$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa File: 0921fd38-7f09-3761-bb31-ec250eef6f0d.roa (raw, json) Hash identifier: mrdhn9QhSUN0gVfRYVkDFrzEekw5+1ksMbc9On3TLew= Subject key identifier: 09:7B:E8:D3:7B:90:B2:0E:01:BD:14:26:D7:B0:47:17:9B:9A:B4:AB Certificate issuer: /CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Certificate serial: 010D0C9F4328584AF256A215A2713F20011A0D80 Authority key identifier: 1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 393873 IP address blocks: 192.138.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a2:15:a2:71:3f:20:01:1a:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=f14a9af3-bfa9-4262-a231-34dbaafceef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:9c:20:1c:bb:ec:db:7f:13:ab:99:e4:36: 61:96:e4:b6:f2:e6:7c:2d:d9:be:3c:84:2b:64:e5: 86:4e:88:d6:31:64:5e:f6:55:c2:5c:61:4c:65:fa: 72:3e:1b:9f:fd:00:82:5f:d6:0a:96:47:aa:8b:1b: ab:1e:c3:87:65:ed:48:a1:c7:8c:87:5c:54:78:0e: 82:c7:8f:a6:ff:db:df:0f:73:25:cc:b7:f4:9f:bb: d0:a8:5c:92:9a:09:64:33:ec:65:60:6f:56:a6:f3: 1c:79:50:83:3e:4e:d7:ef:65:54:c5:ec:a0:63:30: da:24:65:35:ad:0b:3c:4b:78:8c:cf:7d:56:62:17: 7c:3d:22:96:96:db:62:e1:66:ea:ca:b8:e9:79:45: df:ad:f5:2f:a0:d7:d1:6b:29:64:4a:93:2a:74:fe: b6:21:7f:ca:30:63:c3:88:54:7a:4f:03:9d:d9:05: 03:ba:e1:3d:11:8b:a2:7d:11:54:be:d3:2f:b2:b1: f0:0a:c2:68:a6:0d:1a:ef:96:27:8a:6e:9c:73:e9: 34:9a:7d:22:62:30:36:39:9b:87:10:cf:30:b4:72: b8:fd:eb:e4:bf:a7:04:71:14:bd:e3:a0:98:c6:8a: 44:20:da:30:9e:a0:f3:bf:6f:cd:f1:f5:1d:7d:6a: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:E8:D3:7B:90:B2:0E:01:BD:14:26:D7:B0:47:17:9B:9A:B4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.crl X509v3 Authority Key Identifier: keyid:1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer sbgp-ipAddrBlock: critical IPv4: 192.138.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:da:1b:13:b2:c9:18:83:1d:45:22:79:66:a2:c1:04:40:4f: e2:98:dc:a4:eb:91:17:49:96:a0:ab:84:c2:c5:53:85:d0:e0: d5:ba:6e:36:30:47:8e:7a:a4:3a:1d:a8:d5:06:9d:cd:25:d4: bb:48:a4:2c:b6:7b:0b:36:48:67:7d:9f:0a:82:24:25:32:c0: 55:93:e1:9d:98:76:75:a1:7e:ff:fd:18:4e:64:65:09:23:42: 48:43:06:55:79:6a:75:92:58:f6:07:7e:03:f4:05:ad:cd:df: e0:f0:0a:e3:c5:07:48:50:73:91:9d:bb:10:86:12:da:06:b3: 49:a6:8c:b6:bf:ce:6d:d2:7d:2e:58:5b:28:71:19:69:a4:ed: 31:2e:f2:6a:a5:11:75:e8:15:47:83:6d:11:79:34:1a:bd:97: 56:49:4a:db:42:b3:82:11:7c:76:52:c0:bd:9a:86:20:58:78: d9:43:df:73:dc:08:49:7a:69:b0:39:8a:42:d0:f4:6f:0d:5c: 6a:44:3f:77:66:74:ba:10:53:d8:9e:75:f6:39:94:c2:09:b9: d9:1c:65:81:f6:a7:61:72:b0:a2:da:7e:1c:b7:05:7a:db:82: 02:0f:1c:45:40:0e:3f:d4:87:ba:cc:ff:20:b8:c8:9d:dd:73: 25:08:da:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqIVonE/IAEaDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM2ZWZhMzMtNWNhMi00YjM1LThmNjMtMjllZjJmZjNh YmY4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZjE0YTlhZjMtYmZhOS00MjYyLWEyMzEtMzRkYmFhZmNlZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ScIBy77Nt/E6uZ5DZhluS28uZ8Ldm+PIQr ZOWGTojWMWRe9lXCXGFMZfpyPhuf/QCCX9YKlkeqixurHsOHZe1IoceMh1xUeA6C x4+m/9vfD3MlzLf0n7vQqFySmglkM+xlYG9WpvMceVCDPk7X72VUxeygYzDaJGU1 rQs8S3iMz31WYhd8PSKWltti4WbqyrjpeUXfrfUvoNfRaylkSpMqdP62IX/KMGPD iFR6TwOd2QUDuuE9EYuifRFUvtMvsrHwCsJopg0a75Ynim6cc+k0mn0iYjA2OZuH EM8wtHK4/evkv6cEcRS946CYxopEINownqDzv2/N8fUdfWqTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl76NN7kLIOAb0UJtewRxebmrSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzZl ZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVmMmZmM2FiZjgvMDkyMWZkMzgtN2YwOS0z NzYxLWJiMzEtZWMyNTBlZWY2ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmM2ZWZhMzMtNWNhMi00YjM1LThm NjMtMjllZjJmZjNhYmY4LzJjNmVmYTMzLTVjYTItNGIzNS04ZjYzLTI5ZWYyZmYz YWJmOC5jcmwwHwYDVR0jBBgwFoAUGttbh9he8BCNlPzXpDLbKkGIBSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzZlZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVm MmZmM2FiZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHaGxOyyRiDHUUieWaiwQRAT+KY3KTrkRdJlqCrhMLFU4XQ4NW6bjYw R456pDodqNUGnc0l1LtIpCy2ews2SGd9nwqCJCUywFWT4Z2YdnWhfv/9GE5kZQkj QkhDBlV5anWSWPYHfgP0Ba3N3+DwCuPFB0hQc5GduxCGEtoGs0mmjLa/zm3SfS5Y WyhxGWmk7TEu8mqlEXXoFUeDbRF5NBq9l1ZJSttCs4IRfHZSwL2ahiBYeNlD33Pc CEl6abA5ikLQ9G8NXGpEP3dmdLoQU9iedfY5lMIJudkcZYH2p2FysKLafhy3BXrb ggIPHEVADj/Uh7rM/yC4yJ3dcyUI2lQ= -----END CERTIFICATE-----Generated at Sun Aug 24 13:35:59 2025 by rpki-client