CmulhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVbNBTNw3bjzY98a3DmkpwS1ng2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvY2Q4ZjY5MTktYmE4Zi0z MjJjLTg1MDUtYzlmMmFkZDhlYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlKt1rcb19jBZrjljBnusSPrXwOOL9T8xwMAK4lvWENjIf5JTmGGrZU +CrveZOFQPTFygeHuTXYVoWaCrBTWK86MhdOfTiKm06nGvo/0m9nP7/ZRHxgPtdc B9SaiIMnzi6pxnnfgf+LcT5NIj9l0Kxks47lhC2ZOGkgCSlZYgFof+K0JGPP3WHD hX4w/iNd8+x9DAYGfYc1FSBzzjWdtAtLmwpNiI2W4IdOjLbqnv+rkRt1QGvIRYf+ cHGQGGjJeyDOBdMGjmPwDbXzRcrnakC7RkGjXfqTN1lp6gDp/W1hA4PI1rCQdZLI LHJfXWcgAXSvVZ/b8T+hBY0+puYvlnQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:18 2025 by rpki-client