$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa File: 8011e5b3-48f4-34a8-9932-e07529862633.roa (raw, json) Hash identifier: B4Qk0QLulBdhwbE+IRg77GU55mv75sVb7H6vVcpJpDQ= Subject key identifier: 00:0E:2F:FD:85:C0:90:B3:CC:F5:AB:7A:2E:06:80:30:B8:E7:4F:FF Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B38219BA2F61D185460A02C60 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 138.32.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9b:a2:f6:1d:18:54:60:a0:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=14301401-9b25-4a33-b4bc-190d51d63207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:9d:8e:ff:2a:01:e0:0d:97:a0:c3:7d:06: a4:1b:d6:99:8b:14:fe:70:79:63:92:17:95:76:be: 48:00:38:eb:90:80:be:a0:38:ea:b4:3a:2f:7c:92: b5:5d:8f:e4:ad:b0:8b:ff:85:bd:5c:f2:60:b1:3d: 36:57:16:a5:ab:35:21:23:79:ff:41:02:08:af:3b: a3:2a:af:73:ec:8d:ab:5e:51:bf:e1:9e:37:bc:0f: c7:d8:9a:ed:cf:c2:35:e7:05:32:b5:be:27:ba:cd: 45:5e:43:f2:77:11:60:2f:85:98:52:35:2a:fd:4b: d2:1c:c2:2b:4a:22:12:b7:78:c1:69:bd:19:1d:29: e1:0e:80:76:6a:1d:96:76:ce:4f:39:39:e7:18:96: c8:1d:c5:63:b3:dc:34:5d:27:f6:24:08:56:47:36: af:d9:00:f6:e7:15:66:f6:1a:03:2c:32:99:e5:ed: e6:0e:38:5b:52:9b:d1:46:c2:47:6c:8b:85:3c:b8: 32:a3:18:e3:a8:e3:b1:21:f0:2d:74:3b:26:9b:38: 78:4a:ed:43:c1:48:1e:38:8b:04:4d:bb:33:df:c0: 75:21:c0:c1:78:94:13:3a:bb:49:90:68:34:71:96: bf:7a:e6:3c:d2:d0:6d:94:4c:01:c6:22:20:9c:df: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:2F:FD:85:C0:90:B3:CC:F5:AB:7A:2E:06:80:30:B8:E7:4F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9a:44:02:96:3c:bb:30:fd:19:14:34:9b:3c:5e:c2:84:59: 7b:a2:ff:96:4a:bc:bc:98:0b:11:0e:cf:9c:dd:e8:88:33:4d: 04:23:da:d8:90:03:df:c3:c9:e6:b1:6c:8e:27:50:7a:93:ef: 6a:7a:c0:08:3c:bb:1d:03:63:c8:64:7c:b2:2a:9e:93:db:94: 17:24:c5:f6:07:07:a5:8f:f0:f4:b3:35:dd:55:a6:0f:fc:4b: 2c:0f:ed:78:b5:0b:e3:9b:34:c9:fb:c9:ed:87:06:13:d6:b7: 25:64:be:4b:a5:03:23:88:87:43:43:af:b3:38:d6:f5:9e:b3: cc:f0:70:84:1d:12:15:71:ac:5c:b3:17:ef:55:a8:35:63:34: f6:68:07:52:8d:01:e4:71:ad:37:0b:de:54:be:a4:bc:30:57: 71:dd:ec:52:9b:f6:8e:5d:42:fa:2c:c1:d9:87:07:92:23:b7: d1:f2:cf:28:1a:de:c8:71:d1:33:37:e2:2a:a6:ee:5a:38:d1: d2:5d:a6:79:22:0d:93:33:ef:52:15:9f:1a:ad:2e:12:18:c9: 8f:2e:df:62:af:e2:f2:53:97:2c:66:a1:a8:99:31:b5:3b:08: c9:23:96:9e:2b:87:9b:86:99:ec:38:0c:b2:b4:99:8e:7a:70: ae:7b:3f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZui9h0YVGCgLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MTQzMDE0MDEtOWIyNS00YTMzLWI0YmMtMTkwZDUxZDYzMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuOdjv8qAeANl6DDfQakG9aZixT+cHljkheV dr5IADjrkIC+oDjqtDovfJK1XY/krbCL/4W9XPJgsT02VxalqzUhI3n/QQIIrzuj Kq9z7I2rXlG/4Z43vA/H2Jrtz8I15wUytb4nus1FXkPydxFgL4WYUjUq/UvSHMIr SiISt3jBab0ZHSnhDoB2ah2Wds5POTnnGJbIHcVjs9w0XSf2JAhWRzav2QD25xVm 9hoDLDKZ5e3mDjhbUpvRRsJHbIuFPLgyoxjjqOOxIfAtdDsmmzh4Su1DwUgeOIsE Tbsz38B1IcDBeJQTOrtJkGg0cZa/euY80tBtlEwBxiIgnN+1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAOL/2FwJCzzPWrei4GgDC450//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvODAxMWU1YjMtNDhmNC0z NGE4LTk5MzItZTA3NTI5ODYyNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWaRAKWPLsw/RkUNJs8XsKEWXui/5ZKvLyYCxEOz5zd6IgzTQQj2tiQ A9/DyeaxbI4nUHqT72p6wAg8ux0DY8hkfLIqnpPblBckxfYHB6WP8PSzNd1Vpg/8 SywP7Xi1C+ObNMn7ye2HBhPWtyVkvkulAyOIh0NDr7M41vWes8zwcIQdEhVxrFyz F+9VqDVjNPZoB1KNAeRxrTcL3lS+pLwwV3Hd7FKb9o5dQvoswdmHB5Ijt9Hyzyga 3shx0TM34iqm7lo40dJdpnkiDZMz71IVnxqtLhIYyY8u32Kv4vJTlyxmoaiZMbU7 CMkjlp4rh5uGmew4DLK0mY56cK57P6s= -----END CERTIFICATE-----Generated at Mon Oct 20 12:57:14 2025 by rpki-client