$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa File: f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa (raw, json) Hash identifier: SzRRjBgA5yOTHSIppFIfQ+kf19IFHYLuhomOH4hKSLg= Subject key identifier: 58:F3:D2:58:FD:7F:AD:DC:0A:91:0A:F7:8D:7F:3F:8F:D9:C1:13:3A Certificate issuer: /CN=18c22446-23f2-433c-bff0-b35a75738dd5 Certificate serial: 010D0C9F4328584B8EACC15CE1064A6333D7C880 Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 138.43.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c1:5c:e1:06:4a:63:33:d7:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9893deae-d7fc-4806-9eed-d335a2646552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:82:4e:2d:3c:59:0c:b7:1b:a0:f6:ac:ea: 8b:d8:5f:5c:02:4a:f0:45:c9:7f:d5:89:f6:56:2b: 74:82:90:ab:8e:22:11:d2:97:d9:11:38:e5:b5:4e: 3e:59:d2:b2:88:ee:be:16:7b:26:ef:38:68:f2:5a: f9:59:39:cb:52:f8:3f:30:d6:0d:43:ca:b0:34:4b: d9:2d:b2:53:c5:a6:80:d7:3a:b5:a6:43:06:70:e8: 70:c9:b2:ff:61:e7:40:6e:4d:97:9f:da:b9:c7:b6: 8a:9a:03:11:de:da:17:55:e3:1f:81:24:57:e6:9a: 4a:b5:72:d4:f8:0a:3e:fa:a1:0c:7b:c3:da:6c:f9: 9c:82:6f:fd:7d:9a:dc:56:69:33:48:95:35:21:b6: ad:15:1d:a2:39:a7:5d:fd:c5:74:dc:6a:78:3a:67: 74:73:f2:b3:09:9d:35:08:8c:5f:bf:50:64:06:21: 21:11:d4:e3:96:78:06:92:6d:8e:81:53:61:4b:b2: 09:e9:00:80:89:8a:dd:f2:15:e5:50:19:2a:16:87: 39:b1:bb:79:ac:05:fb:c3:96:e3:c8:a4:9b:2f:f7: ec:fd:48:bf:c5:d4:e7:10:b8:0d:f7:f5:93:47:aa: a2:bc:e8:40:f8:be:ab:0e:cc:10:c8:52:7b:fa:f2: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:D2:58:FD:7F:AD:DC:0A:91:0A:F7:8D:7F:3F:8F:D9:C1:13:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl X509v3 Authority Key Identifier: keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer sbgp-ipAddrBlock: critical IPv4: 138.43.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:95:54:91:dd:2b:f9:1b:76:78:39:f9:6f:11:2b:52:9f:ab: 5f:6e:ba:07:d8:e7:18:53:cf:60:92:bd:4b:df:38:f6:16:97: eb:46:d2:fe:dd:7c:dd:84:50:af:82:c8:98:e0:7f:8b:79:d2: f3:01:21:6f:f8:9a:28:ea:11:45:2a:a3:90:e5:ba:a0:32:b0: 6d:66:1a:83:9e:1f:bb:89:47:1e:c0:65:62:e4:d9:4c:1d:f8: 3a:41:04:22:0e:79:47:b4:6f:ad:d7:38:1b:00:75:a1:02:fe: e4:b1:67:45:4a:84:2c:55:ae:9b:eb:6c:d5:1f:a4:e3:8d:36: 98:0c:92:7e:7a:2c:65:5c:af:83:95:6a:92:c0:fa:14:90:73: 40:c1:54:9d:8a:21:97:52:5d:e2:ee:d6:7d:c0:11:bb:92:73: 1d:1b:38:94:d4:70:fb:c9:51:27:59:95:0c:d6:d7:48:d7:82: 04:4e:ef:0f:a5:b6:cf:aa:9c:63:d5:b1:d8:da:00:7d:c8:98: ff:6b:3e:86:3e:22:91:fa:37:3d:b8:4d:fb:ff:e2:9d:fe:2a: 33:7c:0e:35:21:c3:89:bb:95:9d:1d:9a:15:19:fa:12:f8:59: a6:66:1f:cf:e7:32:09:cf:17:fc:00:c6:bc:b8:1e:b5:1c:c3: ce:f3:e9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMFc4QZKYzPXyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThjMjI0NDYtMjNmMi00MzNjLWJmZjAtYjM1YTc1NzM4 ZGQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTg5M2RlYWUtZDdmYy00ODA2LTllZWQtZDMzNWEyNjQ2NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUyCTi08WQy3G6D2rOqL2F9cAkrwRcl/1Yn2 Vit0gpCrjiIR0pfZETjltU4+WdKyiO6+Fnsm7zho8lr5WTnLUvg/MNYNQ8qwNEvZ LbJTxaaA1zq1pkMGcOhwybL/YedAbk2Xn9q5x7aKmgMR3toXVeMfgSRX5ppKtXLU +Ao++qEMe8PabPmcgm/9fZrcVmkzSJU1IbatFR2iOadd/cV03Gp4Omd0c/KzCZ01 CIxfv1BkBiEhEdTjlngGkm2OgVNhS7IJ6QCAiYrd8hXlUBkqFoc5sbt5rAX7w5bj yKSbL/fs/Ui/xdTnELgN9/WTR6qivOhA+L6rDswQyFJ7+vLLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjz0lj9f63cCpEK941/P4/ZwRM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMy MjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVhNzU3MzhkZDUvZjNhMDk1Y2YtZjBlYy0z MDMzLWJlNWMtNzVjZmJjNTUzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMThjMjI0NDYtMjNmMi00MzNjLWJm ZjAtYjM1YTc1NzM4ZGQ1LzE4YzIyNDQ2LTIzZjItNDMzYy1iZmYwLWIzNWE3NTcz OGRkNS5jcmwwHwYDVR0jBBgwFoAU8YT6gquJUuXD3o6nhrcsxUhSkdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMyMjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVh NzU3MzhkZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiityMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuVVJHdK/kbdng5+W8RK1Kfq19uugfY5xhTz2CSvUvfOPYWl+tG0v7d fN2EUK+CyJjgf4t50vMBIW/4mijqEUUqo5DluqAysG1mGoOeH7uJRx7AZWLk2Uwd +DpBBCIOeUe0b63XOBsAdaEC/uSxZ0VKhCxVrpvrbNUfpOONNpgMkn56LGVcr4OV apLA+hSQc0DBVJ2KIZdSXeLu1n3AEbuScx0bOJTUcPvJUSdZlQzW10jXggRO7w+l ts+qnGPVsdjaAH3ImP9rPoY+IpH6Nz24Tfv/4p3+KjN8DjUhw4m7lZ0dmhUZ+hL4 WaZmH8/nMgnPF/wAxry4HrUcw87z6fY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:12 2025 by rpki-client