$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa File: 1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa (raw, json) Hash identifier: 27oV/1mgvmcGaQs3QgCTCoKjnFQkJox8njyQ5qVp1tM= Subject key identifier: CC:0A:55:0F:82:7F:2B:33:4A:EB:BB:74:FD:FF:99:89:95:7A:FD:40 Certificate issuer: /CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe Certificate serial: 010D0C9F4328584AF0F14214460E338747BD5180 Authority key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 63436 IP address blocks: 138.43.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:42:14:46:0e:33:87:47:bd:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=09bdc7c7-83aa-4018-97d2-85b030a7ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:35:0a:5d:ab:3c:3c:24:47:ad:d1:81:db: 8f:a5:0b:7d:48:da:85:3f:eb:77:07:0e:e5:1a:20: 09:f0:47:18:d4:4e:4f:a6:96:db:4d:6f:1f:5a:38: 9e:2a:c8:e8:fc:e3:db:d7:e1:1a:c1:cc:93:6e:aa: ed:10:7c:74:91:84:b1:21:a5:fa:0a:74:3c:6b:8b: b5:6c:48:e8:37:44:9a:b9:56:5e:4e:9d:98:c5:71: 49:19:0e:86:7f:1c:8f:5c:a7:e8:9d:bc:59:fe:2d: 26:b5:82:dc:e2:b1:07:f9:8f:cf:9f:ea:c1:ae:20: 63:ea:da:b3:56:53:ee:71:2c:18:ca:56:c2:e5:c5: fa:38:cb:95:ef:b2:d1:50:27:55:3c:6b:d9:df:1f: 37:4f:d0:18:ca:33:41:33:b1:e6:bc:0d:ea:46:0d: 43:31:10:92:70:e0:f2:a2:6e:34:ab:83:24:bb:e1: 85:89:54:75:46:01:14:63:04:fd:bc:f4:2d:9a:71: bf:bb:e3:fe:25:c8:2b:12:7a:32:5f:ee:6b:ba:66: 5e:79:ff:35:dc:e9:0b:1a:3d:7e:03:2b:ae:98:6c: 8f:50:d8:39:7b:27:e5:51:d4:71:2b:ed:7e:1e:da: a0:f4:19:3e:2b:23:69:04:35:93:b8:59:01:d2:6a: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0A:55:0F:82:7F:2B:33:4A:EB:BB:74:FD:FF:99:89:95:7A:FD:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl X509v3 Authority Key Identifier: keyid:D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer sbgp-ipAddrBlock: critical IPv4: 138.43.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:fb:e0:0d:e3:8d:96:96:aa:5b:d9:06:9c:30:21:73:d5:be: b6:e8:72:a9:15:07:18:0d:f5:d1:ce:da:54:fc:4e:19:6c:12: 7d:62:61:15:98:af:da:04:bc:06:fa:e0:c2:18:c6:8f:4c:a3: 6f:8c:b2:0a:81:4c:97:6e:a3:d7:8a:de:28:31:6b:e4:d6:76: 44:cc:ff:f2:a9:75:c7:7a:12:48:93:3d:42:a4:ad:28:d5:5c: 6a:fe:d4:4f:5c:4e:91:2f:a1:79:5f:b2:7e:75:b9:41:3a:07: fc:b1:90:20:4d:10:98:58:21:7c:02:b7:d7:02:3e:ed:fd:08: 90:53:fe:68:64:d1:d9:7d:c0:c3:a6:10:4c:03:7d:84:b2:27: e9:70:b7:ac:96:c5:d0:ce:32:a9:98:72:c1:32:eb:9f:06:8b: d8:24:40:08:50:25:f7:8e:05:d4:b4:a5:cd:f4:51:0c:11:10: b0:39:15:4c:25:db:b6:fe:f0:b0:4d:84:fb:8e:44:d8:70:cd: fa:ba:98:30:70:5b:e2:28:ee:bc:ce:d5:67:8a:a2:7d:3e:74: 1a:66:c8:47:33:75:e8:de:b2:31:cd:e1:70:10:28:b0:98:b7: d7:b9:4e:32:e1:22:6b:c6:12:79:10:d1:7f:08:55:da:67:0c: b9:f0:15:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UIURg4zh0e9UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjNDAxMTItYmM4NS00Zjc1LTliYjAtNDcxZWM4NGJh M2ZlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDliZGM3YzctODNhYS00MDE4LTk3ZDItODViMDMwYTdjY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsc1Cl2rPDwkR63RgduPpQt9SNqFP+t3Bw7l GiAJ8EcY1E5PppbbTW8fWjieKsjo/OPb1+EawcyTbqrtEHx0kYSxIaX6CnQ8a4u1 bEjoN0SauVZeTp2YxXFJGQ6GfxyPXKfonbxZ/i0mtYLc4rEH+Y/Pn+rBriBj6tqz VlPucSwYylbC5cX6OMuV77LRUCdVPGvZ3x83T9AYyjNBM7HmvA3qRg1DMRCScODy om40q4Mku+GFiVR1RgEUYwT9vPQtmnG/u+P+JcgrEnoyX+5rumZeef813OkLGj1+ AyuumGyPUNg5eyflUdRxK+1+Htqg9Bk+KyNpBDWTuFkB0mrZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwKVQ+CfyszSuu7dP3/mYmVev1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMGM0 MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0YmEzZmUvMWMyZjE0OWQtMzNmMS0z YTIwLThkNjEtOWJhYzM0ZWZiMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTBjNDAxMTItYmM4NS00Zjc1LTli YjAtNDcxZWM4NGJhM2ZlLzEwYzQwMTEyLWJjODUtNGY3NS05YmIwLTQ3MWVjODRi YTNmZS5jcmwwHwYDVR0jBBgwFoAU2OJcD1iYlNnHcbK+9mKxgReIKrgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFl Yzg0YmEzZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiit4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn74A3jjZaWqlvZBpwwIXPVvrbocqkVBxgN9dHO2lT8ThlsEn1iYRWY r9oEvAb64MIYxo9Mo2+MsgqBTJduo9eK3igxa+TWdkTM//Kpdcd6EkiTPUKkrSjV XGr+1E9cTpEvoXlfsn51uUE6B/yxkCBNEJhYIXwCt9cCPu39CJBT/mhk0dl9wMOm EEwDfYSyJ+lwt6yWxdDOMqmYcsEy658Gi9gkQAhQJfeOBdS0pc30UQwRELA5FUwl 27b+8LBNhPuORNhwzfq6mDBwW+Io7rzO1WeKon0+dBpmyEczdejesjHN4XAQKLCY t9e5TjLhImvGEnkQ0X8IVdpnDLnwFf8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:39 2025 by rpki-client