$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa File: 08bf3928-b054-3129-9d08-db2f618766b2.roa (raw, json) Hash identifier: Hsnx0rpI05AF5X1wNEUOWI7VCfN2RPohQJaBaaQBOzg= Subject key identifier: 86:BB:9A:80:87:58:D5:FC:49:EC:90:81:FE:E7:F8:CF:EC:33:2B:22 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584B3DB6FFE833814AF962518380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 14061 IP address blocks: 138.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:ff:e8:33:81:4a:f9:62:51:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bc52f38f-18c5-4fa4-a6cd-0d0d199ffb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:00:82:69:6b:5a:e2:36:83:39:60:95:36: 4f:4d:f7:c1:85:58:66:dd:82:d9:c0:94:48:a5:21: d9:ac:93:69:1c:97:59:d9:a0:b8:ec:1e:a7:2e:2f: a7:38:65:93:46:61:7d:53:b0:06:77:16:2b:de:cf: d2:d9:d5:76:21:f9:13:c5:57:35:b8:53:40:f1:be: dd:4f:de:8f:ff:22:c4:8e:50:6e:ff:34:83:3d:5f: 7b:f9:2a:69:db:11:f2:21:d5:89:b9:0a:b5:fb:67: e7:da:f5:2a:7d:40:64:f1:b2:d5:0a:74:71:70:bf: ef:8a:93:ee:70:4a:66:0c:ee:83:0f:66:49:bf:86: 10:ff:69:e7:28:77:c5:a8:93:c5:3d:9b:06:11:3e: 8b:1a:ee:5c:9a:7d:37:f3:22:a6:31:5e:3e:87:43: 19:77:47:b4:8b:ed:ab:f8:fe:c9:59:c6:40:18:f3: b5:f5:7b:81:fd:39:0e:83:13:7e:50:f6:22:46:ff: d8:3d:d8:a5:b4:97:ea:77:ad:24:9e:eb:60:dd:88: 65:0a:49:91:bf:5b:15:94:d1:76:fd:2a:67:4a:4e: 1b:7b:0b:3a:ab:63:6e:ca:50:e2:01:ae:b9:14:ac: 83:5d:0a:48:fd:ea:bd:62:c2:df:4b:c2:b2:63:3e: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:9A:80:87:58:D5:FC:49:EC:90:81:FE:E7:F8:CF:EC:33:2B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 138.68.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:53:5e:5f:38:b4:48:cc:c4:e6:b5:3f:62:0d:76:ad:f2:d1: 7b:da:6f:d7:94:53:50:6f:42:1b:66:27:5a:ce:85:93:e4:b3: 62:5a:26:7b:a9:67:0e:cf:8e:64:75:2a:c9:e5:56:f1:ae:9b: 7e:b4:3e:4b:e5:c8:b3:69:ca:62:c6:66:cd:09:52:67:c4:cf: 07:42:53:60:ca:55:95:56:bb:05:6d:99:d0:21:05:f2:82:b2: 64:84:95:73:4e:1e:a3:b9:35:3e:ec:47:6d:e6:cd:a9:78:70: 08:d6:be:35:f6:23:a1:09:fc:7d:8c:e9:6c:70:3a:27:76:ca: ef:98:dc:b6:a3:0e:21:de:8d:53:89:15:24:bf:00:e6:c1:7e: 9a:33:8d:b1:07:30:77:84:71:24:85:f9:7e:70:49:5f:80:3a: 6a:22:3c:3b:0c:75:69:c2:70:95:77:18:e6:12:9f:4a:30:56: d7:ae:4d:19:e2:1a:60:cf:f5:af:d5:dc:d5:b0:d5:33:c7:d3: aa:e9:a2:e1:8e:79:fc:f4:aa:cd:0f:68:d2:ec:f3:f3:b7:3f: 9d:b7:6b:79:64:fa:3b:e9:e2:46:26:ea:05:1a:3d:55:92:ec: 00:45:5f:d2:ba:2e:0c:24:16:d3:33:2d:23:97:b2:0e:5d:6d: 62:8e:60:d2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs9tv/oM4FK+WJRg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmM1MmYzOGYtMThjNS00ZmE0LWE2Y2QtMGQwZDE5OWZmYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCEAgmlrWuI2gzlglTZPTffBhVhm3YLZwJRI pSHZrJNpHJdZ2aC47B6nLi+nOGWTRmF9U7AGdxYr3s/S2dV2IfkTxVc1uFNA8b7d T96P/yLEjlBu/zSDPV97+Spp2xHyIdWJuQq1+2fn2vUqfUBk8bLVCnRxcL/vipPu cEpmDO6DD2ZJv4YQ/2nnKHfFqJPFPZsGET6LGu5cmn038yKmMV4+h0MZd0e0i+2r +P7JWcZAGPO19XuB/TkOgxN+UPYiRv/YPdiltJfqd60knutg3YhlCkmRv1sVlNF2 /SpnSk4bews6q2NuylDiAa65FKyDXQpI/eq9YsLfS8KyYz4YpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIa7moCHWNX8SeyQgf7n+M/sMysiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMDhiZjM5MjgtYjA1NC0z MTI5LTlkMDgtZGIyZjYxODc2NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAikQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZ1NeXzi0SMzE5rU/Yg12rfLRe9pv15RTUG9CG2YnWs6Fk+SzYlome6ln Ds+OZHUqyeVW8a6bfrQ+S+XIs2nKYsZmzQlSZ8TPB0JTYMpVlVa7BW2Z0CEF8oKy ZISVc04eo7k1PuxHbebNqXhwCNa+NfYjoQn8fYzpbHA6J3bK75jctqMOId6NU4kV JL8A5sF+mjONsQcwd4RxJIX5fnBJX4A6aiI8Owx1acJwlXcY5hKfSjBW165NGeIa YM/1r9Xc1bDVM8fTqumi4Y55/PSqzQ9o0uzz87c/nbdreWT6O+niRibqBRo9VZLs AEVf0rouDCQW0zMtI5eyDl1tYo5g0g== -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:05 2025 by rpki-client