$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa File: efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa (raw, json) Hash identifier: 5C8jahE4reh5bSeKhXQYbXNKXbbo/U42brpLq4aP38M= Subject key identifier: F4:83:22:49:47:BE:4D:A4:A9:69:64:6B:77:F8:C8:2C:C3:C4:DE:B2 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B5DD1E7010626CC7C83E7DCC0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 200017 IP address blocks: 138.84.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e7:01:06:26:cc:7c:83:e7:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=b375c4e7-f14f-41cb-823b-db2de6d3b4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:4b:1b:7b:4a:18:b4:da:7b:4b:4e:8f:61: b9:27:5e:c4:03:24:fa:18:42:37:24:1e:e8:82:14: d8:c1:9f:de:82:09:ab:19:29:fa:98:d3:62:22:15: 1c:6a:42:00:ef:2c:ac:e0:37:0c:0d:89:04:58:31: 1b:fa:02:9e:e7:3f:73:c1:b6:4a:11:ef:46:87:14: d8:6e:de:2b:08:27:9f:6d:1a:bf:46:77:97:a0:23: 37:2d:45:8d:76:3a:97:f0:c5:ae:0b:cf:a4:e3:a3: 4b:b5:89:40:cf:ca:6a:13:69:b2:8a:b6:93:70:72: 61:32:52:61:1c:62:97:ae:7d:83:4d:ed:94:cb:fa: 09:19:aa:20:55:f7:62:d7:df:db:2a:03:b6:c5:ea: 58:de:ca:c8:62:53:97:81:32:2d:18:b9:48:5c:e9: 0d:54:5f:64:73:e9:69:de:78:ab:0d:6d:bc:ac:9a: 2c:52:1a:89:7e:bd:77:66:65:fa:65:8a:03:c9:1b: cb:41:40:32:2a:24:1f:6e:8a:e4:7e:e9:4a:f4:dd: d1:62:af:c4:f4:a8:50:c6:6c:35:bb:00:91:8a:11: f8:af:52:36:fd:44:7e:0f:8f:ea:d5:8d:7b:11:ae: d5:a7:cf:7c:38:92:19:ee:a1:2a:be:29:84:2e:a0: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:83:22:49:47:BE:4D:A4:A9:69:64:6B:77:F8:C8:2C:C3:C4:DE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 138.84.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:74:8d:2c:46:98:80:06:34:da:aa:01:d1:55:3e:e0:2e:5a: a8:68:2a:29:a8:d8:c4:d7:b8:73:a5:2f:22:ab:54:42:18:4a: 41:d8:93:8c:ba:4f:70:7b:c8:28:b5:28:82:4e:97:80:70:98: f1:99:fb:29:7c:01:ab:7f:d4:df:eb:5c:25:53:e2:cc:d1:81: f8:7a:89:ed:cd:3d:bc:8b:66:8c:a4:33:5b:3a:69:1e:fa:9f: b0:4a:c3:e1:ad:9c:20:7f:fc:23:ad:8b:10:2b:10:23:2f:cd: 24:ac:04:e6:29:3e:ca:bd:02:ff:09:a4:05:f6:d3:58:14:bc: 10:6b:6f:c0:bc:d5:9e:02:22:23:fc:35:1d:11:b5:a6:85:40: b9:7f:f7:dc:ab:09:fa:89:fc:17:90:d2:98:bc:c2:bc:50:3c: c8:3d:91:5c:15:ec:44:07:32:a6:8c:73:ad:6b:bb:7a:7e:43: 42:b0:40:e4:ff:b2:db:93:ba:49:0b:c8:46:d3:04:3e:71:0d: fe:4f:c5:7d:2c:09:5e:07:ec:88:57:8f:12:2c:85:63:07:bd: ef:4f:7d:c0:dd:99:ec:93:17:7a:e6:95:08:98:02:5e:f5:25: 20:50:42:cf:38:48:a0:f5:14:f6:56:42:cb:08:9c:39:4c:64: 21:37:f6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0ecBBibMfIPn3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YjM3NWM0ZTctZjE0Zi00MWNiLTgyM2ItZGIyZGU2ZDNiNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo15LG3tKGLTae0tOj2G5J17EAyT6GEI3JB7o ghTYwZ/eggmrGSn6mNNiIhUcakIA7yys4DcMDYkEWDEb+gKe5z9zwbZKEe9GhxTY bt4rCCefbRq/RneXoCM3LUWNdjqX8MWuC8+k46NLtYlAz8pqE2myiraTcHJhMlJh HGKXrn2DTe2Uy/oJGaogVfdi19/bKgO2xepY3srIYlOXgTItGLlIXOkNVF9kc+lp 3nirDW28rJosUhqJfr13ZmX6ZYoDyRvLQUAyKiQfborkfulK9N3RYq/E9KhQxmw1 uwCRihH4r1I2/UR+D4/q1Y17Ea7Vp898OJIZ7qEqvimELqCMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSDIklHvk2kqWlka3f4yCzDxN6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZWZiZjFiNGEtMWIzMS0z OWZkLWJmZDAtMjg2ZGY1NzIyOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAilTLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ0jSxGmIAGNNqqAdFVPuAuWqhoKimo2MTXuHOlLyKrVEIYSkHYk4y6 T3B7yCi1KIJOl4BwmPGZ+yl8Aat/1N/rXCVT4szRgfh6ie3NPbyLZoykM1s6aR76 n7BKw+GtnCB//COtixArECMvzSSsBOYpPsq9Av8JpAX201gUvBBrb8C81Z4CIiP8 NR0RtaaFQLl/99yrCfqJ/BeQ0pi8wrxQPMg9kVwV7EQHMqaMc61ru3p+Q0KwQOT/ stuTukkLyEbTBD5xDf5PxX0sCV4H7IhXjxIshWMHve9PfcDdmeyTF3rmlQiYAl71 JSBQQs84SKD1FPZWQssInDlMZCE39ow= -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:15 2025 by rpki-client