$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/26b2f441-d85b-3302-8f7a-8191f788c65b.roa File: 26b2f441-d85b-3302-8f7a-8191f788c65b.roa (raw, json) Hash identifier: HtJgERTWecQrs/Dux9go1nX6pF3Q6nzdcuMcg82UbK0= Subject key identifier: 2C:CB:3F:52:4C:A2:28:47:A5:AC:B0:F3:95:CB:4C:3A:4C:16:BD:8E Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584AF0F152663B02C6A5032DA840 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/26b2f441-d85b-3302-8f7a-8191f788c65b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 15267 IP address blocks: 138.129.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:52:66:3b:02:c6:a5:03:2d:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b898d6bc-b17d-4008-9f06-71453b5807f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:d0:8f:1c:a6:2b:86:be:cf:cf:2e:68:7c: 21:e8:ad:9d:29:11:b6:a7:01:7b:b1:d3:28:d1:f8: ec:b8:01:7c:f4:93:ac:d4:54:25:95:b0:87:9b:f4: 74:f4:31:4a:e8:f4:5e:05:79:f1:19:a5:51:d9:78: 03:1b:1d:c5:92:cf:2d:d3:2a:cd:f8:d3:71:de:7c: 5b:33:7a:a7:25:88:a0:bf:25:90:f3:b2:e0:b4:3a: f8:42:44:7c:8a:9f:b5:46:62:f8:fd:be:89:71:9f: d1:ce:79:d7:f8:c3:c1:bb:ae:40:13:9f:58:88:78: fc:95:c5:69:39:60:f6:da:7f:f3:22:bd:aa:93:7d: 8f:6d:04:04:f6:e2:3a:6d:e6:40:99:88:26:4c:70: de:0a:e7:34:12:58:e6:82:b9:9f:3d:34:22:45:27: 58:e0:0b:db:df:e4:89:e0:22:d2:61:0f:26:ca:d9: cb:bf:54:1f:a3:92:41:ca:04:bb:7b:59:6d:2e:db: e1:52:c3:3d:66:ea:40:56:ff:7c:9b:71:3e:f7:34: b1:d4:80:39:ba:75:f3:34:94:78:c1:c1:57:69:e6: f8:d8:dd:25:f7:06:49:be:32:82:04:ca:6e:62:62: 45:58:4a:90:85:ee:f9:52:35:48:b9:35:e1:1e:aa: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:3F:52:4C:A2:28:47:A5:AC:B0:F3:95:CB:4C:3A:4C:16:BD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/26b2f441-d85b-3302-8f7a-8191f788c65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ee:e6:e3:1e:47:98:ea:4c:90:7a:e9:ad:93:d3:53:cb:8a: 29:65:b5:ec:50:1c:56:53:81:16:58:64:b3:7d:e5:55:b1:65: f8:ef:99:6e:72:a7:d3:a1:e4:36:ac:23:23:3f:69:68:84:4a: 50:1e:2c:b4:56:27:5c:ef:87:09:44:9d:f0:9e:14:5d:44:f4: 60:74:00:40:bc:bd:27:57:7d:ab:4a:3e:ab:03:95:a7:54:7b: b8:67:38:02:0f:cb:85:6d:25:fe:ce:90:a1:25:97:31:1b:a3: b7:7e:6e:e2:2b:79:8b:48:8d:aa:dd:3c:60:70:d1:66:83:c0: bc:c4:e4:0d:2d:f0:bf:1e:c9:94:47:e4:ee:cd:f7:e0:38:bb: aa:74:69:6b:7b:c3:9f:97:d4:d6:18:90:23:ab:64:1e:fc:a1: 08:6a:68:0c:6b:aa:c7:9d:36:c4:38:71:6f:54:30:63:6c:ce: ff:cb:1b:46:af:d5:ca:44:ca:6d:07:03:95:5d:d5:33:82:25: 29:d7:41:c1:7e:cc:e5:a7:3a:45:d3:5e:96:63:13:54:8c:4d: ee:64:48:a8:8a:bf:e8:4c:91:af:95:93:81:a1:35:13:0b:b5: 5e:d3:81:fd:8c:f5:57:20:02:5a:e3:e8:02:ba:6a:68:4d:1a: d3:c8:3f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VJmOwLGpQMtqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Yjg5OGQ2YmMtYjE3ZC00MDA4LTlmMDYtNzE0NTNiNTgwN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnXQjxymK4a+z88uaHwh6K2dKRG2pwF7sdMo 0fjsuAF89JOs1FQllbCHm/R09DFK6PReBXnxGaVR2XgDGx3Fks8t0yrN+NNx3nxb M3qnJYigvyWQ87LgtDr4QkR8ip+1RmL4/b6JcZ/RznnX+MPBu65AE59YiHj8lcVp OWD22n/zIr2qk32PbQQE9uI6beZAmYgmTHDeCuc0EljmgrmfPTQiRSdY4Avb3+SJ 4CLSYQ8mytnLv1Qfo5JBygS7e1ltLtvhUsM9ZupAVv98m3E+9zSx1IA5unXzNJR4 wcFXaeb42N0l9wZJvjKCBMpuYmJFWEqQhe75UjVIuTXhHqoBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzLP1JMoihHpayw85XLTDpMFr2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvMjZiMmY0NDEtZDg1Yi0z MzAyLThmN2EtODE5MWY3ODhjNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBioEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDu5uMeR5jqTJB66a2T01PLiilltexQHFZTgRZYZLN95VWxZfjvmW5y p9Oh5DasIyM/aWiESlAeLLRWJ1zvhwlEnfCeFF1E9GB0AEC8vSdXfatKPqsDladU e7hnOAIPy4VtJf7OkKEllzEbo7d+buIreYtIjardPGBw0WaDwLzE5A0t8L8eyZRH 5O7N9+A4u6p0aWt7w5+X1NYYkCOrZB78oQhqaAxrqsedNsQ4cW9UMGNszv/LG0av 1cpEym0HA5Vd1TOCJSnXQcF+zOWnOkXTXpZjE1SMTe5kSKiKv+hMka+Vk4GhNRML tV7Tgf2M9VcgAlrj6AK6amhNGtPIPwQ= -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:41 2025 by rpki-client