$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa File: d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json) Hash identifier: IhZVu4w6DbPK91XDisO5uGUUlY0vSYZOzfkLaVRzVHI= Subject key identifier: 16:15:2D:10:C7:DD:1E:89:90:A7:AC:33:56:03:92:62:CA:95:C1:98 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584AF521412F0439AD52B17F18C0 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 396905 IP address blocks: 138.43.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:41:2f:04:39:ad:52:b1:7f:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=58de9e43-8bfa-4fca-ae36-0ffe50355371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:ce:8b:f1:b2:68:15:49:9e:b6:98:fb:95: 0d:7b:31:c0:05:51:a4:2f:3e:ae:d1:9f:3d:9c:be: bf:de:2d:40:f9:b5:ab:98:13:18:31:6b:54:4e:97: 52:fc:e6:6a:8e:b9:9b:b1:b9:f9:f3:95:f2:15:f5: be:4d:86:31:8b:d4:1a:39:e8:ee:18:ab:0a:69:2d: 9c:64:3a:1e:db:34:14:2e:9f:a5:de:f8:87:d2:fd: c0:12:17:66:ac:db:aa:42:35:a9:0c:36:3b:2a:3f: 26:e2:c9:97:4c:86:2e:54:69:01:55:fa:00:9e:d0: 2f:0b:52:12:f2:28:4a:d8:81:09:1d:14:db:35:d0: 40:47:0d:f9:42:b1:9f:f6:3d:05:9b:1c:97:4c:9d: 5d:83:ee:44:c7:48:83:50:c6:f1:49:b4:f7:23:00: d6:9a:d3:2c:30:f3:23:8f:12:7c:88:3d:2e:12:f0: 98:1a:26:c1:1e:5f:77:7c:70:38:d3:a7:50:1d:94: e6:22:13:e4:7e:a8:bf:14:85:cb:2c:01:34:35:e3: 61:8e:8a:0e:f8:1c:63:2f:67:88:bb:77:af:2d:66: a7:99:63:d0:62:30:9f:45:4a:4a:d2:63:ad:83:89: e7:14:9b:ba:02:05:11:96:f8:53:f9:a5:48:f8:b8: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:2D:10:C7:DD:1E:89:90:A7:AC:33:56:03:92:62:CA:95:C1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 138.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c5:3a:20:31:c3:19:4e:01:0a:90:f5:9e:f0:a6:09:13:ce: c0:0e:0b:99:3f:6a:44:90:3c:ae:41:ca:5e:d4:b1:3d:f9:f6: 8e:99:f1:cc:95:1e:65:c2:a6:8a:c9:02:09:1a:4f:d2:ba:ba: 76:db:88:6f:5a:7b:bb:48:73:13:1e:04:f7:2e:95:5a:69:63: 3a:c0:65:ca:8c:fa:8c:de:19:97:8d:df:4b:2a:41:a2:dd:4e: a5:d2:16:af:ef:10:2b:53:13:0f:21:16:1e:69:54:db:d9:c1: f8:4f:85:d4:5f:06:57:4c:bc:f3:da:88:5b:64:75:ca:e5:a2: f1:28:cb:fb:de:1b:1d:d4:b9:63:3f:6c:25:a6:2b:31:44:39: 3f:e0:59:db:a7:5f:eb:a2:a2:29:61:a2:62:d3:ab:f1:ef:83: e4:a1:ca:4e:20:91:52:a6:3c:c3:1c:16:bf:67:73:f4:bf:82: 96:a8:ee:39:58:fd:6a:ba:1c:4e:df:db:7e:57:e4:f5:fc:a6: d9:fd:8a:43:37:4e:c7:44:77:23:fc:63:9a:df:ea:ee:35:be: 4a:fe:4e:db:91:4c:2f:d2:50:f2:b4:a4:a0:44:54:0a:7f:d9: 2a:a3:57:6c:46:3c:7f:e5:ef:03:db:2e:c3:1b:fe:f1:7c:c1: 8f:33:a2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUEvBDmtUrF/GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NThkZTllNDMtOGJmYS00ZmNhLWFlMzYtMGZmZTUwMzU1MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH7Oi/GyaBVJnraY+5UNezHABVGkLz6u0Z89 nL6/3i1A+bWrmBMYMWtUTpdS/OZqjrmbsbn585XyFfW+TYYxi9QaOejuGKsKaS2c ZDoe2zQULp+l3viH0v3AEhdmrNuqQjWpDDY7Kj8m4smXTIYuVGkBVfoAntAvC1IS 8ihK2IEJHRTbNdBARw35QrGf9j0FmxyXTJ1dg+5Ex0iDUMbxSbT3IwDWmtMsMPMj jxJ8iD0uEvCYGibBHl93fHA406dQHZTmIhPkfqi/FIXLLAE0NeNhjooO+BxjL2eI u3evLWanmWPQYjCfRUpK0mOtg4nnFJu6AgURlvhT+aVI+Lj5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYVLRDH3R6JkKesM1YDkmLKlcGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrFOiAxwxlOAQqQ9Z7wpgkTzsAOC5k/akSQPK5Byl7UsT359o6Z8cyV HmXCporJAgkaT9K6unbbiG9ae7tIcxMeBPculVppYzrAZcqM+ozeGZeN30sqQaLd TqXSFq/vECtTEw8hFh5pVNvZwfhPhdRfBldMvPPaiFtkdcrlovEoy/veGx3UuWM/ bCWmKzFEOT/gWdunX+uioilhomLTq/Hvg+Shyk4gkVKmPMMcFr9nc/S/gpao7jlY /Wq6HE7f235X5PX8ptn9ikM3TsdEdyP8Y5rf6u41vkr+TtuRTC/SUPK0pKBEVAp/ 2SqjV2xGPH/l7wPbLsMb/vF8wY8zog0= -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:31 2025 by rpki-client