$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa File: ebbe6513-77c1-312f-b035-be5606ebaf77.roa (raw, json) Hash identifier: N9ErbBuCu3G5gJl7JGRJNDuprYZJ6qzeUo3TFEzPKZ0= Subject key identifier: 54:D2:98:CD:02:A6:B5:24:9B:22:41:6F:35:88:74:DB:4A:B5:4F:6B Certificate issuer: /CN=e0cdac38-6681-4b09-b992-31d2030b8796 Certificate serial: 010D0C9F4328584B4616FE654E1935831EFC3200 Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 138.133.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fe:65:4e:19:35:83:1e:fc:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=10c3a4d8-a935-4173-b822-02dbf1b7696c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:d8:3d:f2:90:fd:97:f7:1c:50:f8:e8:55: 88:cd:b5:e2:79:03:d3:f2:6e:83:c1:5b:6e:92:ab: ef:58:e7:9d:67:5f:8a:a2:06:97:31:24:7b:21:71: 34:5e:39:96:bc:b0:99:af:e0:98:a1:63:14:0e:ea: 06:66:48:f8:54:c9:c7:02:32:93:69:c2:8e:10:0d: 68:aa:84:1b:11:7a:1c:de:63:a1:b3:60:d5:e2:41: 38:f8:d1:c1:18:5e:fa:4c:43:bb:03:fd:6b:07:3a: ef:67:b4:4b:02:8d:6b:23:54:15:88:8d:ec:b9:ca: 63:58:55:ca:14:85:98:83:94:5f:09:54:80:b0:c9: 13:2c:15:9a:df:ea:2a:b6:39:28:01:d7:9d:dd:d6: 48:46:60:94:3e:bf:31:36:fb:f1:23:1d:75:89:77: cb:55:3e:22:7a:27:a6:56:32:82:7a:90:ca:61:fc: d6:fd:c6:89:46:33:53:98:78:d0:e3:0d:29:75:b7: c2:65:3b:86:f9:59:1a:d1:bf:7f:9e:bb:e1:95:51: 72:e1:00:ef:86:ff:4d:27:9f:0e:b6:48:e3:1b:42: 3d:63:8a:53:23:63:ba:dd:49:2b:84:04:14:4b:e7: ac:fe:95:42:61:72:34:88:21:a1:3c:dd:8e:84:c1: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D2:98:CD:02:A6:B5:24:9B:22:41:6F:35:88:74:DB:4A:B5:4F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl X509v3 Authority Key Identifier: keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer sbgp-ipAddrBlock: critical IPv4: 138.133.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:08:db:39:f5:c8:79:ce:15:69:02:70:41:72:49:34:da:41: 9a:9f:b7:89:b6:a3:c7:e1:2e:a0:39:cf:b5:51:63:9b:4c:5d: 40:79:08:62:af:2a:a0:86:d2:bf:0e:58:83:34:15:e8:4d:1d: be:17:4f:ce:25:03:ed:8d:03:f7:55:9f:09:b9:03:22:79:ca: 5c:ac:36:f1:da:e9:32:a0:25:f6:c1:06:08:27:a3:04:3c:64: 56:d8:d6:27:ef:8c:e6:47:33:9c:5b:6a:2b:10:eb:c3:ff:7b: 87:8d:4b:9e:0d:30:5e:92:45:c7:cd:7c:4c:a0:1d:6a:f9:f0: 12:98:6c:91:53:7a:95:98:5b:03:9c:a7:b4:44:15:13:fd:a9: d7:a0:f7:2f:96:ed:67:d7:e3:92:17:4d:9d:c1:fe:fb:25:7c: 2f:13:56:a0:a9:94:72:a7:e4:61:ff:98:fa:26:4a:e6:46:60: 50:28:ef:9c:e7:6a:01:41:33:82:5f:f2:11:e3:e5:80:b7:42: 2e:39:1d:b1:b6:88:7a:6a:36:f3:f2:92:92:d0:92:6d:3f:c0: 94:7f:93:1f:d3:f1:6e:43:6a:54:72:88:51:1a:f9:6c:db:07: fc:5c:dc:1f:34:38:2f:2f:d0:51:85:b0:22:d6:9e:30:b1:24: dc:11:69:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFv5lThk1gx78MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBjZGFjMzgtNjY4MS00YjA5LWI5OTItMzFkMjAzMGI4 Nzk2MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MTBjM2E0ZDgtYTkzNS00MTczLWI4MjItMDJkYmYxYjc2OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO3YPfKQ/Zf3HFD46FWIzbXieQPT8m6DwVtu kqvvWOedZ1+KogaXMSR7IXE0XjmWvLCZr+CYoWMUDuoGZkj4VMnHAjKTacKOEA1o qoQbEXoc3mOhs2DV4kE4+NHBGF76TEO7A/1rBzrvZ7RLAo1rI1QViI3sucpjWFXK FIWYg5RfCVSAsMkTLBWa3+oqtjkoAded3dZIRmCUPr8xNvvxIx11iXfLVT4ieiem VjKCepDKYfzW/caJRjNTmHjQ4w0pdbfCZTuG+Vka0b9/nrvhlVFy4QDvhv9NJ58O tkjjG0I9Y4pTI2O63UkrhAQUS+es/pVCYXI0iCGhPN2OhMGObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTSmM0CprUkmyJBbzWIdNtKtU9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGNk YWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMwYjg3OTYvZWJiZTY1MTMtNzdjMS0z MTJmLWIwMzUtYmU1NjA2ZWJhZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBjZGFjMzgtNjY4MS00YjA5LWI5 OTItMzFkMjAzMGI4Nzk2L2UwY2RhYzM4LTY2ODEtNGIwOS1iOTkyLTMxZDIwMzBi ODc5Ni5jcmwwHwYDVR0jBBgwFoAUrlCk86BeuGcsAzm4yau8K2sXNDkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lMGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQy MDMwYjg3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsI2zn1yHnOFWkCcEFySTTaQZqft4m2o8fhLqA5z7VRY5tMXUB5CGKv KqCG0r8OWIM0FehNHb4XT84lA+2NA/dVnwm5AyJ5ylysNvHa6TKgJfbBBggnowQ8 ZFbY1ifvjOZHM5xbaisQ68P/e4eNS54NMF6SRcfNfEygHWr58BKYbJFTepWYWwOc p7REFRP9qdeg9y+W7WfX45IXTZ3B/vslfC8TVqCplHKn5GH/mPomSuZGYFAo75zn agFBM4Jf8hHj5YC3Qi45HbG2iHpqNvPykpLQkm0/wJR/kx/T8W5DalRyiFEa+Wzb B/xc3B80OC8v0FGFsCLWnjCxJNwRafQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:53 2025 by rpki-client