$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa File: a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa (raw, json) Hash identifier: omvnWkNb1knII3/NWTx+Rmx4nVvlte4jOy1UkIEzcAo= Subject key identifier: 01:B3:E5:8F:DD:4C:6B:43:15:AA:1B:45:0C:98:33:AD:78:81:72:23 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584AF0F153DF843F840CE2F2F040 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 15267 IP address blocks: 138.129.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:53:df:84:3f:84:0c:e2:f2:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=53322f95-069b-4d30-9d45-a9961accc4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:c9:fa:47:cc:10:ac:a4:e4:78:8c:97:76: 33:f5:d4:a0:3c:83:56:15:5c:db:42:81:a1:fe:5f: 85:1c:31:ee:ce:a8:56:e8:be:50:25:e9:9c:0e:ad: 19:57:49:b1:41:4a:23:a4:ae:b4:06:af:b3:23:70: cf:15:f1:db:25:bb:52:ed:9a:0c:e8:9b:a4:a2:fb: 55:d6:ee:22:b7:23:1a:63:e3:0f:9f:bb:26:18:1d: fb:06:eb:be:77:10:bb:a4:3c:c7:0c:ef:41:ab:ac: 4f:8c:fa:c6:91:98:bd:9c:cb:96:15:65:02:49:40: a0:0f:79:1c:66:a5:02:62:00:a8:2a:0d:a5:99:23: de:d3:ba:99:fa:f0:43:4d:77:75:4f:7e:52:20:df: f0:a3:0a:7a:ed:0f:2e:69:be:4a:47:b3:58:2f:af: 8c:44:b0:a7:f1:48:ce:fe:b8:b4:32:08:d2:c6:a1: 50:5a:bb:53:eb:34:83:17:f0:4a:2a:34:68:96:fc: 5c:2d:a6:9f:1c:a7:0e:30:a8:fd:6e:71:5a:3a:50: 1c:86:03:35:b7:68:3c:60:13:31:d2:b5:f8:19:b5: 16:5a:c4:e6:a7:bc:41:10:92:60:55:b5:c1:80:2a: cb:ca:88:77:1e:c2:f7:9d:0d:3a:bf:6c:58:d6:37: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:E5:8F:DD:4C:6B:43:15:AA:1B:45:0C:98:33:AD:78:81:72:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6c:9c:e1:33:03:d4:6e:30:22:f0:ad:c4:2b:ba:a5:44:cb: d6:82:17:0e:b1:75:82:7a:c0:7f:23:0b:07:6f:36:4f:81:8b: ce:10:cd:23:c2:03:ee:a6:ba:c1:20:0d:7d:5b:c2:f6:ed:da: 52:ec:e5:d7:c5:c3:1c:59:dc:4e:56:40:e2:94:1b:d9:d9:d3: 47:26:c0:3d:97:bb:8d:c7:3f:f1:e7:d7:5b:45:8b:c4:e5:b8: 1e:1b:cb:35:c8:ba:cd:8b:4b:69:55:80:9a:84:6c:0d:c5:ac: 2b:7a:ef:cc:c9:61:47:b0:7c:23:72:a2:63:4f:02:22:86:a9: 79:da:b0:db:28:78:78:7c:b1:b3:17:83:65:70:fa:fb:e1:b1: f7:a5:b6:ed:72:57:51:e5:3b:72:5b:3a:81:03:ee:53:78:1f: 08:4e:da:10:e1:72:40:35:e7:2d:eb:17:f9:a2:dd:00:9c:fe: a9:9a:30:c6:c4:76:93:d1:1e:bf:25:92:26:9a:f2:ed:43:8d: 8c:dc:ff:06:a9:88:4d:4b:5b:f9:d9:f5:40:ca:93:9f:ad:c0: 95:5b:4b:8a:eb:28:be:a3:34:84:36:31:16:a1:a6:6a:c5:a3: 67:06:e3:34:c3:07:79:c5:aa:f7:a2:c0:79:35:ad:ef:5c:62: d5:82:96:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VPfhD+EDOLy8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTMzMjJmOTUtMDY5Yi00ZDMwLTlkNDUtYTk5NjFhY2NjNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbnJ+kfMEKyk5HiMl3Yz9dSgPINWFVzbQoGh /l+FHDHuzqhW6L5QJemcDq0ZV0mxQUojpK60Bq+zI3DPFfHbJbtS7ZoM6JukovtV 1u4ityMaY+MPn7smGB37Buu+dxC7pDzHDO9Bq6xPjPrGkZi9nMuWFWUCSUCgD3kc ZqUCYgCoKg2lmSPe07qZ+vBDTXd1T35SIN/wowp67Q8uab5KR7NYL6+MRLCn8UjO /ri0MgjSxqFQWrtT6zSDF/BKKjRolvxcLaafHKcOMKj9bnFaOlAchgM1t2g8YBMx 0rX4GbUWWsTmp7xBEJJgVbXBgCrLyoh3HsL3nQ06v2xY1jfCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGz5Y/dTGtDFaobRQyYM614gXIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvYTk1YmE4MmItZWZiNC0z NmU2LWFjYjctYTVhYzE0ZGQzY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFioEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlsnOEzA9RuMCLwrcQruqVEy9aCFw6xdYJ6wH8jCwdvNk+Bi84QzSPC A+6musEgDX1bwvbt2lLs5dfFwxxZ3E5WQOKUG9nZ00cmwD2Xu43HP/Hn11tFi8Tl uB4byzXIus2LS2lVgJqEbA3FrCt678zJYUewfCNyomNPAiKGqXnasNsoeHh8sbMX g2Vw+vvhsfeltu1yV1HlO3JbOoED7lN4HwhO2hDhckA15y3rF/mi3QCc/qmaMMbE dpPRHr8lkiaa8u1DjYzc/wapiE1LW/nZ9UDKk5+twJVbS4rrKL6jNIQ2MRahpmrF o2cG4zTDB3nFqveiwHk1re9cYtWCloA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:00:19 2025 by rpki-client