$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: 7i9Jb4bRAeNpvkErkFqBUPx66ERobE9yZ4esIpPxu6Q= Subject key identifier: BE:C0:E2:AC:81:3D:56:E4:2A:98:42:2D:82:A9:64:59:1E:E5:D6:9A Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BB727B89221A6B984A1B70700 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b8:92:21:a6:b9:84:a1:b7:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=6793a8b7-83ea-41c6-b82e-1b31a700368c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:13:5c:8f:7b:02:66:91:80:dc:ec:12:64:f6: 02:02:aa:01:db:10:66:38:63:4f:98:ac:11:e4:e7: e2:c3:43:6a:ac:aa:96:25:e4:64:e5:1b:6e:c9:86: 94:f8:bd:5a:25:37:5f:aa:94:70:dd:65:c2:da:a6: f6:99:fd:a0:5b:b7:d5:ca:22:b4:7a:91:b5:88:1f: c3:45:d3:26:d0:aa:36:86:74:5e:cc:38:f2:bd:f7: 92:2e:04:fd:fe:e1:dd:02:da:42:0d:d9:b1:0a:56: ba:8f:9c:3b:ea:f4:0d:4f:94:0c:62:05:a8:b5:64: da:90:e7:74:10:30:3a:df:90:48:2e:bb:21:6d:66: a5:e6:c7:03:1d:b5:bd:71:e0:8c:6f:4c:28:e7:b6: ce:62:03:16:88:9a:9e:aa:b5:80:22:78:dd:9f:21: e0:66:22:8b:9f:a3:1c:c8:63:ea:96:8d:a6:f2:f2: 39:71:56:16:ce:a1:ed:9d:e1:f7:a7:62:48:dd:7b: 8f:7c:e9:14:eb:ba:80:10:b9:38:7e:01:e6:bb:ca: e7:5f:59:f8:a5:5d:1b:7e:37:13:5b:74:3d:b8:b2: 8e:1f:4a:83:e2:f6:74:11:dc:8c:2d:eb:8a:15:20: af:5d:a1:0b:0a:8f:14:29:fb:4b:a3:14:62:e9:08: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C0:E2:AC:81:3D:56:E4:2A:98:42:2D:82:A9:64:59:1E:E5:D6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a6:d2:44:43:6c:3f:00:9a:9d:d3:a8:8e:7f:9f:2b:ca:db: 18:c6:8f:26:3d:bb:7c:b5:c2:fb:34:bf:38:f9:ba:64:e0:74: 4d:51:11:b5:ab:7a:f7:17:78:a1:94:ec:e6:5b:09:ab:58:b6: 9e:3e:34:3b:87:a2:ca:03:38:a6:55:15:72:9c:0b:1f:0d:43: 7e:46:06:5f:ba:12:06:bf:ac:d7:ec:c7:58:94:9f:ed:35:e9: 4a:bb:d5:09:0b:d5:7d:d6:75:f7:2b:7e:f0:72:42:96:17:05: c2:68:f9:be:a2:a3:e4:82:95:6c:9f:f8:a0:01:6c:8a:b7:6a: 2a:9c:0f:02:8d:bf:81:59:de:4b:28:97:33:a0:24:46:f8:59: 39:57:3c:5c:9a:74:c5:4a:64:36:e0:b6:a5:3e:f8:da:64:83: 3d:6f:44:b5:44:bc:ae:44:90:f6:1f:cc:43:ab:90:82:b4:16: 9e:9f:c0:2f:53:d2:8b:2c:6e:fb:7e:9b:c2:33:ab:9d:44:65: e7:c1:5a:87:3c:73:fe:d7:ff:9e:a4:04:15:12:47:bc:c6:60: 97:dd:32:21:74:f9:b9:b5:eb:cf:e7:6e:a6:25:d1:4b:4d:df: 00:e6:7f:19:31:cd:d0:81:2c:62:e7:4e:65:ed:f8:93:54:8b: c5:9d:7f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7iSIaa5hKG3BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk Njc5M2E4YjctODNlYS00MWM2LWI4MmUtMWIzMWE3MDAzNjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBNcj3sCZpGA3OwSZPYCAqoB2xBmOGNPmKwR 5Ofiw0NqrKqWJeRk5RtuyYaU+L1aJTdfqpRw3WXC2qb2mf2gW7fVyiK0epG1iB/D RdMm0Ko2hnRezDjyvfeSLgT9/uHdAtpCDdmxCla6j5w76vQNT5QMYgWotWTakOd0 EDA635BILrshbWal5scDHbW9ceCMb0wo57bOYgMWiJqeqrWAInjdnyHgZiKLn6Mc yGPqlo2m8vI5cVYWzqHtneH3p2JI3XuPfOkU67qAELk4fgHmu8rnX1n4pV0bfjcT W3Q9uLKOH0qD4vZ0EdyMLeuKFSCvXaELCo8UKftLoxRi6QghXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7A4qyBPVbkKphCLYKpZFke5daaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICm0kRDbD8Amp3TqI5/nyvK2xjGjyY9u3y1wvs0vzj5umTgdE1REbWr evcXeKGU7OZbCatYtp4+NDuHosoDOKZVFXKcCx8NQ35GBl+6Ega/rNfsx1iUn+01 6Uq71QkL1X3WdfcrfvByQpYXBcJo+b6io+SClWyf+KABbIq3aiqcDwKNv4FZ3kso lzOgJEb4WTlXPFyadMVKZDbgtqU++Npkgz1vRLVEvK5EkPYfzEOrkIK0Fp6fwC9T 0ossbvt+m8Izq51EZefBWoc8c/7X/56kBBUSR7zGYJfdMiF0+bm168/nbqYl0UtN 3wDmfxkxzdCBLGLnTmXt+JNUi8Wdf4M= -----END CERTIFICATE-----Generated at Wed Nov 5 11:31:41 2025 by rpki-client